Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37362e302f32332d3234203d3e203533303632.roa
File:                     3133312e302e37362e302f32332d3234203d3e203533303632.roa (raw, json)
Hash identifier:          ccEJnmdzk8q8tgR7fGWDOlowzu6zl24JdpPspXztJMc=
Subject key identifier:   9A:A3:EB:23:62:40:48:4C:DE:10:FB:53:A7:26:E0:6C:B5:9C:60:13
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       20130D3F6587BC2C6FC84067D1BE1ABE6D9C8F8B
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37362e302f32332d3234203d3e203533303632.roa
Signing time:             Mon 26 May 2025 19:01:17 +0000
ROA not before:           Mon 26 May 2025 18:56:17 +0000
ROA not after:            Mon 25 May 2026 19:01:17 +0000
asID:                     53062
IP address blocks:        131.0.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 07:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:13:0d:3f:65:87:bc:2c:6f:c8:40:67:d1:be:1a:be:6d:9c:8f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: May 26 18:56:17 2025 GMT
            Not After : May 25 19:01:17 2026 GMT
        Subject: CN=9AA3EB236240484CDE10FB53A726E06CB59C6013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:f7:98:27:61:09:1d:69:25:73:37:15:c7:
                    66:13:83:d3:c2:53:88:54:9c:03:cb:ce:f1:2d:f9:
                    ca:f2:de:6c:68:e6:d1:ed:80:e8:be:cb:f5:c9:44:
                    8d:b3:01:db:f6:e2:b6:7a:bc:d0:32:4e:74:cb:b4:
                    a4:42:9b:a1:6b:ca:65:b9:16:03:b9:a1:59:f6:31:
                    91:ad:40:ec:20:49:81:9b:e1:dd:97:d9:bd:7b:3f:
                    0f:a9:29:23:98:57:96:12:60:67:26:71:86:55:97:
                    ec:81:c1:52:a3:c7:26:d3:10:68:65:1f:81:80:39:
                    ff:2c:9d:c7:c1:68:9f:d3:8d:ea:f9:9f:1b:f7:e7:
                    39:35:c8:aa:63:50:28:7a:25:9e:32:4c:52:6a:6f:
                    c0:9c:90:29:61:ee:ef:6b:31:d1:76:6e:31:22:59:
                    bb:07:6c:a9:c9:9c:5b:9d:84:c7:67:a2:df:13:58:
                    85:34:da:65:ba:e3:83:00:a1:58:ad:8c:fc:6a:a4:
                    0e:35:16:36:0a:55:52:1b:9b:12:be:fd:34:fb:fc:
                    a4:d9:56:7d:23:b0:58:8e:8d:01:9b:0c:0d:f4:10:
                    ae:2d:07:07:98:75:b4:9f:3f:99:20:79:31:62:b6:
                    08:e5:e8:17:79:09:0a:70:fa:29:b9:3c:f8:ca:80:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:EB:23:62:40:48:4C:DE:10:FB:53:A7:26:E0:6C:B5:9C:60:13
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37362e302f32332d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:1f:02:ec:c8:a1:e4:28:ec:ef:d6:da:f1:5b:59:f2:43:
         e4:bc:7c:5b:7a:33:18:6b:76:e5:cc:ba:6b:a4:df:07:cd:6d:
         af:cb:e3:5f:ff:b1:02:a6:9d:23:56:bd:79:54:c6:e9:bf:b8:
         45:38:60:f6:4e:dc:42:d6:bb:b6:d5:d1:bc:8c:d3:b1:cc:28:
         e4:55:81:76:d2:07:57:c1:68:75:8a:90:f3:fd:b6:74:27:41:
         53:69:8e:b7:68:c3:c0:b8:93:ec:cd:57:5b:d7:29:3d:5e:87:
         33:60:ee:1e:4c:0b:fd:3f:84:7a:5a:6f:c6:69:2c:ac:ee:6f:
         db:05:1a:47:79:8c:f3:cb:98:45:51:2f:2a:f1:b2:4a:1a:57:
         b0:8f:7a:e5:3c:b4:85:a4:a1:eb:89:ba:8e:89:8d:e2:91:d1:
         43:68:f5:eb:ef:ac:8a:f7:8d:6e:8f:bd:09:2d:a8:4d:15:eb:
         59:5e:91:6e:db:3c:b8:56:07:58:3c:22:41:2d:00:52:dc:84:
         8e:e3:81:ce:73:83:d6:09:e7:5c:05:11:95:7a:b6:2c:15:96:
         46:ad:90:c4:6c:52:57:e2:2f:37:07:de:2d:ea:0e:c8:35:b8:
         85:92:d5:c4:3d:4d:50:3b:2d:c8:4d:70:f9:50:b8:e2:ca:cd:
         8a:77:50:e9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUIBMNP2WHvCxvyEBn0b4avm2cj4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2
RDdBOTE5NDAeFw0yNTA1MjYxODU2MTdaFw0yNjA1MjUxOTAxMTdaMDMxMTAvBgNV
BAMTKDlBQTNFQjIzNjI0MDQ4NENERTEwRkI1M0E3MjZFMDZDQjU5QzYwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZiPeYJ2EJHWklczcVx2YTg9PC
U4hUnAPLzvEt+cry3mxo5tHtgOi+y/XJRI2zAdv24rZ6vNAyTnTLtKRCm6FrymW5
FgO5oVn2MZGtQOwgSYGb4d2X2b17Pw+pKSOYV5YSYGcmcYZVl+yBwVKjxybTEGhl
H4GAOf8sncfBaJ/Tjer5nxv35zk1yKpjUCh6JZ4yTFJqb8CckClh7u9rMdF2bjEi
WbsHbKnJnFudhMdnot8TWIU02mW644MAoVitjPxqpA41FjYKVVIbmxK+/TT7/KTZ
Vn0jsFiOjQGbDA30EK4tBweYdbSfP5kgeTFitgjl6Bd5CQpw+im5PPjKgJURAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUmqPrI2JASEzeEPtTpybgbLWcYBMwHwYDVR0j
BBgwFoAUO0WkdP287KlLuMvDbhB7yW16kZQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzIvM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2RDdBOTE5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjQ1QTQ3NEZEQkNFQ0E5NEJC
OENCQzM2RTEwN0JDOTZEN0E5MTk0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzIvMzEz
MzMxMmUzMDJlMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1MzMzMDM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGDAEwwDQYJKoZIhvcNAQELBQADggEBAFtwHwLsyKHkKOzv1trx
W1nyQ+S8fFt6MxhrduXMumuk3wfNba/L41//sQKmnSNWvXlUxum/uEU4YPZO3ELW
u7bV0byM07HMKORVgXbSB1fBaHWKkPP9tnQnQVNpjrdow8C4k+zNV1vXKT1ehzNg
7h5MC/0/hHpab8ZpLKzub9sFGkd5jPPLmEVRLyrxskoaV7CPeuU8tIWkoeuJuo6J
jeKR0UNo9evvrIr3jW6PvQktqE0V61lekW7bPLhWB1g8IkEtAFLchI7jgc5zg9YJ
51wFEZV6tiwVlkatkMRsUlfiLzcH3i3qDsg1uIWS1cQ9TVA7LchNcPlQuOLKzYp3
UOk=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:44:19 2025 by rpki-client