Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3131302e302f32342d3234203d3e20323634313631.roa
File:                     3133312e3139362e3131302e302f32342d3234203d3e20323634313631.roa (raw, json)
Hash identifier:          rA0l38OJX5Tc22130VELz/4JTQOGSOub4Rph1bSQRM4=
Subject key identifier:   BC:7A:4F:72:37:80:34:36:62:46:6E:AB:90:C0:C6:C2:DA:28:1C:ED
Certificate issuer:       /CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
Certificate serial:       1F41082132BC3BF28EB7D4ABB6DA0AB7C91951CE
Authority key identifier: 7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3131302e302f32342d3234203d3e20323634313631.roa
Signing time:             Fri 04 Jul 2025 21:59:18 +0000
ROA not before:           Fri 04 Jul 2025 21:54:18 +0000
ROA not after:            Fri 03 Jul 2026 21:59:18 +0000
asID:                     264161
IP address blocks:        131.196.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl
                          rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:41:08:21:32:bc:3b:f2:8e:b7:d4:ab:b6:da:0a:b7:c9:19:51:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
        Validity
            Not Before: Jul  4 21:54:18 2025 GMT
            Not After : Jul  3 21:59:18 2026 GMT
        Subject: CN=BC7A4F723780343662466EAB90C0C6C2DA281CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:1a:cd:60:38:88:0b:f6:0e:46:15:1b:6c:
                    1d:b2:37:af:bb:10:fc:e4:b4:5b:49:35:43:79:b3:
                    b9:80:ad:5f:1d:67:2f:e6:46:3f:56:02:b4:7c:37:
                    1c:2e:59:a1:b7:16:6a:51:a9:f2:75:4e:fd:fa:7d:
                    d6:2b:0e:1f:84:7e:dd:8f:28:fb:3c:1d:45:b0:be:
                    ff:23:cd:25:9e:15:11:db:68:64:d0:9b:30:2b:ab:
                    6d:0f:a8:3e:d7:89:1d:c7:e4:4d:e9:83:80:da:ad:
                    2e:65:b4:0c:a9:e5:54:65:8b:2e:82:4a:fd:ce:3f:
                    42:7f:e5:cd:7a:a2:a7:65:6f:73:dc:e1:87:4a:0c:
                    bb:b3:39:b3:92:85:a9:de:f2:cf:ac:2b:bd:f9:97:
                    23:cd:d5:13:08:e0:80:3a:4b:36:6b:61:23:9d:4f:
                    38:80:67:aa:54:c2:4d:bd:1f:89:44:38:77:12:78:
                    ee:b8:ea:a8:68:23:bb:2e:1c:17:f2:00:69:c6:31:
                    a4:f7:62:d5:6f:b9:95:d1:27:b3:e2:fa:bb:ba:0a:
                    7a:35:25:e3:71:37:42:bf:3d:81:64:af:da:f1:00:
                    5a:6e:66:f4:f2:7c:91:05:d5:04:cc:11:c7:2f:bf:
                    c5:46:54:8b:db:1a:fd:c9:1c:01:77:0e:2c:35:45:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:4F:72:37:80:34:36:62:46:6E:AB:90:C0:C6:C2:DA:28:1C:ED
            X509v3 Authority Key Identifier:
                keyid:7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3131302e302f32342d3234203d3e20323634313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:58:42:c0:95:ae:31:9d:6b:79:72:b4:bd:28:3b:7b:a9:0d:
         c3:c2:01:5b:54:cb:91:c9:a0:ab:d3:51:f8:10:09:af:58:98:
         ec:fc:7c:b1:d3:55:f9:e1:65:70:af:f5:4b:f2:99:2c:c5:cd:
         91:68:1d:49:1c:5c:11:70:d6:03:53:73:0e:33:54:c8:f5:f5:
         9a:46:f5:6e:23:b5:5a:2d:4c:94:79:01:90:c9:21:d7:76:f4:
         ee:9d:70:80:9b:3a:60:ab:d9:cd:7f:6f:c1:7c:62:71:3b:8a:
         d8:8d:28:de:e9:d3:89:56:95:9a:69:ba:5a:f5:5a:f3:81:64:
         63:08:87:ff:87:57:82:93:ee:3b:45:f4:e8:89:4e:55:9c:6f:
         00:30:9f:59:6c:75:b5:bb:d8:30:3a:13:c9:ab:73:12:55:97:
         12:27:97:0a:82:6e:0e:75:f7:12:a8:65:09:5a:3e:6a:9d:d3:
         28:e8:f5:7b:8a:60:ca:88:da:9f:e5:fd:d7:72:16:f3:c8:97:
         3b:e1:d9:5f:a0:7a:f1:db:85:b0:06:1a:b4:37:88:81:fa:41:
         5e:41:9c:bc:20:23:19:9d:10:cc:b3:74:69:9b:1f:9d:f2:06:
         f5:29:a0:2d:7d:ad:3a:b8:cd:d3:35:92:78:18:1c:8e:eb:ab:
         93:f2:db:3b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH0EIITK8O/KOt9SrttoKt8kZUc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBOUExMEMwMkI4QjBGRkM0MDg3QTY3QTUwNjU0M0NE
NzlCRERDQzAeFw0yNTA3MDQyMTU0MThaFw0yNjA3MDMyMTU5MThaMDMxMTAvBgNV
BAMTKEJDN0E0RjcyMzc4MDM0MzY2MjQ2NkVBQjkwQzBDNkMyREEyODFDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jBrNYDiIC/YORhUbbB2yN6+7
EPzktFtJNUN5s7mArV8dZy/mRj9WArR8NxwuWaG3FmpRqfJ1Tv36fdYrDh+Eft2P
KPs8HUWwvv8jzSWeFRHbaGTQmzArq20PqD7XiR3H5E3pg4DarS5ltAyp5VRliy6C
Sv3OP0J/5c16oqdlb3Pc4YdKDLuzObOShane8s+sK735lyPN1RMI4IA6SzZrYSOd
TziAZ6pUwk29H4lEOHcSeO646qhoI7suHBfyAGnGMaT3YtVvuZXRJ7Pi+ru6Cno1
JeNxN0K/PYFkr9rxAFpuZvTyfJEF1QTMEccvv8VGVIvbGv3JHAF3Diw1RTAhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvHpPcjeANDZiRm6rkMDGwtooHO0wHwYDVR0j
BBgwFoAUf6mhDAK4sP/ECHpnpQZUPNeb3cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDViQXVjVFZyNEJCTTFGQnU4c2Y3bW1LYlM1ZmRDcXpSTGE4OTFacTZr
M3EvMC83RkE5QTEwQzAyQjhCMEZGQzQwODdBNjdBNTA2NTQzQ0Q3OUJERENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQTlBMTBDMDJCOEIwRkZD
NDA4N0E2N0E1MDY1NDNDRDc5QkREQ0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1YkF1Y1RWcjRCQk0xRkJ1OHNmN21tS2JTNWZkQ3F6UkxhODkxWnE2azNxLzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMxMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPEbjANBgkqhkiG9w0BAQsFAAOCAQEAdlhC
wJWuMZ1reXK0vSg7e6kNw8IBW1TLkcmgq9NR+BAJr1iY7Px8sdNV+eFlcK/1S/KZ
LMXNkWgdSRxcEXDWA1NzDjNUyPX1mkb1biO1Wi1MlHkBkMkh13b07p1wgJs6YKvZ
zX9vwXxicTuK2I0o3unTiVaVmmm6WvVa84FkYwiH/4dXgpPuO0X06IlOVZxvADCf
WWx1tbvYMDoTyatzElWXEieXCoJuDnX3EqhlCVo+ap3TKOj1e4pgyojan+X913IW
88iXO+HZX6B68duFsAYatDeIgfpBXkGcvCAjGZ0QzLN0aZsfnfIG9SmgLX2tOrjN
0zWSeBgcjuurk/LbOw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 19:02:18 2025 by rpki-client