Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa
File:                     3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa (raw, json)
Hash identifier:          luN5PPhyWbUBn9ufFNQdFxkqfYULJfj3I3r8O6NfRnE=
Subject key identifier:   9A:B3:A7:21:DF:B6:79:FB:D8:D9:31:B7:A6:15:F4:BA:D8:6C:D1:C4
Certificate issuer:       /CN=1C6519ED9E5FBAD331082D21DE33E5958EDD80C4
Certificate serial:       0926873DFF4384F7C878A1C1D77CE856D0CB0DC1
Authority key identifier: 1C:65:19:ED:9E:5F:BA:D3:31:08:2D:21:DE:33:E5:95:8E:DD:80:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa
Signing time:             Thu 06 Mar 2025 11:40:30 +0000
ROA not before:           Thu 06 Mar 2025 11:35:30 +0000
ROA not after:            Thu 05 Mar 2026 11:40:30 +0000
asID:                     263472
IP address blocks:        132.255.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.crl
                          rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:87:3d:ff:43:84:f7:c8:78:a1:c1:d7:7c:e8:56:d0:cb:0d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6519ED9E5FBAD331082D21DE33E5958EDD80C4
        Validity
            Not Before: Mar  6 11:35:30 2025 GMT
            Not After : Mar  5 11:40:30 2026 GMT
        Subject: CN=9AB3A721DFB679FBD8D931B7A615F4BAD86CD1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:c5:18:bf:75:26:9d:68:4b:45:90:fe:ce:
                    fb:c1:2d:f1:02:1a:85:90:13:52:cc:ed:6d:78:0b:
                    78:c7:56:21:10:c6:2a:6e:54:b6:46:a3:a9:a2:ca:
                    6f:53:66:dd:ee:62:fa:c8:02:63:58:b5:55:2c:c4:
                    90:28:b0:5e:45:8e:00:5c:d6:d1:1e:92:30:28:aa:
                    0f:9b:4e:cb:51:b5:00:99:0b:7f:07:42:15:16:51:
                    bf:26:7a:25:99:15:0c:6b:e5:7f:00:bf:42:65:46:
                    5f:71:66:d3:4f:bc:7d:8d:d0:23:1b:13:28:65:20:
                    41:52:6f:95:4d:e4:4e:79:18:be:57:da:f0:f2:06:
                    31:84:5e:ca:3d:72:b0:9f:43:1a:96:1f:80:de:3f:
                    59:84:54:7f:a9:d9:a1:f5:b5:e7:eb:97:13:1e:f6:
                    51:2f:c4:4d:23:58:05:c5:1f:d0:a9:17:3a:a8:98:
                    a1:5b:d2:ec:41:ba:71:51:db:a0:1d:eb:09:33:6f:
                    ab:06:92:c9:0b:64:25:ea:ab:a2:4b:95:fc:dc:27:
                    61:fc:0e:35:a3:be:ac:df:98:3e:d3:b1:f1:7a:ed:
                    df:d5:45:b8:76:43:a1:a2:4a:25:0a:fe:12:71:47:
                    81:2f:46:22:be:2a:3d:63:e0:c8:e6:bb:12:9b:69:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B3:A7:21:DF:B6:79:FB:D8:D9:31:B7:A6:15:F4:BA:D8:6C:D1:C4
            X509v3 Authority Key Identifier:
                keyid:1C:65:19:ED:9E:5F:BA:D3:31:08:2D:21:DE:33:E5:95:8E:DD:80:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3133322e3235352e3133362e302f32322d3234203d3e20323633343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:2e:5a:40:55:73:c7:3c:94:30:55:1b:e6:45:10:dc:3f:9c:
         c2:82:e1:87:6a:2c:c9:ae:4f:55:97:e1:36:02:61:85:82:4d:
         27:3c:e5:39:9d:62:45:d4:a9:1c:a2:7b:3f:74:f5:b2:a1:07:
         3a:0d:51:77:cf:6c:34:b8:f0:d6:86:f3:68:45:b8:c9:75:dd:
         29:b8:2f:bc:78:51:f0:a3:e8:b7:3d:2a:31:36:f3:8c:10:39:
         03:6c:19:c7:87:eb:2e:3e:e6:3c:6e:02:4a:ae:13:a0:6e:10:
         b9:92:0d:01:44:72:ae:41:21:ff:44:71:ca:bf:92:1e:44:e4:
         94:0a:e2:f1:ba:ab:86:11:99:f8:dd:1b:ed:b5:a3:1d:c0:dc:
         98:52:cf:a0:01:03:42:54:b6:25:f5:6c:2f:57:c4:fc:6c:fe:
         82:5b:40:59:34:bf:84:32:99:28:fd:19:a3:97:1b:76:13:c2:
         4b:b1:ff:27:6d:dd:8a:13:2a:e1:a8:bb:85:00:06:2a:39:a0:
         d2:b0:95:da:88:49:3c:cc:c0:77:b1:de:3d:e6:f8:ce:8e:66:
         34:8a:f8:1c:4f:93:ae:50:ef:8e:f8:0e:f6:64:65:ee:46:24:
         09:18:7f:03:61:fb:67:f9:d7:62:39:12:85:a0:9a:0b:83:11:
         d1:3f:51:07
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCSaHPf9DhPfIeKHB13zoVtDLDcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2NTE5RUQ5RTVGQkFEMzMxMDgyRDIxREUzM0U1OTU4
RUREODBDNDAeFw0yNTAzMDYxMTM1MzBaFw0yNjAzMDUxMTQwMzBaMDMxMTAvBgNV
BAMTKDlBQjNBNzIxREZCNjc5RkJEOEQ5MzFCN0E2MTVGNEJBRDg2Q0QxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkcUYv3UmnWhLRZD+zvvBLfEC
GoWQE1LM7W14C3jHViEQxipuVLZGo6miym9TZt3uYvrIAmNYtVUsxJAosF5FjgBc
1tEekjAoqg+bTstRtQCZC38HQhUWUb8meiWZFQxr5X8Av0JlRl9xZtNPvH2N0CMb
EyhlIEFSb5VN5E55GL5X2vDyBjGEXso9crCfQxqWH4DeP1mEVH+p2aH1tefrlxMe
9lEvxE0jWAXFH9CpFzqomKFb0uxBunFR26Ad6wkzb6sGkskLZCXqq6JLlfzcJ2H8
DjWjvqzfmD7TsfF67d/VRbh2Q6GiSiUK/hJxR4EvRiK+Kj1j4MjmuxKbaXGpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmrOnId+2efvY2TG3phX0uths0cQwHwYDVR0j
BBgwFoAUHGUZ7Z5futMxCC0h3jPllY7dgMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxuWWhMVnBVS1VQZk5pRVluZnl0SGNURlFHemJyM05wd2JOb1FRNnRp
Q0gvMS8xQzY1MTlFRDlFNUZCQUQzMzEwODJEMjFERTMzRTU5NThFREQ4MEM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNjUxOUVEOUU1RkJBRDMz
MTA4MkQyMURFMzNFNTk1OEVERDgwQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMblloTFZwVUtVUGZOaUVZbmZ5dEhjVEZRR3picjNOcHdiTm9RUTZ0aUNILzEv
MzEzMzMyMmUzMjM1MzUyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/iDANBgkqhkiG9w0BAQsFAAOCAQEA1i5a
QFVzxzyUMFUb5kUQ3D+cwoLhh2osya5PVZfhNgJhhYJNJzzlOZ1iRdSpHKJ7P3T1
sqEHOg1Rd89sNLjw1obzaEW4yXXdKbgvvHhR8KPotz0qMTbzjBA5A2wZx4frLj7m
PG4CSq4ToG4QuZINAURyrkEh/0Rxyr+SHkTklAri8bqrhhGZ+N0b7bWjHcDcmFLP
oAEDQlS2JfVsL1fE/Gz+gltAWTS/hDKZKP0Zo5cbdhPCS7H/J23dihMq4ai7hQAG
Kjmg0rCV2ohJPMzAd7HePeb4zo5mNIr4HE+TrlDvjvgO9mRl7kYkCRh/A2H7Z/nX
YjkShaCaC4MR0T9RBw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:33:45 2025 by rpki-client