Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (raw, json)
Hash identifier:          VVZyjmnPEhB4/UoqE4uR1WwlyjcIZU8B+HO+mEVFe+0=
Subject key identifier:   90:0F:BE:7B:4B:2A:E4:8F:E4:AC:9D:8E:B3:B2:AA:05:0D:D1:6C:72
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       181635CD9528DD14DC2697309C115EE379A3722E
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa
Signing time:             Thu 12 Jun 2025 20:44:40 +0000
ROA not before:           Thu 12 Jun 2025 20:39:40 +0000
ROA not after:            Thu 11 Jun 2026 20:44:40 +0000
asID:                     61756
IP address blocks:        131.100.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 08:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:35:cd:95:28:dd:14:dc:26:97:30:9c:11:5e:e3:79:a3:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Jun 12 20:39:40 2025 GMT
            Not After : Jun 11 20:44:40 2026 GMT
        Subject: CN=900FBE7B4B2AE48FE4AC9D8EB3B2AA050DD16C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:27:a7:01:a9:a7:ae:52:28:3c:9a:1a:0e:
                    ec:17:a5:bf:c0:c2:a0:d2:b0:10:3e:2d:55:de:91:
                    15:cb:1c:d8:29:5a:91:aa:58:fe:24:f7:7e:b1:6b:
                    39:6e:a9:df:a9:95:b2:77:8f:93:79:ee:ac:90:a0:
                    41:d5:39:ba:d5:ff:cc:57:01:fd:c4:3a:a6:c8:8f:
                    32:85:b3:dc:93:8b:26:3d:c7:f9:f7:e4:24:78:bd:
                    f8:8c:b3:e8:a4:f1:0e:18:b3:70:fc:5f:f5:d5:f4:
                    90:b9:59:c6:ec:99:a3:1e:43:fc:28:47:a0:1d:d5:
                    52:ba:5e:e6:6c:81:b3:af:8e:77:de:3e:13:55:44:
                    b5:be:aa:a0:6f:76:1b:95:a3:41:dd:cf:18:27:14:
                    9d:f1:80:38:9b:d1:fb:2d:e7:a5:23:73:48:ef:15:
                    87:08:84:58:bb:f9:7b:76:18:03:f2:af:41:6a:b0:
                    d1:1a:3c:90:35:c8:95:a8:26:66:b8:22:6b:16:c4:
                    e9:42:cf:98:1f:41:ea:b5:e1:75:f6:83:62:eb:39:
                    95:4c:f1:3f:e2:42:08:dd:2a:73:42:9d:ff:f6:0e:
                    2e:6f:24:af:37:e4:70:3c:b5:b6:37:a3:fb:52:f9:
                    5b:4a:ee:9e:b0:c0:5c:42:14:e7:f6:df:d8:9e:62:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0F:BE:7B:4B:2A:E4:8F:E4:AC:9D:8E:B3:B2:AA:05:0D:D1:6C:72
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:9e:f9:2b:4f:aa:c2:ec:ed:e8:e8:a3:a0:cc:8a:ae:84:
         ed:d3:f9:e5:a6:b3:79:f0:49:de:ee:f1:83:22:60:1f:0a:1f:
         4a:2d:23:48:be:f0:89:40:5a:6a:bb:65:aa:4d:1e:b0:0e:cf:
         9b:75:7d:e5:1b:fa:41:b1:69:51:cc:15:c3:cc:f8:aa:3d:86:
         b4:3a:0b:b6:06:58:37:92:28:88:0c:be:8b:2d:a0:b4:02:a4:
         ce:f7:d9:c2:8c:c8:8d:c7:7e:79:d3:b9:c5:2e:a8:86:52:e0:
         b5:e6:4c:a7:74:3f:6c:b9:4c:3e:c2:d9:ac:eb:98:1a:dc:c1:
         cc:a0:9d:23:ba:f7:bd:ee:1a:ef:4a:77:fa:fe:68:c8:ab:33:
         b1:19:1f:7f:a2:34:83:d7:b2:6a:8a:9c:73:b5:b3:b8:dc:74:
         b3:bf:22:02:48:a1:70:d4:03:74:72:04:0e:6b:f8:94:9d:a8:
         eb:9a:87:4f:7f:f7:03:98:76:b2:57:ba:1f:f1:74:22:5f:d4:
         2f:42:1e:75:ed:45:6a:bb:85:a4:3f:41:39:68:6e:48:64:c5:
         70:d5:19:a1:58:1a:84:4b:b8:bb:47:29:6f:88:a9:d2:ff:76:
         82:6c:38:73:5b:d6:07:6a:db:c6:b4:2a:d2:84:ce:06:27:a1:
         4a:1b:79:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGBY1zZUo3RTcJpcwnBFe43mjci4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDQjg4NDlENkYzMzQzMUFGMjI5RDRDMDE0RTFFOERF
MDY4RDlGOTAeFw0yNTA2MTIyMDM5NDBaFw0yNjA2MTEyMDQ0NDBaMDMxMTAvBgNV
BAMTKDkwMEZCRTdCNEIyQUU0OEZFNEFDOUQ4RUIzQjJBQTA1MEREMTZDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcienAamnrlIoPJoaDuwXpb/A
wqDSsBA+LVXekRXLHNgpWpGqWP4k936xazluqd+plbJ3j5N57qyQoEHVObrV/8xX
Af3EOqbIjzKFs9yTiyY9x/n35CR4vfiMs+ik8Q4Ys3D8X/XV9JC5WcbsmaMeQ/wo
R6Ad1VK6XuZsgbOvjnfePhNVRLW+qqBvdhuVo0HdzxgnFJ3xgDib0fst56Ujc0jv
FYcIhFi7+Xt2GAPyr0FqsNEaPJA1yJWoJma4ImsWxOlCz5gfQeq14XX2g2LrOZVM
8T/iQgjdKnNCnf/2Di5vJK835HA8tbY3o/tS+VtK7p6wwFxCFOf239ieYmZHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkA++e0sq5I/krJ2Os7KqBQ3RbHIwHwYDVR0j
BBgwFoAUBsuISdbzNDGvIp1MAU4ejeBo2fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNkNCODg0OUQ2RjMzNDMxQUYyMjlENEMwMTRFMUU4REUwNjhEOUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2Q0I4ODQ5RDZGMzM0MzFB
RjIyOUQ0QzAxNEUxRThERTA2OEQ5RjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRWHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAv
MzEzMzMxMmUzMTMwMzAyZTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBg2RIMA0GCSqGSIb3DQEBCwUAA4IBAQArU575K0+q
wuzt6OijoMyKroTt0/nlprN58Ene7vGDImAfCh9KLSNIvvCJQFpqu2WqTR6wDs+b
dX3lG/pBsWlRzBXDzPiqPYa0Ogu2Blg3kiiIDL6LLaC0AqTO99nCjMiNx35507nF
LqiGUuC15kyndD9suUw+wtms65ga3MHMoJ0juve97hrvSnf6/mjIqzOxGR9/ojSD
17JqipxztbO43HSzvyICSKFw1AN0cgQOa/iUnajrmodPf/cDmHayV7of8XQiX9Qv
Qh517UVqu4WkP0E5aG5IZMVw1RmhWBqES7i7RylviKnS/3aCbDhzW9YHatvGtCrS
hM4GJ6FKG3nW
-----END CERTIFICATE-----
Generated at Wed Jun 18 14:38:36 2025 by rpki-client