Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
File:                     3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          loryBBnRoI838DX1HT9b2dWqBg6cpy3QhXLAn1D7dG0=
Subject key identifier:   7A:BD:49:C8:87:56:7A:1A:72:E8:DA:EC:3A:5B:AF:1A:6A:92:82:AB
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       35E11322BB931774E5857C59B3FBC4F7769B3705
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
Signing time:             Fri 21 Mar 2025 18:52:21 +0000
ROA not before:           Fri 21 Mar 2025 18:47:21 +0000
ROA not after:            Fri 20 Mar 2026 18:52:21 +0000
asID:                     271573
IP address blocks:        201.131.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:13:22:bb:93:17:74:e5:85:7c:59:b3:fb:c4:f7:76:9b:37:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Mar 21 18:47:21 2025 GMT
            Not After : Mar 20 18:52:21 2026 GMT
        Subject: CN=7ABD49C887567A1A72E8DAEC3A5BAF1A6A9282AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:56:de:43:53:03:bc:16:09:b6:1f:ca:fc:
                    e9:f2:02:ef:ec:40:66:e8:5e:90:af:3f:b5:d8:14:
                    59:c9:82:37:a5:2c:9b:d9:ea:74:1c:df:5b:fa:7e:
                    ad:95:d2:3d:c3:33:28:5a:51:84:d8:f0:f8:35:b3:
                    f2:10:29:4b:01:ac:cd:a1:00:f2:e3:69:36:98:60:
                    12:93:96:85:4f:9c:02:ef:39:6e:c5:80:93:33:c8:
                    04:11:7c:08:4c:77:40:fc:96:d6:b9:18:0a:44:55:
                    04:5e:c7:9c:83:6c:ba:2f:c1:d0:ce:11:98:58:b2:
                    75:27:8e:a7:89:46:12:d8:8c:27:dd:47:c9:5c:ca:
                    a9:d3:91:3c:aa:c0:37:2b:44:e6:2a:d5:eb:fc:72:
                    b5:59:d3:ba:f8:5b:83:93:67:ba:b4:98:38:f6:11:
                    0e:2e:13:f2:20:81:f0:cf:d3:da:d4:88:a6:60:f9:
                    71:b1:c0:d2:d9:21:78:76:40:35:1a:16:3d:65:10:
                    96:ee:c3:3c:ca:df:6b:c7:9d:bb:7e:d1:d7:3a:39:
                    dd:f7:bf:23:6f:20:d1:55:f7:35:af:26:de:f2:74:
                    0e:b1:15:46:a5:14:9c:f7:81:2e:ba:af:b1:8b:fc:
                    28:ef:80:a6:47:bf:1f:88:74:ae:2b:dc:89:de:b6:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BD:49:C8:87:56:7A:1A:72:E8:DA:EC:3A:5B:AF:1A:6A:92:82:AB
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:94:7c:db:a4:30:f0:38:90:87:ee:ee:21:1c:0a:16:3b:
         78:38:36:5f:76:e6:00:11:5d:28:c4:6f:17:07:8f:d7:45:82:
         fe:dc:33:1e:08:f5:84:0e:c9:8f:f7:f4:84:c6:89:56:17:74:
         fb:b0:a3:2e:cd:55:5d:24:32:9d:83:30:a9:46:43:48:03:1d:
         b8:11:5b:8d:17:c8:0d:b8:08:e2:66:13:50:bf:b6:f9:b9:f1:
         ac:a3:99:a9:16:a2:59:ce:62:4b:ad:9c:37:58:91:47:4f:cb:
         69:5c:61:50:67:5f:42:8e:c7:f8:eb:0c:cc:6c:82:f2:31:f1:
         06:97:2f:87:d0:24:27:1e:89:57:a0:d4:e8:a5:40:54:0a:37:
         fd:5d:f4:5b:52:26:f3:a1:20:9f:ad:4e:ae:09:c8:a5:63:61:
         53:e5:4e:34:03:53:65:bb:10:a0:7d:88:09:3a:43:fa:bf:8b:
         f3:ff:34:ca:83:0e:1e:fa:db:05:93:91:f5:21:35:d0:81:56:
         47:83:27:4b:dd:6b:63:83:29:15:95:90:29:80:cc:7d:e3:99:
         11:dc:44:34:a8:b9:23:f8:27:cb:2c:89:b2:04:c8:b9:60:a4:
         e5:d9:97:9f:9f:a4:23:24:97:ba:7b:9a:eb:ff:c3:fa:88:a7:
         ab:01:0e:e1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNeETIruTF3TlhXxZs/vE93abNwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzQTlCNkMxRjZBNjk0NDlDQTIxRkQ3ODBGNEY4MDFG
NkNFNkIwNjAeFw0yNTAzMjExODQ3MjFaFw0yNjAzMjAxODUyMjFaMDMxMTAvBgNV
BAMTKDdBQkQ0OUM4ODc1NjdBMUE3MkU4REFFQzNBNUJBRjFBNkE5MjgyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMO1beQ1MDvBYJth/K/OnyAu/s
QGboXpCvP7XYFFnJgjelLJvZ6nQc31v6fq2V0j3DMyhaUYTY8Pg1s/IQKUsBrM2h
APLjaTaYYBKTloVPnALvOW7FgJMzyAQRfAhMd0D8lta5GApEVQRex5yDbLovwdDO
EZhYsnUnjqeJRhLYjCfdR8lcyqnTkTyqwDcrROYq1ev8crVZ07r4W4OTZ7q0mDj2
EQ4uE/IggfDP09rUiKZg+XGxwNLZIXh2QDUaFj1lEJbuwzzK32vHnbt+0dc6Od33
vyNvINFV9zWvJt7ydA6xFUalFJz3gS66r7GL/CjvgKZHvx+IdK4r3InetsLFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUer1JyIdWehpy6NrsOluvGmqSgqswHwYDVR0j
BBgwFoAU7DqbbB9qaUScoh/XgPT4AfbOawYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1
M3AvMC9FQzNBOUI2QzFGNkE2OTQ0OUNBMjFGRDc4MEY0RjgwMUY2Q0U2QjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDM0E5QjZDMUY2QTY5NDQ5
Q0EyMUZENzgwRjRGODAxRjZDRTZCMDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZoQnNxVVRLVTdWS3prQmNKUVJwRE5DaWdyVGdjYlZYWnB2V3pOM25hNTNwLzAv
MzIzMDMxMmUzMTMzMzEyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmDajANBgkqhkiG9w0BAQsFAAOCAQEAfDWU
fNukMPA4kIfu7iEcChY7eDg2X3bmABFdKMRvFweP10WC/twzHgj1hA7Jj/f0hMaJ
Vhd0+7CjLs1VXSQynYMwqUZDSAMduBFbjRfIDbgI4mYTUL+2+bnxrKOZqRaiWc5i
S62cN1iRR0/LaVxhUGdfQo7H+OsMzGyC8jHxBpcvh9AkJx6JV6DU6KVAVAo3/V30
W1Im86Egn61OrgnIpWNhU+VONANTZbsQoH2ICTpD+r+L8/80yoMOHvrbBZOR9SE1
0IFWR4MnS91rY4MpFZWQKYDMfeOZEdxENKi5I/gnyyyJsgTIuWCk5dmXn5+kIySX
unua6//D+oinqwEO4Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:49 2025 by rpki-client