Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier:          gNMNjFZQqFVpyTp9WgqTaQTf25fFKLEa96xfcFY24o8=
Subject key identifier:   42:D2:15:5B:87:D0:E7:94:44:48:60:12:57:D2:98:C0:B2:33:E4:53
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       4C238247F67660DFCBFC52D0BDFD0D1D89E3B2B3
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:57:01 +0000
ROA not before:           Fri 01 Aug 2025 19:52:01 +0000
ROA not after:            Fri 31 Jul 2026 19:57:01 +0000
asID:                     61657
IP address blocks:        131.100.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:82:47:f6:76:60:df:cb:fc:52:d0:bd:fd:0d:1d:89:e3:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:52:01 2025 GMT
            Not After : Jul 31 19:57:01 2026 GMT
        Subject: CN=42D2155B87D0E7944448601257D298C0B233E453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:0a:12:69:33:67:01:c8:62:9a:93:fc:2b:
                    52:d8:73:f1:10:eb:1a:66:6b:c3:b3:eb:c5:58:29:
                    a8:4a:2b:73:fc:fe:76:02:1a:d7:b3:b2:6e:0d:8e:
                    22:98:b3:b8:9c:d5:ae:fc:7f:e9:65:32:f3:0c:32:
                    a2:0a:62:8c:87:73:9a:f0:f2:c9:ec:f1:c2:79:8f:
                    68:12:31:42:94:3f:e4:5b:5d:a8:3b:60:ff:f4:55:
                    43:f2:a9:bd:1f:24:dc:f3:7e:f8:b7:b0:69:8f:5d:
                    8a:e8:b9:0d:2e:df:16:c3:04:14:51:aa:c7:dc:90:
                    d4:bd:5d:fd:37:04:99:9a:a2:89:4a:f3:1e:1a:4d:
                    72:ef:fa:ee:3a:de:09:04:9c:d9:31:24:41:f5:0b:
                    44:11:c8:9c:fd:48:fd:96:89:9a:8c:ea:b4:4c:57:
                    e6:1b:75:1d:f0:0a:5c:46:60:3c:bc:55:30:28:da:
                    25:ff:e8:09:e6:2c:7c:82:95:82:0b:c7:e7:3b:73:
                    06:af:7e:9d:2c:35:1b:a4:34:04:5b:15:d0:36:7c:
                    e7:9d:14:14:56:ad:99:76:f7:2a:19:41:4a:f3:ca:
                    b9:d9:de:a8:0d:33:36:c8:d7:01:5b:71:da:00:cd:
                    4b:ee:2a:6f:81:88:86:f2:07:8b:91:93:01:80:ef:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D2:15:5B:87:D0:E7:94:44:48:60:12:57:D2:98:C0:B2:33:E4:53
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a8:0c:d2:39:5c:c1:bf:89:3a:ab:d7:54:26:2f:9a:3e:dd:
         6e:69:8b:61:98:27:8a:9f:ac:69:cc:e4:3e:4f:40:c8:dd:84:
         9e:19:39:f0:4a:c7:2d:70:ba:f9:66:9e:9a:47:86:f3:bc:7d:
         6a:63:12:b5:46:cf:d8:07:e1:c1:d4:4d:6c:7d:ee:7f:a2:da:
         32:cb:a0:20:33:d0:9b:cd:88:50:41:27:c5:ef:a5:ae:62:34:
         89:51:46:eb:8f:8c:4d:e5:b9:a2:46:e5:14:5e:5b:2f:bc:c0:
         7e:9f:87:cb:ef:c8:0b:77:06:41:62:f7:fe:fd:e4:d3:14:a7:
         a6:42:76:12:f1:4e:53:ef:c1:a4:a3:38:69:be:3f:2c:80:98:
         2f:57:2b:6f:6b:92:88:d4:e2:4d:dc:92:8b:d9:9a:34:c8:7f:
         54:73:fc:0c:fb:f6:52:b4:d1:b5:3a:6a:7a:ab:29:a7:39:c9:
         47:f0:e4:8d:58:ca:1f:92:ba:7a:b7:08:82:79:60:63:e3:4f:
         82:f5:48:99:cf:ed:7a:1a:6e:87:f2:99:b6:72:8c:9c:4b:0d:
         96:f2:6d:8a:7c:0b:1e:49:27:79:f6:79:8e:80:f8:34:fe:f1:
         7e:f7:ce:8e:9a:9d:8e:f2:0c:d5:82:8d:88:35:b2:ec:9d:ff:
         00:bc:3a:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTCOCR/Z2YN/L/FLQvf0NHYnjsrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMzM4QUI5N0Q3Q0VDRjFCNDA4M0Q5QTMxMzZBNTlG
RkI2NjI3RjAeFw0yNTA4MDExOTUyMDFaFw0yNjA3MzExOTU3MDFaMDMxMTAvBgNV
BAMTKDQyRDIxNTVCODdEMEU3OTQ0NDQ4NjAxMjU3RDI5OEMwQjIzM0U0NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgwoSaTNnAchimpP8K1LYc/EQ
6xpma8Oz68VYKahKK3P8/nYCGtezsm4NjiKYs7ic1a78f+llMvMMMqIKYoyHc5rw
8sns8cJ5j2gSMUKUP+RbXag7YP/0VUPyqb0fJNzzfvi3sGmPXYrouQ0u3xbDBBRR
qsfckNS9Xf03BJmaoolK8x4aTXLv+u463gkEnNkxJEH1C0QRyJz9SP2WiZqM6rRM
V+YbdR3wClxGYDy8VTAo2iX/6AnmLHyClYILx+c7cwavfp0sNRukNARbFdA2fOed
FBRWrZl29yoZQUrzyrnZ3qgNMzbI1wFbcdoAzUvuKm+BiIbyB4uRkwGA7zMJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQtIVW4fQ55RESGASV9KYwLIz5FMwHwYDVR0j
BBgwFoAUQMM4q5fXzs8bQIPZoxNqWf+2Yn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnAxMWppRGVFVUdwTmZlUGd4djZmbVdIdm5VSjhpb1hrQnpLN1A3TkpW
QzIvMC80MEMzMzhBQjk3RDdDRUNGMUI0MDgzRDlBMzEzNkE1OUZGQjY2MjdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQzMzOEFCOTdEN0NFQ0Yx
QjQwODNEOUEzMTM2QTU5RkZCNjYyN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwMTFqaURlRVVHcE5mZVBneHY2Zm1XSHZuVUo4aW9Ya0J6SzdQN05KVkMyLzAv
MzEzMzMxMmUzMTMwMzAyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDZPwwDQYJKoZIhvcNAQELBQADggEBAKioDNI5
XMG/iTqr11QmL5o+3W5pi2GYJ4qfrGnM5D5PQMjdhJ4ZOfBKxy1wuvlmnppHhvO8
fWpjErVGz9gH4cHUTWx97n+i2jLLoCAz0JvNiFBBJ8Xvpa5iNIlRRuuPjE3luaJG
5RReWy+8wH6fh8vvyAt3BkFi9/795NMUp6ZCdhLxTlPvwaSjOGm+PyyAmC9XK29r
kojU4k3ckovZmjTIf1Rz/Az79lK00bU6anqrKac5yUfw5I1Yyh+Sunq3CIJ5YGPj
T4L1SJnP7XoabofymbZyjJxLDZbybYp8Cx5JJ3n2eY6A+DT+8X73zo6anY7yDNWC
jYg1suyd/wC8Oug=
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:54 2025 by rpki-client