Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3232203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32322d3232203d3e203631363537.roa (raw, json)
Hash identifier:          uCD2VVh9uHTavxVa+LGrZK2S1VBj6notmDyQ3vB7VNE=
Subject key identifier:   BA:09:38:98:6E:A7:A9:18:4F:DB:C4:6B:15:7A:8B:02:D5:AE:FB:EC
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       135BD099143256C54622799C94271CAFB5207445
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3232203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:56:52 +0000
ROA not before:           Fri 01 Aug 2025 19:51:52 +0000
ROA not after:            Fri 31 Jul 2026 19:56:52 +0000
asID:                     61657
IP address blocks:        131.100.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:d0:99:14:32:56:c5:46:22:79:9c:94:27:1c:af:b5:20:74:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:51:52 2025 GMT
            Not After : Jul 31 19:56:52 2026 GMT
        Subject: CN=BA0938986EA7A9184FDBC46B157A8B02D5AEFBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:6c:7e:bc:da:75:54:6e:d0:69:7e:1a:65:
                    19:7b:6e:98:97:9b:11:ec:d8:2b:64:e8:cd:5c:b2:
                    8e:1a:28:8f:bb:0f:37:1c:da:6b:11:63:f0:13:4c:
                    3b:1c:03:96:3a:3c:79:bc:6c:17:08:8f:27:c3:7b:
                    24:9c:71:d5:9d:c8:c9:ab:fa:f8:b3:ab:57:dc:0a:
                    05:fe:0c:a7:6a:51:13:31:50:47:6c:9a:73:15:0a:
                    ff:f6:df:b6:1a:87:4f:80:62:40:5e:a5:05:d4:23:
                    97:c1:71:63:e1:fb:99:9e:c3:f4:79:68:70:bd:46:
                    09:f2:1a:7c:ba:d7:b3:da:0b:7c:3c:d6:3c:e9:e1:
                    49:06:a6:04:1d:f0:6d:7d:01:de:11:2f:1f:6d:0f:
                    b0:e6:53:48:c1:11:91:0c:36:7c:6f:da:ff:70:3a:
                    14:bb:72:b1:8d:6e:27:55:41:8d:d8:c3:ca:ee:f4:
                    de:96:d0:3e:87:c4:9e:32:f4:e9:58:38:27:99:66:
                    1c:03:d6:fb:d7:d7:0d:35:82:22:de:1b:08:61:95:
                    fc:04:57:f5:9d:b3:5f:ed:8e:32:76:e3:23:5b:c3:
                    e9:a8:da:25:b7:8e:82:84:64:30:32:00:58:24:f0:
                    3e:4a:64:04:46:b4:aa:e2:07:f1:e1:84:2f:e9:c3:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:38:98:6E:A7:A9:18:4F:DB:C4:6B:15:7A:8B:02:D5:AE:FB:EC
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3232203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:fc:8f:ff:1b:6f:b1:dc:8e:d5:cb:97:4a:5e:00:72:7c:38:
         d7:7b:ad:be:1a:46:dd:95:ca:f2:8a:58:91:54:ca:56:24:57:
         01:3c:6e:19:e2:a4:c4:21:c7:ae:14:31:61:4e:ee:ef:0c:77:
         f0:5c:84:28:8c:90:78:1b:a2:2a:78:ce:36:2a:db:62:fe:1d:
         10:64:f8:b0:94:72:8e:76:63:ac:f8:7c:2b:ed:58:13:63:ba:
         e8:7c:ed:2c:93:89:e3:77:4f:3f:e5:47:01:0d:de:70:1c:a7:
         18:b9:34:84:3f:27:64:b2:5b:3a:f9:d1:36:21:75:82:6e:5b:
         a9:7a:b5:99:74:e4:c9:e8:74:b5:ff:ea:5a:d8:bc:59:c2:8a:
         ad:68:39:21:f9:56:8e:b5:3d:a8:9a:53:c5:f3:56:d8:4a:2c:
         a6:7a:b8:92:0b:bb:2f:78:f8:22:d0:4e:dd:7d:6a:5c:02:db:
         93:d9:a1:4a:9a:88:dd:c1:50:7f:d0:c6:43:44:a9:e6:02:ef:
         80:57:1e:85:b9:1b:a4:53:c5:cc:49:b3:a6:7e:f7:37:68:8c:
         95:ac:e5:a2:16:58:c4:9a:c3:29:21:24:1d:16:0c:41:a7:f1:
         3d:f7:f4:14:34:d6:42:84:05:9c:57:7a:d4:a6:50:22:b2:55:
         fe:0e:eb:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE1vQmRQyVsVGInmclCccr7UgdEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMzM4QUI5N0Q3Q0VDRjFCNDA4M0Q5QTMxMzZBNTlG
RkI2NjI3RjAeFw0yNTA4MDExOTUxNTJaFw0yNjA3MzExOTU2NTJaMDMxMTAvBgNV
BAMTKEJBMDkzODk4NkVBN0E5MTg0RkRCQzQ2QjE1N0E4QjAyRDVBRUZCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDWx+vNp1VG7QaX4aZRl7bpiX
mxHs2Ctk6M1cso4aKI+7Dzcc2msRY/ATTDscA5Y6PHm8bBcIjyfDeySccdWdyMmr
+vizq1fcCgX+DKdqURMxUEdsmnMVCv/237Yah0+AYkBepQXUI5fBcWPh+5mew/R5
aHC9RgnyGny617PaC3w81jzp4UkGpgQd8G19Ad4RLx9tD7DmU0jBEZEMNnxv2v9w
OhS7crGNbidVQY3Yw8ru9N6W0D6HxJ4y9OlYOCeZZhwD1vvX1w01giLeGwhhlfwE
V/Wds1/tjjJ24yNbw+mo2iW3joKEZDAyAFgk8D5KZARGtKriB/HhhC/pw2hLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUugk4mG6nqRhP28RrFXqLAtWu++wwHwYDVR0j
BBgwFoAUQMM4q5fXzs8bQIPZoxNqWf+2Yn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnAxMWppRGVFVUdwTmZlUGd4djZmbVdIdm5VSjhpb1hrQnpLN1A3TkpW
QzIvMC80MEMzMzhBQjk3RDdDRUNGMUI0MDgzRDlBMzEzNkE1OUZGQjY2MjdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQzMzOEFCOTdEN0NFQ0Yx
QjQwODNEOUEzMTM2QTU5RkZCNjYyN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwMTFqaURlRVVHcE5mZVBneHY2Zm1XSHZuVUo4aW9Ya0J6SzdQN05KVkMyLzAv
MzEzMzMxMmUzMTMwMzAyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZPwwDQYJKoZIhvcNAQELBQADggEBAL78j/8b
b7HcjtXLl0peAHJ8ONd7rb4aRt2VyvKKWJFUylYkVwE8bhnipMQhx64UMWFO7u8M
d/BchCiMkHgboip4zjYq22L+HRBk+LCUco52Y6z4fCvtWBNjuuh87SyTieN3Tz/l
RwEN3nAcpxi5NIQ/J2SyWzr50TYhdYJuW6l6tZl05MnodLX/6lrYvFnCiq1oOSH5
Vo61PaiaU8XzVthKLKZ6uJILuy94+CLQTt19alwC25PZoUqaiN3BUH/QxkNEqeYC
74BXHoW5G6RTxcxJs6Z+9zdojJWs5aIWWMSawykhJB0WDEGn8T339BQ01kKEBZxX
etSmUCKyVf4O65o=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:06 2025 by rpki-client