Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132342e302f32332d3233203d3e203532353430.roa
File:                     3137372e3132392e3132342e302f32332d3233203d3e203532353430.roa (raw, json)
Hash identifier:          awi6xeyQ/VfQ6agRkVAp09LUcgoEL5EfiHAGBjTVS+M=
Subject key identifier:   85:C9:71:50:30:FA:A8:F9:24:37:FD:18:44:77:A0:49:DA:65:D1:9F
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       33BDF4EAE18661D52C098FE3DBD06ECA66CC9E20
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132342e302f32332d3233203d3e203532353430.roa
Signing time:             Wed 01 Oct 2025 04:59:55 +0000
ROA not before:           Wed 01 Oct 2025 04:54:55 +0000
ROA not after:            Wed 30 Sep 2026 04:59:55 +0000
asID:                     52540
IP address blocks:        177.129.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bd:f4:ea:e1:86:61:d5:2c:09:8f:e3:db:d0:6e:ca:66:cc:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Oct  1 04:54:55 2025 GMT
            Not After : Sep 30 04:59:55 2026 GMT
        Subject: CN=85C9715030FAA8F92437FD184477A049DA65D19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:45:b6:eb:5c:92:51:0f:9c:29:9d:e2:6f:
                    75:08:1c:7c:a9:4a:d7:b3:af:ab:5a:ca:da:a7:48:
                    58:c8:80:b7:e0:23:1c:33:e2:9f:50:57:bd:8d:a4:
                    3d:30:1a:7b:cf:cd:0f:df:42:33:76:70:26:79:58:
                    80:6e:53:4b:59:63:77:72:b0:dd:ef:92:d4:ee:44:
                    70:b2:11:45:42:fe:c8:21:e8:fb:85:dc:0a:96:da:
                    b5:8c:03:f2:fb:6f:8c:c8:8e:37:71:97:10:56:04:
                    71:46:f3:3e:41:09:90:65:33:e6:06:0c:04:4d:dc:
                    17:8e:b8:1d:ab:9e:ab:d2:34:89:c1:2b:cd:75:6f:
                    e2:2a:d9:20:be:18:cc:a7:90:3e:dc:a8:bc:73:83:
                    f3:7d:ce:f0:31:d5:50:97:b7:56:19:1a:8f:2c:da:
                    73:01:2f:8f:44:97:27:24:9b:75:94:59:81:96:37:
                    ae:24:0e:08:9f:6b:7c:af:a9:5d:39:82:09:4f:f8:
                    db:46:29:82:13:6d:3c:48:02:fa:aa:45:23:1d:55:
                    34:de:da:53:b9:2f:d6:38:9f:fb:a2:6b:b3:c5:61:
                    b2:2d:e5:fb:f6:45:ba:5d:4e:2e:2e:2f:b3:51:d0:
                    e8:87:08:d1:4f:78:e9:fa:56:69:cf:61:9c:b8:b2:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:71:50:30:FA:A8:F9:24:37:FD:18:44:77:A0:49:DA:65:D1:9F
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132342e302f32332d3233203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:02:6f:ea:4b:33:e5:9d:f9:5d:dc:c4:4a:02:63:7a:83:bc:
         db:ab:88:a5:02:06:83:bf:55:57:9b:46:ae:0d:af:48:8c:47:
         5d:eb:2e:19:6b:ea:ec:56:fd:6b:4f:73:29:f5:89:e3:e4:d6:
         95:b6:25:31:ed:15:91:a1:76:3c:43:41:79:dc:8f:06:1e:fc:
         1d:57:f5:14:ed:e8:a9:78:35:3a:67:d4:40:03:ac:6e:13:19:
         66:4f:fb:a2:78:a1:ef:50:8c:b6:06:14:49:50:87:14:f9:6e:
         cb:35:40:34:de:25:26:21:9e:c7:0b:05:b5:53:40:1b:b8:e1:
         ae:19:45:09:47:57:16:6a:eb:43:a5:df:f1:a4:3d:e4:1c:95:
         eb:57:e1:7d:a3:5d:c2:0c:b0:c7:06:f0:25:58:19:53:3c:20:
         2e:93:b6:25:4a:bd:e5:41:ff:8c:a5:18:ce:77:33:34:46:0e:
         bf:a7:fc:46:c7:3d:cd:12:b3:b1:50:9d:de:b0:c2:0e:cf:b3:
         2d:93:6a:a2:17:a1:42:7f:24:32:73:02:66:fa:43:87:c6:1d:
         f1:ff:e2:0b:45:44:9b:35:0c:c2:e1:a2:e0:f5:12:27:6b:76:
         ba:24:9b:c5:30:25:37:64:1c:cd:b6:0c:27:1c:b8:f9:9e:e1:
         16:8a:fa:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM7306uGGYdUsCY/j29BuymbMniAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBMjI4N0NFQUExMzE3NzgyMTg2NDVCMzc5ODU3NTQz
OTU1Q0EwNjAeFw0yNTEwMDEwNDU0NTVaFw0yNjA5MzAwNDU5NTVaMDMxMTAvBgNV
BAMTKDg1Qzk3MTUwMzBGQUE4RjkyNDM3RkQxODQ0NzdBMDQ5REE2NUQxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYR0W261ySUQ+cKZ3ib3UIHHyp
Stezr6taytqnSFjIgLfgIxwz4p9QV72NpD0wGnvPzQ/fQjN2cCZ5WIBuU0tZY3dy
sN3vktTuRHCyEUVC/sgh6PuF3AqW2rWMA/L7b4zIjjdxlxBWBHFG8z5BCZBlM+YG
DARN3BeOuB2rnqvSNInBK811b+Iq2SC+GMynkD7cqLxzg/N9zvAx1VCXt1YZGo8s
2nMBL49Elyckm3WUWYGWN64kDgifa3yvqV05gglP+NtGKYITbTxIAvqqRSMdVTTe
2lO5L9Y4n/uia7PFYbIt5fv2RbpdTi4uL7NR0OiHCNFPeOn6VmnPYZy4shwXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhclxUDD6qPkkN/0YRHegSdpl0Z8wHwYDVR0j
BBgwFoAUsaIofOqhMXeCGGRbN5hXVDlVygYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMi9CMUEyMjg3Q0VBQTEzMTc3ODIxODY0NUIzNzk4NTc1NDM5NTVDQTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQTIyODdDRUFBMTMxNzc4
MjE4NjQ1QjM3OTg1NzU0Mzk1NUNBMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzIv
MzEzNzM3MmUzMTMyMzkyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxgXwwDQYJKoZIhvcNAQELBQADggEBAIcCb+pL
M+Wd+V3cxEoCY3qDvNuriKUCBoO/VVebRq4Nr0iMR13rLhlr6uxW/WtPcyn1iePk
1pW2JTHtFZGhdjxDQXncjwYe/B1X9RTt6Kl4NTpn1EADrG4TGWZP+6J4oe9QjLYG
FElQhxT5bss1QDTeJSYhnscLBbVTQBu44a4ZRQlHVxZq60Ol3/GkPeQcletX4X2j
XcIMsMcG8CVYGVM8IC6TtiVKveVB/4ylGM53MzRGDr+n/EbHPc0Ss7FQnd6wwg7P
sy2TaqIXoUJ/JDJzAmb6Q4fGHfH/4gtFRJs1DMLhouD1Eidrdrokm8UwJTdkHM22
DCccuPme4RaK+kU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:09:29 2025 by rpki-client