Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          7zSo+Svi6mejLDbOmHCyLbCvmJckWK5Lb0di0i+yTtM=
Subject key identifier:   B1:F1:DE:F4:B3:25:6D:6C:30:8F:A5:DB:A8:D6:09:8E:B2:18:ED:A8
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       2F64A0BBC4E4D34E09670F1C7C90F35769746AAE
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:40 +0000
ROA not before:           Wed 16 Apr 2025 15:00:40 +0000
ROA not after:            Wed 15 Apr 2026 15:05:40 +0000
asID:                     264422
IP address blocks:        131.221.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:64:a0:bb:c4:e4:d3:4e:09:67:0f:1c:7c:90:f3:57:69:74:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:40 2025 GMT
            Not After : Apr 15 15:05:40 2026 GMT
        Subject: CN=B1F1DEF4B3256D6C308FA5DBA8D6098EB218EDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:f4:83:1a:be:cd:0a:8d:eb:b3:a9:87:9f:
                    34:9a:44:94:c9:e1:3d:58:d2:f3:f4:50:20:dc:f4:
                    8c:c9:83:b8:e5:06:f0:dd:ed:35:e1:11:21:3c:9d:
                    80:09:86:0d:d1:b0:3b:a5:7c:3a:9b:c3:08:83:3d:
                    a0:3c:46:94:db:2c:27:30:c3:ea:94:f9:5f:5a:b8:
                    fb:17:16:43:4a:1d:c5:2e:19:c7:67:b1:93:92:6d:
                    62:de:5d:60:fe:ce:11:09:c3:8e:ec:76:1e:67:ee:
                    bc:d4:0a:27:40:8e:fa:31:79:ce:fc:bb:35:c1:e6:
                    a4:6b:68:32:a9:4a:72:7e:7b:61:f4:97:15:49:db:
                    c4:a0:0b:7b:2c:63:76:05:b5:c8:83:53:dc:9e:6d:
                    7c:a7:32:2e:1b:58:0f:d7:c5:b8:f7:e8:c4:5e:8e:
                    80:42:74:d3:c5:2f:11:16:32:d5:2a:d3:52:59:57:
                    72:c9:a9:a9:d0:0d:ef:a4:b9:40:ec:b7:e5:ff:c9:
                    a6:88:ba:e9:d2:f3:8f:5c:0a:a4:a2:a8:52:37:9d:
                    b7:bb:03:15:44:88:98:c0:85:15:9c:da:4f:18:07:
                    be:18:3f:6c:d0:3a:cb:5f:32:3c:de:8b:62:ca:2b:
                    47:4d:e7:48:4c:ef:cb:0c:31:dc:50:da:cf:60:4d:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F1:DE:F4:B3:25:6D:6C:30:8F:A5:DB:A8:D6:09:8E:B2:18:ED:A8
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:f9:d0:ce:fb:5b:4d:13:4b:04:6b:c2:c1:6f:64:f8:9b:
         41:ab:74:5e:e9:d8:bd:a8:34:ec:8f:63:ab:eb:cf:f5:9d:5d:
         c4:d7:3f:86:58:ce:a1:11:85:80:a6:04:6a:bc:fa:92:3d:9b:
         f2:8c:20:58:e2:5b:1b:2e:74:2a:c1:f8:df:9d:59:ae:e6:a9:
         03:bb:96:58:c7:a1:93:04:28:08:f5:a6:b7:1d:1e:72:50:e8:
         d3:ef:11:bd:b6:71:c1:71:3a:a9:0b:8d:7d:04:a7:89:42:c0:
         a6:60:19:5b:4b:62:d3:42:ec:d8:90:96:9f:1e:0b:9f:69:34:
         3e:38:ab:2d:d4:b9:f5:97:27:0f:42:60:8e:fe:20:5a:7b:cf:
         f9:62:8f:26:2d:9d:7b:58:78:44:d9:b3:7f:3c:d8:0a:78:67:
         c2:8d:67:c1:b2:7c:40:27:54:12:a0:7f:1d:14:63:21:f4:59:
         ca:35:db:97:6f:83:6a:5a:e6:de:95:3f:31:f7:b0:b2:cf:80:
         5c:d1:23:fc:fe:90:a7:44:5b:75:20:a1:3d:4d:4d:5e:e7:45:
         46:04:a5:c4:40:46:8a:f4:4e:94:a5:86:c9:98:f7:0c:3b:83:
         d7:74:d3:04:ed:26:e4:b2:32:65:b0:db:93:3a:3f:a8:78:24:
         64:e8:29:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL2Sgu8Tk004JZw8cfJDzV2l0aq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwNDBaFw0yNjA0MTUxNTA1NDBaMDMxMTAvBgNV
BAMTKEIxRjFERUY0QjMyNTZENkMzMDhGQTVEQkE4RDYwOThFQjIxOEVEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPJ/SDGr7NCo3rs6mHnzSaRJTJ
4T1Y0vP0UCDc9IzJg7jlBvDd7TXhESE8nYAJhg3RsDulfDqbwwiDPaA8RpTbLCcw
w+qU+V9auPsXFkNKHcUuGcdnsZOSbWLeXWD+zhEJw47sdh5n7rzUCidAjvoxec78
uzXB5qRraDKpSnJ+e2H0lxVJ28SgC3ssY3YFtciDU9yebXynMi4bWA/Xxbj36MRe
joBCdNPFLxEWMtUq01JZV3LJqanQDe+kuUDst+X/yaaIuunS849cCqSiqFI3nbe7
AxVEiJjAhRWc2k8YB74YP2zQOstfMjzei2LKK0dN50hM78sMMdxQ2s9gTXKtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsfHe9LMlbWwwj6XbqNYJjrIY7agwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdrzANBgkqhkiG9w0BAQsFAAOCAQEArEz5
0M77W00TSwRrwsFvZPibQat0XunYvag07I9jq+vP9Z1dxNc/hljOoRGFgKYEarz6
kj2b8owgWOJbGy50KsH4351ZruapA7uWWMehkwQoCPWmtx0eclDo0+8RvbZxwXE6
qQuNfQSniULApmAZW0ti00Ls2JCWnx4Ln2k0PjirLdS59ZcnD0Jgjv4gWnvP+WKP
Ji2de1h4RNmzfzzYCnhnwo1nwbJ8QCdUEqB/HRRjIfRZyjXbl2+Dalrm3pU/Mfew
ss+AXNEj/P6Qp0RbdSChPU1NXudFRgSlxEBGivROlKWGyZj3DDuD13TTBO0m5LIy
ZbDbkzo/qHgkZOgp0w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:44 2025 by rpki-client