Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          VIbTSIaiGSIZZxzzfSZH4yg/88l7zNYG/2evoqxbS1A=
Subject key identifier:   D3:31:CC:9F:18:A9:2C:64:20:76:D0:06:16:A5:5A:AA:EC:B4:80:73
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       3F715BE905FC6D9DA1187FD913AE818B554238F7
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:42 +0000
ROA not before:           Fri 25 Jul 2025 20:43:42 +0000
ROA not after:            Fri 24 Jul 2026 20:48:42 +0000
asID:                     61689
IP address blocks:        131.108.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:71:5b:e9:05:fc:6d:9d:a1:18:7f:d9:13:ae:81:8b:55:42:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:42 2025 GMT
            Not After : Jul 24 20:48:42 2026 GMT
        Subject: CN=D331CC9F18A92C642076D00616A55AAAECB48073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:25:25:fc:c1:ba:6a:eb:e9:5b:03:6c:e4:
                    dc:c0:b9:05:ff:0f:6e:2a:4d:92:b7:d4:ae:10:b7:
                    17:25:85:d7:28:a1:17:94:76:89:ab:1a:b4:d1:24:
                    87:5f:28:65:0d:2a:a7:fd:1d:4f:f2:d6:66:8f:e3:
                    0f:15:ff:c0:b6:8c:3f:3b:a4:f3:5b:93:10:ee:0e:
                    49:ec:60:7d:1c:fe:cc:d2:0f:52:43:03:56:50:1d:
                    7f:94:be:26:6b:be:ab:ec:da:75:d3:87:44:72:2b:
                    ba:34:5f:50:57:59:f2:ef:0b:2c:ef:c0:ef:f5:40:
                    e8:50:42:b2:9e:37:5e:07:60:7c:0c:49:4a:1c:8e:
                    68:d9:a0:52:ed:98:f9:5c:a9:74:c8:d7:9e:72:9e:
                    bc:a5:0a:1a:6f:fa:81:82:51:0c:c0:4f:f2:2d:cd:
                    58:7c:af:2e:eb:e8:36:1f:0e:55:0e:bc:5a:d3:73:
                    5b:9d:0f:dc:2f:f1:9c:8d:f1:c3:4c:5e:ed:92:41:
                    7a:6a:61:65:09:31:b9:1f:84:1f:3a:82:7c:b6:8c:
                    1d:87:c1:46:39:d7:80:bb:7d:1b:d3:aa:68:f8:f7:
                    5d:7f:f6:1f:d0:2d:cf:90:22:31:1d:30:ea:52:31:
                    8e:1c:e6:9c:85:f6:28:82:58:45:fc:c2:03:af:89:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:31:CC:9F:18:A9:2C:64:20:76:D0:06:16:A5:5A:AA:EC:B4:80:73
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:47:16:bd:e6:be:38:f2:1e:73:13:45:57:1a:8f:7f:08:db:
         dd:b0:49:9f:41:fc:e5:5d:4c:41:30:40:f2:51:d9:99:f1:8b:
         f5:ce:6f:02:da:4b:10:9d:94:cd:0b:08:d3:f2:b6:20:4d:2c:
         c9:27:c4:9a:d5:84:94:b6:7b:3f:2d:97:84:47:c1:f7:aa:3b:
         89:a6:08:4f:19:2f:09:d7:60:89:4d:28:31:53:a3:0c:c3:e8:
         3c:d5:7a:7f:42:2c:60:8c:d5:01:2a:96:c0:51:36:6f:e2:b1:
         ee:d5:8e:10:10:5b:21:17:ed:e7:32:0e:cf:7a:70:33:e2:3c:
         02:d1:9e:f9:a8:07:23:b9:da:44:16:06:d7:fd:1a:79:40:4c:
         3d:9b:1a:c8:b5:2d:08:9d:04:2c:3b:00:fa:52:41:2c:d7:09:
         27:aa:6d:72:e9:06:73:ad:e6:c8:95:d4:a4:c6:60:aa:91:67:
         e9:8b:bd:11:f8:cb:d5:c7:37:14:5e:e6:e3:59:50:c0:6a:b4:
         0a:72:48:71:b0:a9:8d:67:34:1b:f6:96:ee:72:6a:51:e4:72:
         07:fe:b4:60:d7:37:4a:fc:81:b9:81:85:a6:f7:78:25:7d:80:
         93:66:63:a4:b1:99:c6:6c:83:7a:4f:cd:ea:96:c7:59:b5:17:
         00:47:9a:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP3Fb6QX8bZ2hGH/ZE66Bi1VCOPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBRThDQkNBMDkyQkJEQUUzQzA2REY5OTQxRTRDMDBB
QjA2NTZGODAeFw0yNTA3MjUyMDQzNDJaFw0yNjA3MjQyMDQ4NDJaMDMxMTAvBgNV
BAMTKEQzMzFDQzlGMThBOTJDNjQyMDc2RDAwNjE2QTU1QUFBRUNCNDgwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhCUl/MG6auvpWwNs5NzAuQX/
D24qTZK31K4QtxclhdcooReUdomrGrTRJIdfKGUNKqf9HU/y1maP4w8V/8C2jD87
pPNbkxDuDknsYH0c/szSD1JDA1ZQHX+UviZrvqvs2nXTh0RyK7o0X1BXWfLvCyzv
wO/1QOhQQrKeN14HYHwMSUocjmjZoFLtmPlcqXTI155ynrylChpv+oGCUQzAT/It
zVh8ry7r6DYfDlUOvFrTc1udD9wv8ZyN8cNMXu2SQXpqYWUJMbkfhB86gny2jB2H
wUY514C7fRvTqmj4911/9h/QLc+QIjEdMOpSMY4c5pyF9iiCWEX8wgOviewvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0zHMnxipLGQgdtAGFqVaquy0gHMwHwYDVR0j
BBgwFoAUEK6MvKCSu9rjwG35lB5MAKsGVvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMC8xMEFFOENCQ0EwOTJCQkRBRTNDMDZERjk5NDFFNEMwMEFCMDY1NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQUU4Q0JDQTA5MkJCREFF
M0MwNkRGOTk0MUU0QzAwQUIwNjU2RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbH8wDQYJKoZIhvcNAQELBQADggEBABdHFr3m
vjjyHnMTRVcaj38I292wSZ9B/OVdTEEwQPJR2Znxi/XObwLaSxCdlM0LCNPytiBN
LMknxJrVhJS2ez8tl4RHwfeqO4mmCE8ZLwnXYIlNKDFTowzD6DzVen9CLGCM1QEq
lsBRNm/ise7VjhAQWyEX7ecyDs96cDPiPALRnvmoByO52kQWBtf9GnlATD2bGsi1
LQidBCw7APpSQSzXCSeqbXLpBnOt5siV1KTGYKqRZ+mLvRH4y9XHNxRe5uNZUMBq
tApySHGwqY1nNBv2lu5yalHkcgf+tGDXN0r8gbmBhab3eCV9gJNmY6SxmcZsg3pP
zeqWx1m1FwBHmlw=
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:13 2025 by rpki-client