Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
File:                     3133312e3139362e342e302f32322d3332203d3e20323635383930.roa (raw, json)
Hash identifier:          h08BZWZGth0Nk8drjzV0nzrQS0wHIg+E5jAWi9wCNyU=
Subject key identifier:   C1:75:5D:E5:BA:F0:19:27:A0:FD:71:8D:41:F5:4F:14:7E:28:38:7A
Certificate issuer:       /CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
Certificate serial:       573DC2E943B2B04518426DF7CACDC77C7B05A629
Authority key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
Signing time:             Thu 06 Mar 2025 18:39:18 +0000
ROA not before:           Thu 06 Mar 2025 18:34:18 +0000
ROA not after:            Thu 05 Mar 2026 18:39:18 +0000
asID:                     265890
IP address blocks:        131.196.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.crl
                          rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3d:c2:e9:43:b2:b0:45:18:42:6d:f7:ca:cd:c7:7c:7b:05:a6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
        Validity
            Not Before: Mar  6 18:34:18 2025 GMT
            Not After : Mar  5 18:39:18 2026 GMT
        Subject: CN=C1755DE5BAF01927A0FD718D41F54F147E28387A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:2c:09:f4:c2:b7:66:c2:8a:23:b0:94:01:
                    c4:f1:74:0b:fd:6c:24:e0:e9:aa:1a:62:4e:59:87:
                    ff:11:67:c2:c2:63:14:89:66:c0:5b:b3:a5:2f:5a:
                    62:0b:59:7e:7d:62:d2:41:4c:fb:27:f9:a5:15:eb:
                    0d:a0:d0:15:92:f5:64:1d:9c:64:c7:67:5b:1d:33:
                    04:6b:aa:e0:25:65:cc:a6:99:9d:12:8b:0a:c3:09:
                    1b:e5:74:75:5e:47:6b:90:2f:70:78:bf:f5:3e:96:
                    7b:b7:07:e3:cb:71:b7:59:0b:cb:cb:49:44:41:db:
                    3d:fd:41:e5:19:2c:61:dd:e4:70:c3:7a:fb:54:b2:
                    e9:46:0c:80:8d:6b:70:66:d1:0a:75:61:0b:38:7a:
                    46:92:4b:15:32:5f:35:c9:e7:1c:62:29:ac:a0:a8:
                    7f:18:47:5b:e6:f2:4f:fa:d6:0f:f0:27:6c:b2:bc:
                    6a:d1:6a:1a:7d:98:2c:9e:23:b2:9a:7c:a1:74:45:
                    41:13:fd:d1:cc:9c:e5:22:24:e8:ee:33:12:d6:8d:
                    51:0d:22:7b:09:f6:9a:cc:27:a1:db:2a:65:01:be:
                    7f:67:63:2a:63:b0:0f:4a:f9:bc:cf:df:a6:2d:87:
                    6f:d3:60:92:17:7d:c6:45:6b:8f:c0:72:02:ed:33:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:75:5D:E5:BA:F0:19:27:A0:FD:71:8D:41:F5:4F:14:7E:28:38:7A
            X509v3 Authority Key Identifier:
                keyid:A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:d5:02:dd:ec:8a:dd:e4:d2:7a:83:c2:62:48:8b:39:13:
         50:38:4c:db:ee:1a:08:01:ee:5a:8a:59:cc:13:c6:bc:b5:aa:
         18:49:5b:85:d2:0b:47:c8:d1:66:3c:69:3a:8a:bd:01:a5:30:
         15:ca:cf:fe:f1:57:ac:dc:cc:c2:a8:26:44:e0:c7:5a:00:01:
         46:79:6a:c2:fe:23:f6:b5:c6:7e:6a:a7:b5:25:54:cc:14:63:
         85:fc:70:32:9d:38:db:85:52:d1:73:fa:8a:28:98:50:2b:45:
         04:c7:66:72:a2:72:1e:05:9a:41:60:d7:eb:1c:3f:fd:2b:0d:
         6a:f5:d2:e1:33:42:7a:98:3a:34:16:df:ff:32:84:21:b9:e6:
         d9:af:79:35:90:b0:05:d4:e6:52:b4:7a:00:4d:94:9a:f4:ea:
         79:4c:ba:88:20:2c:2e:0a:e0:3c:a5:42:97:01:77:5c:25:1e:
         25:08:2d:59:56:65:a4:f4:f6:2f:4f:ba:28:2e:d5:55:e7:76:
         27:04:31:48:28:b1:8d:0f:30:af:06:c0:db:95:70:5f:14:85:
         3f:46:b3:5f:ce:56:78:3b:c2:ac:e8:a8:d1:6c:45:63:fa:e8:
         0f:f3:be:8a:1a:6f:d8:f9:e7:8d:16:1c:b7:66:d4:7e:ee:26:
         42:b6:85:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVz3C6UOysEUYQm33ys3HfHsFpikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg4MzlENjNDM0UxMTJEMEI4M0NCQjAxMEFEREU1QjRD
MzNCMEM0QzAeFw0yNTAzMDYxODM0MThaFw0yNjAzMDUxODM5MThaMDMxMTAvBgNV
BAMTKEMxNzU1REU1QkFGMDE5MjdBMEZENzE4RDQxRjU0RjE0N0UyODM4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yCwJ9MK3ZsKKI7CUAcTxdAv9
bCTg6aoaYk5Zh/8RZ8LCYxSJZsBbs6UvWmILWX59YtJBTPsn+aUV6w2g0BWS9WQd
nGTHZ1sdMwRrquAlZcymmZ0SiwrDCRvldHVeR2uQL3B4v/U+lnu3B+PLcbdZC8vL
SURB2z39QeUZLGHd5HDDevtUsulGDICNa3Bm0Qp1YQs4ekaSSxUyXzXJ5xxiKayg
qH8YR1vm8k/61g/wJ2yyvGrRahp9mCyeI7KafKF0RUET/dHMnOUiJOjuMxLWjVEN
InsJ9prMJ6HbKmUBvn9nYypjsA9K+bzP36Yth2/TYJIXfcZFa4/AcgLtM7d5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwXVd5brwGSeg/XGNQfVPFH4oOHowHwYDVR0j
BBgwFoAUqIOdY8PhEtC4PLsBCt3ltMM7DEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpZeUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4
cUEvMS9BODgzOUQ2M0MzRTExMkQwQjgzQ0JCMDEwQURERTVCNEMzM0IwQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4ODM5RDYzQzNFMTEyRDBC
ODNDQkIwMTBBRERFNUI0QzMzQjBDNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqWXlGQzlEQnBIUUROWmNrbWdHalQzeVFUTEt2RmJTc0N6YTNNOFdROHFBLzEv
MzEzMzMxMmUzMTM5MzYyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg8QEMA0GCSqGSIb3DQEBCwUAA4IBAQCwSNUC3eyK
3eTSeoPCYkiLORNQOEzb7hoIAe5ailnME8a8taoYSVuF0gtHyNFmPGk6ir0BpTAV
ys/+8Ves3MzCqCZE4MdaAAFGeWrC/iP2tcZ+aqe1JVTMFGOF/HAynTjbhVLRc/qK
KJhQK0UEx2ZyonIeBZpBYNfrHD/9Kw1q9dLhM0J6mDo0Ft//MoQhuebZr3k1kLAF
1OZStHoATZSa9Op5TLqIICwuCuA8pUKXAXdcJR4lCC1ZVmWk9PYvT7ooLtVV53Yn
BDFIKLGNDzCvBsDblXBfFIU/RrNfzlZ4O8Ks6KjRbEVj+ugP876KGm/Y+eeNFhy3
ZtR+7iZCtoXs
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:25 2025 by rpki-client