Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38312e302f32342d3234203d3e203233373634.roa
File:                     3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (raw, json)
Hash identifier:          Cv6qQWooQOXaaHnTX6D1c8hJkpnOufviWyZlGxv++t8=
Subject key identifier:   92:0C:AD:F2:1F:A5:83:F6:30:F2:B3:D6:1E:A2:81:1E:3C:6F:B8:D1
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       20418834440A143DE453467A0C5E5B07397D74AF
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38312e302f32342d3234203d3e203233373634.roa
Signing time:             Fri 03 Oct 2025 18:02:18 +0000
ROA not before:           Fri 03 Oct 2025 17:57:18 +0000
ROA not after:            Fri 02 Oct 2026 18:02:18 +0000
asID:                     23764
IP address blocks:        131.221.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 10:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:88:34:44:0a:14:3d:e4:53:46:7a:0c:5e:5b:07:39:7d:74:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Oct  3 17:57:18 2025 GMT
            Not After : Oct  2 18:02:18 2026 GMT
        Subject: CN=920CADF21FA583F630F2B3D61EA2811E3C6FB8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:d9:a3:05:dd:4a:16:2c:e6:55:d0:52:4b:
                    e6:e9:37:32:e6:c4:83:a0:90:fb:ba:84:2e:01:dd:
                    36:2b:7a:ea:a6:4f:24:03:19:f4:38:e4:1e:a8:20:
                    23:6c:d2:75:27:ab:f2:38:da:7f:31:ab:bc:75:c3:
                    18:30:cd:fc:96:4a:f8:87:34:24:ce:c6:88:7d:1c:
                    dc:38:02:13:2a:d1:4d:75:23:09:34:04:c5:3d:c5:
                    1d:37:27:80:c4:fe:07:e2:ce:eb:20:6f:13:7a:f6:
                    69:e1:7e:1b:6b:71:e3:48:c8:b0:e8:9f:28:3b:dd:
                    71:90:ea:ea:c9:ae:b3:a7:e7:67:72:cc:3f:87:70:
                    41:a0:84:cd:31:59:01:9e:d5:86:34:bc:81:2f:01:
                    e3:50:64:97:21:38:f5:1f:96:ec:5c:0f:3c:be:bb:
                    b7:1e:cc:65:2d:52:57:f2:08:90:81:43:ac:31:b1:
                    0b:4e:c4:f7:16:22:5d:2f:5b:45:d7:b4:d6:cc:2d:
                    c9:cc:b2:d5:3a:a5:e2:48:38:c1:1e:ea:1d:00:39:
                    e1:e8:03:41:7a:d2:fc:c9:73:04:8f:95:1c:d0:3e:
                    d9:ec:ad:30:cc:63:60:f1:e4:09:05:15:7f:7d:62:
                    7d:4d:cb:5d:5c:16:b8:90:a9:7f:81:bc:63:b4:93:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:AD:F2:1F:A5:83:F6:30:F2:B3:D6:1E:A2:81:1E:3C:6F:B8:D1
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38312e302f32342d3234203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:43:e5:44:d3:35:e7:51:6a:8b:7e:fa:3a:ec:d9:ab:93:ea:
         1b:77:d4:1e:cc:00:a9:0e:0c:e3:fa:89:07:31:54:37:e7:ca:
         d5:7b:53:ad:c7:a3:af:2b:c6:5b:39:e2:b4:8f:c2:56:92:86:
         27:da:3d:9f:67:01:3d:d3:42:53:5c:40:e2:a7:7b:00:4d:d7:
         f8:0d:94:b2:7c:1d:77:79:ad:f9:5e:bb:4a:2a:fe:8c:eb:a6:
         8a:80:94:83:a0:05:1a:3b:5d:4b:4b:72:4e:a1:55:20:e4:20:
         d9:c9:59:b6:45:4e:63:0e:37:b1:77:1c:d1:3a:03:96:1d:06:
         4d:dd:ce:16:d7:b2:58:bd:2f:80:8b:4f:56:d9:e7:2a:3f:60:
         39:de:24:a9:ef:6c:30:c8:5f:07:4a:52:90:04:62:e8:10:99:
         e5:b3:fa:7e:57:6d:57:e3:a4:1a:ac:ce:47:9c:c0:7d:7b:3e:
         bd:28:7c:57:a9:00:6c:c1:1f:ee:00:e0:55:8e:6b:b2:19:ff:
         e7:9a:e9:51:8b:29:22:b0:20:32:77:8a:72:fc:35:f9:bc:df:
         4d:75:b5:9f:73:53:9e:5b:3c:0b:06:88:ff:31:0e:96:5e:95:
         61:30:df:35:52:fd:44:c9:3b:88:e5:49:dc:27:04:e8:9f:b0:
         85:3d:7a:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIEGINEQKFD3kU0Z6DF5bBzl9dK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEzRDYxRUE1ODQ3NjM3MDVBNzI0M0Y4N0QyNjMyN0VD
NUNBNjNCMDAeFw0yNTEwMDMxNzU3MThaFw0yNjEwMDIxODAyMThaMDMxMTAvBgNV
BAMTKDkyMENBREYyMUZBNTgzRjYzMEYyQjNENjFFQTI4MTFFM0M2RkI4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBk9mjBd1KFizmVdBSS+bpNzLm
xIOgkPu6hC4B3TYreuqmTyQDGfQ45B6oICNs0nUnq/I42n8xq7x1wxgwzfyWSviH
NCTOxoh9HNw4AhMq0U11Iwk0BMU9xR03J4DE/gfizusgbxN69mnhfhtrceNIyLDo
nyg73XGQ6urJrrOn52dyzD+HcEGghM0xWQGe1YY0vIEvAeNQZJchOPUfluxcDzy+
u7cezGUtUlfyCJCBQ6wxsQtOxPcWIl0vW0XXtNbMLcnMstU6peJIOMEe6h0AOeHo
A0F60vzJcwSPlRzQPtnsrTDMY2Dx5AkFFX99Yn1Ny11cFriQqX+BvGO0k9lpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkgyt8h+lg/Yw8rPWHqKBHjxvuNEwHwYDVR0j
BBgwFoAUIT1h6lhHY3BackP4fSYyfsXKY7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1
VlgvMC8yMTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxM0Q2MUVBNTg0NzYzNzA1
QTcyNDNGODdEMjYzMjdFQzVDQTYzQjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhSGNwZE1hTkw3WXFlNmNWYkxXNmtCbTU4RTJrSmZnUFBveXg5UkR1NVZYLzAv
MzEzMzMxMmUzMjMyMzEyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMz
MzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg91RMA0GCSqGSIb3DQEBCwUAA4IBAQBZQ+VE0zXn
UWqLfvo67Nmrk+obd9QezACpDgzj+okHMVQ358rVe1Otx6OvK8ZbOeK0j8JWkoYn
2j2fZwE900JTXEDip3sATdf4DZSyfB13ea35XrtKKv6M66aKgJSDoAUaO11LS3JO
oVUg5CDZyVm2RU5jDjexdxzROgOWHQZN3c4W17JYvS+Ai09W2ecqP2A53iSp72ww
yF8HSlKQBGLoEJnls/p+V21X46QarM5HnMB9ez69KHxXqQBswR/uAOBVjmuyGf/n
mulRiykisCAyd4py/DX5vN9NdbWfc1OeWzwLBoj/MQ6WXpVhMN81Uv1EyTuI5Unc
JwTon7CFPXqo
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:07:44 2025 by rpki-client