Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa
File:                     3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier:          l4zzMnBjJ6YhC0Ca+fRh8jRUieYlPykofYunmxroJN8=
Subject key identifier:   9C:B4:47:50:87:0E:F6:32:CE:DD:47:1B:B2:BE:54:01:12:48:45:F7
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       5FB66E52C51DED04ECAFD01BEB0930A9CF864348
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:57:12 +0000
ROA not before:           Fri 01 Aug 2025 19:52:12 +0000
ROA not after:            Fri 31 Jul 2026 19:57:12 +0000
asID:                     61657
IP address blocks:        131.100.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b6:6e:52:c5:1d:ed:04:ec:af:d0:1b:eb:09:30:a9:cf:86:43:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:52:12 2025 GMT
            Not After : Jul 31 19:57:12 2026 GMT
        Subject: CN=9CB44750870EF632CEDD471BB2BE5401124845F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:88:5b:8b:8a:9f:c5:c3:c7:69:9e:25:f2:
                    4e:e7:9b:c6:67:53:77:0b:06:d3:76:03:8d:09:cb:
                    e1:a6:48:25:37:73:18:d2:c7:b7:5d:02:ac:1d:c9:
                    6d:21:c0:b6:ea:24:5b:83:59:f7:34:64:7e:cd:5e:
                    04:c1:e5:6f:9a:ba:e0:b7:02:53:5d:35:25:81:0e:
                    79:fb:dd:d6:e3:6e:5a:90:2c:4b:b1:f2:17:09:6f:
                    1b:fc:ed:7d:09:fa:fe:e1:2e:b1:ac:85:a5:e5:aa:
                    91:59:34:c2:bf:20:f2:29:1f:15:3e:70:5e:9c:cc:
                    59:79:65:d9:b8:6c:98:ff:4c:f2:6c:09:47:a7:bd:
                    26:4f:2e:b0:83:e2:50:30:4c:e6:72:bc:71:80:70:
                    52:d4:07:b0:c1:8b:71:c1:df:45:18:93:63:cf:81:
                    d9:f1:14:0e:96:e3:38:13:73:0b:42:03:e5:93:fd:
                    56:3a:05:4e:8a:81:c5:ea:02:82:c4:37:8c:92:c5:
                    55:9d:7f:4d:d2:d3:8e:bd:05:26:97:6a:c4:37:bd:
                    cf:3b:61:23:20:a1:99:0a:51:21:13:5c:5f:93:54:
                    a3:4e:f4:d4:27:85:0d:d3:01:39:32:32:f6:21:07:
                    28:de:5f:95:37:b3:b9:8d:d7:26:98:0d:52:8b:21:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:47:50:87:0E:F6:32:CE:DD:47:1B:B2:BE:54:01:12:48:45:F7
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:6b:41:55:61:6e:19:37:96:24:8e:a2:f5:fe:37:54:f7:
         f8:b1:31:51:dd:07:fc:87:45:1f:72:79:b7:29:d6:48:f3:5a:
         4f:e7:32:5a:bf:3e:38:7d:10:e7:10:d9:b2:12:e5:2c:79:cb:
         4a:96:2d:eb:8f:7a:ae:26:4e:d2:f7:5c:60:1e:96:de:29:86:
         a4:96:00:4a:41:67:7c:55:8a:68:77:47:d8:7a:89:6c:81:f7:
         60:66:4e:67:a2:f3:c0:b2:02:88:cd:3a:34:23:fa:a8:7c:89:
         05:f5:e4:86:da:98:e3:43:3c:bd:8a:1e:50:75:32:4e:08:0d:
         7f:f7:eb:ba:54:75:e0:68:ea:8d:3e:b5:9f:68:f2:c3:ba:7a:
         4e:ab:e7:18:11:63:c1:23:a7:34:96:ff:14:c3:8b:00:e4:1f:
         0b:08:d4:ff:4d:6c:2d:f2:48:14:40:90:35:53:9a:1a:c8:5b:
         3f:f2:de:65:94:d2:7c:5e:03:6c:df:c6:0e:3b:e6:69:40:d2:
         e8:38:f9:05:67:d7:d5:69:de:74:51:b0:27:de:37:52:1b:1e:
         7e:ff:b1:2b:e6:c9:8c:fc:c8:ff:7b:8f:ed:0d:07:fa:41:d1:
         a8:1c:7e:ea:ea:de:ca:69:0e:61:9d:66:12:d1:95:57:32:30:
         1d:72:60:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX7ZuUsUd7QTsr9Ab6wkwqc+GQ0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMzM4QUI5N0Q3Q0VDRjFCNDA4M0Q5QTMxMzZBNTlG
RkI2NjI3RjAeFw0yNTA4MDExOTUyMTJaFw0yNjA3MzExOTU3MTJaMDMxMTAvBgNV
BAMTKDlDQjQ0NzUwODcwRUY2MzJDRURENDcxQkIyQkU1NDAxMTI0ODQ1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16Yhbi4qfxcPHaZ4l8k7nm8Zn
U3cLBtN2A40Jy+GmSCU3cxjSx7ddAqwdyW0hwLbqJFuDWfc0ZH7NXgTB5W+auuC3
AlNdNSWBDnn73dbjblqQLEux8hcJbxv87X0J+v7hLrGshaXlqpFZNMK/IPIpHxU+
cF6czFl5Zdm4bJj/TPJsCUenvSZPLrCD4lAwTOZyvHGAcFLUB7DBi3HB30UYk2PP
gdnxFA6W4zgTcwtCA+WT/VY6BU6KgcXqAoLEN4ySxVWdf03S0469BSaXasQ3vc87
YSMgoZkKUSETXF+TVKNO9NQnhQ3TATkyMvYhByjeX5U3s7mN1yaYDVKLIdHlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnLRHUIcO9jLO3Ucbsr5UARJIRfcwHwYDVR0j
BBgwFoAUQMM4q5fXzs8bQIPZoxNqWf+2Yn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnAxMWppRGVFVUdwTmZlUGd4djZmbVdIdm5VSjhpb1hrQnpLN1A3TkpW
QzIvMC80MEMzMzhBQjk3RDdDRUNGMUI0MDgzRDlBMzEzNkE1OUZGQjY2MjdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQzMzOEFCOTdEN0NFQ0Yx
QjQwODNEOUEzMTM2QTU5RkZCNjYyN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwMTFqaURlRVVHcE5mZVBneHY2Zm1XSHZuVUo4aW9Ya0J6SzdQN05KVkMyLzAv
MzEzMzMxMmUzMTMwMzAyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDZP8wDQYJKoZIhvcNAQELBQADggEBAH+oa0FV
YW4ZN5YkjqL1/jdU9/ixMVHdB/yHRR9yebcp1kjzWk/nMlq/Pjh9EOcQ2bIS5Sx5
y0qWLeuPeq4mTtL3XGAelt4phqSWAEpBZ3xVimh3R9h6iWyB92BmTmei88CyAojN
OjQj+qh8iQX15IbamONDPL2KHlB1Mk4IDX/367pUdeBo6o0+tZ9o8sO6ek6r5xgR
Y8EjpzSW/xTDiwDkHwsI1P9NbC3ySBRAkDVTmhrIWz/y3mWU0nxeA2zfxg475mlA
0ug4+QVn19Vp3nRRsCfeN1IbHn7/sSvmyYz8yP97j+0NB/pB0agcfurq3sppDmGd
ZhLRlVcyMB1yYKc=
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:38 2025 by rpki-client