Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa
File:                     3133312e302e37382e302f32332d3234203d3e203134343537.roa (raw, json)
Hash identifier:          B3YJT4OkSj3f3GE/IreEZUNq8elgRsldnNgOu27cKOc=
Subject key identifier:   8F:BA:27:30:1A:AB:5D:12:47:15:48:8C:DE:B1:2D:79:A1:CA:E4:23
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       664C56AA86F97B7EF8045336B653E23CE9BE630E
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa
Signing time:             Mon 26 May 2025 19:02:51 +0000
ROA not before:           Mon 26 May 2025 18:57:51 +0000
ROA not after:            Mon 25 May 2026 19:02:51 +0000
asID:                     14457
IP address blocks:        131.0.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4c:56:aa:86:f9:7b:7e:f8:04:53:36:b6:53:e2:3c:e9:be:63:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: May 26 18:57:51 2025 GMT
            Not After : May 25 19:02:51 2026 GMT
        Subject: CN=8FBA27301AAB5D124715488CDEB12D79A1CAE423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:67:a9:13:d6:ed:d0:8b:51:98:c5:57:ad:
                    dc:8c:84:33:8e:21:11:4c:f3:20:f9:4f:70:be:b3:
                    b3:bf:65:b4:39:40:27:c7:5d:d7:17:cf:37:c4:f4:
                    0c:a3:b9:30:fe:a6:0f:dc:e0:5e:6d:2d:b3:5b:8b:
                    22:4d:40:72:a2:0c:3e:d3:bc:f8:24:98:96:90:ea:
                    8c:4c:b6:24:89:de:d1:e8:ed:ff:e8:6d:11:4d:03:
                    70:e6:01:89:17:99:dc:54:79:13:47:a6:d8:53:74:
                    d9:16:26:05:f1:4c:2b:20:cb:03:0d:2f:d4:a4:30:
                    67:7b:84:4e:c1:3a:58:b0:da:34:6e:69:a0:a1:e1:
                    82:a9:f7:72:55:8e:3e:35:7f:09:87:55:b1:ea:8b:
                    17:02:22:42:33:e5:78:c5:7e:db:d4:b6:40:2f:dc:
                    df:4f:75:82:18:2d:0b:a9:5a:0a:51:8c:ec:3e:21:
                    cd:ca:58:53:ec:dc:d2:0c:a0:bf:4b:c3:ca:3d:30:
                    7e:63:33:c7:0f:88:d1:49:4e:67:b8:96:87:42:60:
                    e5:4e:80:dd:62:7e:3c:da:82:59:3a:77:33:bc:b3:
                    16:46:7e:f4:ff:da:e4:2b:52:e9:51:98:6b:16:12:
                    5d:a2:c3:b0:bc:32:01:80:4d:e6:a7:a3:08:42:12:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BA:27:30:1A:AB:5D:12:47:15:48:8C:DE:B1:2D:79:A1:CA:E4:23
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:80:99:14:3c:a7:93:48:aa:6e:d6:f7:13:89:7b:bb:1a:
         9c:33:2c:c8:07:04:07:1f:73:3c:4e:2e:7c:4c:12:fc:c9:24:
         c4:70:3c:1a:73:b3:65:fc:be:51:6c:23:fc:5e:ea:04:0f:0e:
         8a:54:15:2c:39:61:e4:21:13:08:48:0e:67:1f:6d:bf:4e:c6:
         d8:cc:82:31:90:4a:e3:2d:cb:14:bb:9c:47:4c:6b:b4:6f:2e:
         a9:1d:4e:3b:3d:c8:b4:df:51:a3:c5:76:c7:32:94:ed:48:a6:
         bb:c4:e4:34:84:5b:be:cb:fe:87:cb:4a:45:5b:f1:1e:cc:90:
         12:e7:9e:0d:99:56:5e:a3:4e:6d:f7:a4:99:0b:bd:69:ac:99:
         d2:1c:ba:fe:ac:bc:06:84:5a:9a:b7:62:92:bd:cb:9c:83:03:
         df:ca:bb:61:0c:80:31:6c:75:48:db:bc:dd:8a:a9:07:68:37:
         2b:52:10:f6:04:2c:b3:ae:c5:f1:9c:79:6f:89:b8:bc:64:fb:
         4b:a7:21:f3:db:f8:80:53:13:d9:5e:1e:a0:b9:f1:0f:95:44:
         07:17:92:fd:c0:12:d5:74:a6:46:6d:d4:bf:79:68:17:f2:61:
         ef:66:ed:42:aa:95:d6:88:5e:d3:73:e9:c8:16:12:b8:2c:25:
         cd:c2:8b:b8
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUZkxWqob5e374BFM2tlPiPOm+Yw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2
RDdBOTE5NDAeFw0yNTA1MjYxODU3NTFaFw0yNjA1MjUxOTAyNTFaMDMxMTAvBgNV
BAMTKDhGQkEyNzMwMUFBQjVEMTI0NzE1NDg4Q0RFQjEyRDc5QTFDQUU0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1WepE9bt0ItRmMVXrdyMhDOO
IRFM8yD5T3C+s7O/ZbQ5QCfHXdcXzzfE9AyjuTD+pg/c4F5tLbNbiyJNQHKiDD7T
vPgkmJaQ6oxMtiSJ3tHo7f/obRFNA3DmAYkXmdxUeRNHpthTdNkWJgXxTCsgywMN
L9SkMGd7hE7BOliw2jRuaaCh4YKp93JVjj41fwmHVbHqixcCIkIz5XjFftvUtkAv
3N9PdYIYLQupWgpRjOw+Ic3KWFPs3NIMoL9Lw8o9MH5jM8cPiNFJTme4lodCYOVO
gN1ifjzaglk6dzO8sxZGfvT/2uQrUulRmGsWEl2iw7C8MgGATeanowhCEvyvAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUj7onMBqrXRJHFUiM3rEteaHK5CMwHwYDVR0j
BBgwFoAUO0WkdP287KlLuMvDbhB7yW16kZQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzIvM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2RDdBOTE5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjQ1QTQ3NEZEQkNFQ0E5NEJC
OENCQzM2RTEwN0JDOTZEN0E5MTk0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzIvMzEz
MzMxMmUzMDJlMzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzQzNDM1Mzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGDAE4wDQYJKoZIhvcNAQELBQADggEBAHyvgJkUPKeTSKpu1vcT
iXu7GpwzLMgHBAcfczxOLnxMEvzJJMRwPBpzs2X8vlFsI/xe6gQPDopUFSw5YeQh
EwhIDmcfbb9OxtjMgjGQSuMtyxS7nEdMa7RvLqkdTjs9yLTfUaPFdscylO1IprvE
5DSEW77L/ofLSkVb8R7MkBLnng2ZVl6jTm33pJkLvWmsmdIcuv6svAaEWpq3YpK9
y5yDA9/Ku2EMgDFsdUjbvN2KqQdoNytSEPYELLOuxfGceW+JuLxk+0unIfPb+IBT
E9leHqC58Q+VRAcXkv3AEtV0pkZt1L95aBfyYe9m7UKqldaIXtNz6cgWErgsJc3C
i7g=
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:21:40 2025 by rpki-client