Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          9nDW6htgv4SS0XShMV8kqXENlWoZmRqF5snwD0YYl04=
Subject key identifier:   4A:21:44:25:19:16:E4:10:C4:83:03:11:AE:02:2F:10:34:B3:65:4E
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       06F629D1DD9D8B0D083626A5D3AC2019F6A44313
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:35 +0000
ROA not before:           Thu 06 Mar 2025 16:11:35 +0000
ROA not after:            Thu 05 Mar 2026 16:16:35 +0000
asID:                     263522
IP address blocks:        131.108.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 16:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:29:d1:dd:9d:8b:0d:08:36:26:a5:d3:ac:20:19:f6:a4:43:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:35 2025 GMT
            Not After : Mar  5 16:16:35 2026 GMT
        Subject: CN=4A2144251916E410C4830311AE022F1034B3654E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:62:a3:b7:c6:fa:5d:47:dc:45:56:70:c0:
                    e1:90:93:91:ec:e3:fb:6b:20:13:01:de:12:ca:59:
                    a7:34:47:b0:57:b2:d2:49:8f:af:3c:05:87:dd:0a:
                    bb:d6:bb:0a:62:79:92:86:69:b8:89:af:96:ba:d3:
                    11:8a:fe:85:10:bb:4e:3e:83:3c:c7:f6:21:35:45:
                    ca:ec:65:54:98:fc:02:51:37:56:19:46:78:19:f7:
                    96:99:21:f7:21:93:cd:6f:00:d6:ce:77:6b:b9:3a:
                    7c:cc:d9:85:08:2d:23:3e:8f:21:d5:b4:ef:1b:bc:
                    f5:e8:75:9a:67:8c:98:a6:3a:4c:8f:64:3b:7c:78:
                    48:2b:16:c0:44:53:02:b6:28:bd:d2:fd:ac:70:68:
                    9a:a7:81:d8:7e:7c:d1:e2:21:a6:98:52:a7:50:30:
                    3f:26:b9:98:84:d0:9a:93:ad:24:e1:6c:40:91:4b:
                    e7:f9:ea:eb:4a:1f:24:aa:93:f1:b8:98:2f:90:2f:
                    8a:db:b2:86:cd:73:14:dd:88:32:f0:9f:e1:c6:b0:
                    8d:6f:04:07:aa:5a:8c:4d:17:bd:a7:07:e8:18:a0:
                    5e:62:6d:16:b2:19:25:7d:57:bb:88:e2:20:74:91:
                    ff:e0:47:62:70:66:0c:81:0a:a0:fa:c2:26:ca:57:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:44:25:19:16:E4:10:C4:83:03:11:AE:02:2F:10:34:B3:65:4E
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:1c:d9:84:7d:fd:bd:04:86:6c:57:0b:4c:b8:f9:d5:24:97:
         0d:f5:1a:57:fe:0b:04:34:ff:1a:26:12:cd:07:b7:e5:dc:c1:
         3f:65:6e:34:30:d8:d9:7f:f0:a6:ad:e6:b6:2b:1f:7c:46:e6:
         f8:96:96:1a:6e:56:39:45:24:3c:51:59:9c:d5:ca:cf:83:e3:
         c0:92:0a:9f:74:08:1c:4a:f0:56:b8:ac:3e:3c:62:6e:9a:a5:
         0a:de:7e:b0:cc:8f:49:18:b4:47:a1:8b:3e:35:6e:64:bf:29:
         24:29:31:2c:71:d1:d0:bf:f1:26:9b:48:7b:d8:bd:f6:1c:14:
         34:c0:29:06:b3:05:2b:30:e9:68:78:b2:a7:12:f7:53:67:cb:
         08:74:79:78:75:99:c3:e6:b1:c2:9b:94:1f:f2:88:94:e0:2a:
         5f:59:74:42:45:5a:62:0a:2f:c4:12:12:04:57:d2:e0:1f:54:
         ba:77:8a:5f:57:79:c8:2f:db:7e:28:8b:66:fe:a9:9b:be:8e:
         f8:3e:a6:5b:14:1b:d9:e5:2c:7f:22:46:7b:db:5d:77:76:98:
         aa:2d:3c:2c:3b:8a:cc:c2:4f:74:24:18:e0:52:de:2f:8c:4f:
         66:65:73:14:80:50:b6:fb:f3:27:2c:77:cf:10:78:f3:aa:2a:
         ed:e3:c2:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBvYp0d2diw0INial06wgGfakQxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNTAzMDYxNjExMzVaFw0yNjAzMDUxNjE2MzVaMDMxMTAvBgNV
BAMTKDRBMjE0NDI1MTkxNkU0MTBDNDgzMDMxMUFFMDIyRjEwMzRCMzY1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOGKjt8b6XUfcRVZwwOGQk5Hs
4/trIBMB3hLKWac0R7BXstJJj688BYfdCrvWuwpieZKGabiJr5a60xGK/oUQu04+
gzzH9iE1RcrsZVSY/AJRN1YZRngZ95aZIfchk81vANbOd2u5OnzM2YUILSM+jyHV
tO8bvPXodZpnjJimOkyPZDt8eEgrFsBEUwK2KL3S/axwaJqngdh+fNHiIaaYUqdQ
MD8muZiE0JqTrSThbECRS+f56utKHySqk/G4mC+QL4rbsobNcxTdiDLwn+HGsI1v
BAeqWoxNF72nB+gYoF5ibRayGSV9V7uI4iB0kf/gR2JwZgyBCqD6wibKV1LvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSiFEJRkW5BDEgwMRrgIvEDSzZU4wHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzEzMzMxMmUzMTMwMzgyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINs4jANBgkqhkiG9w0BAQsFAAOCAQEAuxzZ
hH39vQSGbFcLTLj51SSXDfUaV/4LBDT/GiYSzQe35dzBP2VuNDDY2X/wpq3mtisf
fEbm+JaWGm5WOUUkPFFZnNXKz4PjwJIKn3QIHErwVrisPjxibpqlCt5+sMyPSRi0
R6GLPjVuZL8pJCkxLHHR0L/xJptIe9i99hwUNMApBrMFKzDpaHiypxL3U2fLCHR5
eHWZw+axwpuUH/KIlOAqX1l0QkVaYgovxBISBFfS4B9UuneKX1d5yC/bfiiLZv6p
m76O+D6mWxQb2eUsfyJGe9tdd3aYqi08LDuKzMJPdCQY4FLeL4xPZmVzFIBQtvvz
Jyx3zxB486oq7ePCUw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 00:33:03 2025 by rpki-client