Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
File:                     3133312e3136312e342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          dhL9DRjhlind6fPKDQG6B9J9olDIUvQGWCsrN6b+m+4=
Subject key identifier:   B2:8C:FB:AF:E3:6F:09:2F:39:F7:08:D1:DF:73:35:F0:57:2B:52:D9
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       5B9C03552B03A2488070EF7D4F43195622780938
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:31 +0000
ROA not before:           Sat 02 Aug 2025 12:53:31 +0000
ROA not after:            Sat 01 Aug 2026 12:58:31 +0000
asID:                     28201
IP address blocks:        131.161.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9c:03:55:2b:03:a2:48:80:70:ef:7d:4f:43:19:56:22:78:09:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:31 2025 GMT
            Not After : Aug  1 12:58:31 2026 GMT
        Subject: CN=B28CFBAFE36F092F39F708D1DF7335F0572B52D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:ab:d1:27:a4:39:c5:8c:c6:a6:b6:5c:83:
                    7a:64:aa:98:55:55:6a:cb:7b:40:9b:9d:5b:a4:35:
                    c1:bb:ac:96:d6:40:6a:7d:aa:92:41:75:62:71:44:
                    f7:3c:17:0c:b4:36:f7:2a:42:18:ba:30:88:45:30:
                    3a:4a:34:cc:d4:ff:f6:29:4d:77:74:c7:ad:b3:28:
                    7e:40:d9:9e:20:f2:db:79:ae:f4:4c:03:77:15:83:
                    85:2e:a5:72:f8:8d:68:38:fa:4a:80:85:7e:85:f5:
                    10:db:72:c8:b2:2f:5b:3a:98:83:a3:09:f2:bb:aa:
                    f0:dd:88:85:a4:a5:b7:26:24:1d:b1:a6:81:4f:3d:
                    12:f8:49:21:31:d7:75:b9:c6:53:bc:9d:90:39:71:
                    b3:25:ad:bc:9c:e8:09:1d:50:3e:22:cf:d7:17:7b:
                    c6:02:3f:8e:a2:dc:8a:3e:24:a9:05:d0:47:89:12:
                    52:3b:e2:8f:21:a7:04:67:b3:79:c3:db:91:0c:18:
                    62:06:38:08:38:80:ec:a5:74:72:bd:7b:f6:45:c6:
                    32:10:3e:43:5a:b2:f4:10:61:5f:07:87:af:7a:fb:
                    a5:7e:4c:b4:c1:1e:40:1a:32:44:7b:34:af:33:a8:
                    50:66:68:43:8b:fe:4e:52:af:c2:93:3e:b7:ea:1d:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8C:FB:AF:E3:6F:09:2F:39:F7:08:D1:DF:73:35:F0:57:2B:52:D9
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:7f:bc:64:08:d2:b8:6c:09:39:55:bd:9a:ec:32:c3:0e:
         d0:70:80:76:6b:b1:bc:5b:2e:6a:f7:2b:c6:94:dc:e6:83:51:
         4a:c5:e9:12:7d:cf:16:0f:78:41:18:dd:ff:a6:82:d5:99:90:
         69:8e:ed:f2:d4:06:5a:7a:c1:69:a3:83:46:73:91:d8:1f:a8:
         ec:7f:c1:7c:a7:ac:79:c8:6a:11:b9:cc:7d:82:35:a6:07:51:
         9e:4b:15:48:5c:df:94:28:28:d6:d3:6d:31:da:c8:9f:d9:28:
         3a:5f:80:23:25:ad:3c:8b:19:30:a7:d3:e3:4b:7f:ef:16:ef:
         0c:c4:e3:11:3d:90:a4:ee:d1:f3:d0:df:3f:48:6f:e5:6b:a2:
         4a:68:76:8b:e8:67:fa:0b:c0:fb:20:f4:55:3e:d7:19:af:29:
         f8:cd:57:ee:ce:f6:2d:31:61:d2:4c:ea:63:48:5d:17:cf:4f:
         10:6f:2e:1e:41:b6:7f:65:36:f1:28:de:bf:64:f1:89:34:d7:
         e2:04:c8:23:7e:5e:2b:a6:05:1a:38:63:ca:e7:49:40:c9:ef:
         90:d1:71:50:df:22:dd:27:3a:3d:82:60:1f:f2:84:24:61:58:
         4b:96:f8:4e:69:1b:31:29:13:43:9b:c4:86:87:d8:b1:3d:e6:
         1d:5e:ed:32
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW5wDVSsDokiAcO99T0MZViJ4CTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTA4MDIxMjUzMzFaFw0yNjA4MDExMjU4MzFaMDMxMTAvBgNV
BAMTKEIyOENGQkFGRTM2RjA5MkYzOUY3MDhEMURGNzMzNUYwNTcyQjUyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyq6vRJ6Q5xYzGprZcg3pkqphV
VWrLe0CbnVukNcG7rJbWQGp9qpJBdWJxRPc8Fwy0NvcqQhi6MIhFMDpKNMzU//Yp
TXd0x62zKH5A2Z4g8tt5rvRMA3cVg4UupXL4jWg4+kqAhX6F9RDbcsiyL1s6mIOj
CfK7qvDdiIWkpbcmJB2xpoFPPRL4SSEx13W5xlO8nZA5cbMlrbyc6AkdUD4iz9cX
e8YCP46i3Io+JKkF0EeJElI74o8hpwRns3nD25EMGGIGOAg4gOyldHK9e/ZFxjIQ
PkNasvQQYV8Hh696+6V+TLTBHkAaMkR7NK8zqFBmaEOL/k5Sr8KTPrfqHbu/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUsoz7r+NvCS859wjR33M18FcrUtkwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzMzMxMmUzMTM2MzEyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMy
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoOhBDANBgkqhkiG9w0BAQsFAAOCAQEAiN1/vGQI0rhs
CTlVvZrsMsMO0HCAdmuxvFsuavcrxpTc5oNRSsXpEn3PFg94QRjd/6aC1ZmQaY7t
8tQGWnrBaaODRnOR2B+o7H/BfKesechqEbnMfYI1pgdRnksVSFzflCgo1tNtMdrI
n9koOl+AIyWtPIsZMKfT40t/7xbvDMTjET2QpO7R89DfP0hv5WuiSmh2i+hn+gvA
+yD0VT7XGa8p+M1X7s72LTFh0kzqY0hdF89PEG8uHkG2f2U28Sjev2TxiTTX4gTI
I35eK6YFGjhjyudJQMnvkNFxUN8i3Sc6PYJgH/KEJGFYS5b4TmkbMSkTQ5vEhofY
sT3mHV7tMg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:57:12 2025 by rpki-client