Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa
File:                     3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          WTjH5yProdgq5IJAwd29U0v1oAr6I3NGW42tqpwYi9M=
Subject key identifier:   FC:2A:D7:CE:C0:65:FC:33:98:9B:3E:16:FE:34:A3:AE:14:E2:1E:DD
Certificate issuer:       /CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
Certificate serial:       71E40D27383089B6AD7CA2C7326F440F21DAF3C8
Authority key identifier: FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa
Signing time:             Tue 19 Aug 2025 14:02:21 +0000
ROA not before:           Tue 19 Aug 2025 13:57:21 +0000
ROA not after:            Tue 18 Aug 2026 14:02:21 +0000
asID:                     262293
IP address blocks:        131.161.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e4:0d:27:38:30:89:b6:ad:7c:a2:c7:32:6f:44:0f:21:da:f3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
        Validity
            Not Before: Aug 19 13:57:21 2025 GMT
            Not After : Aug 18 14:02:21 2026 GMT
        Subject: CN=FC2AD7CEC065FC33989B3E16FE34A3AE14E21EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:9c:1f:08:5a:7d:6f:3a:c3:94:68:77:2c:
                    5c:f4:95:74:9b:26:aa:0d:6b:3f:d3:43:17:2b:a7:
                    72:47:11:47:9b:5c:30:51:ee:81:97:4a:9d:34:d3:
                    17:81:61:9b:5b:83:f3:c2:6a:7b:33:c1:ff:d2:bd:
                    a5:d4:e4:0c:d9:a1:56:73:b0:e1:73:07:69:d7:2d:
                    f6:70:8c:19:72:48:0d:52:67:6f:c6:cd:71:c5:54:
                    d1:a5:50:64:0c:a8:bc:8f:63:4d:b1:c9:2d:ac:fc:
                    5b:8a:14:11:b2:85:1c:05:03:2a:bd:e3:a1:37:a6:
                    81:7a:8f:f0:d9:a9:cf:04:fc:51:64:45:af:03:97:
                    66:db:a2:aa:8a:ef:be:e7:6f:bb:5a:7b:a4:f2:92:
                    de:93:e9:58:1b:f9:a0:63:19:c1:67:1a:a4:22:23:
                    21:01:af:a0:80:6f:8a:f4:4b:f6:58:5a:99:8b:82:
                    f8:5e:bc:6a:6f:4b:93:21:11:74:23:b6:4f:0c:12:
                    d5:52:7d:e1:58:89:c9:e6:17:6f:d8:93:e7:32:1b:
                    76:6e:db:75:5e:f2:74:19:64:bb:84:b6:9b:9d:d6:
                    ae:c8:c0:42:af:42:ed:59:ab:85:dd:59:1f:1e:3e:
                    f5:3f:8d:e3:b7:71:d4:9e:1c:e1:fa:17:54:d4:b7:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2A:D7:CE:C0:65:FC:33:98:9B:3E:16:FE:34:A3:AE:14:E2:1E:DD
            X509v3 Authority Key Identifier:
                keyid:FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:bc:f6:32:ee:c2:75:5e:1e:72:78:71:de:5c:e8:3a:92:
         46:69:ff:30:d6:08:cf:2e:60:93:18:8b:40:85:ab:4e:db:32:
         79:9e:95:1e:7e:4d:6a:89:e9:42:a2:80:51:b0:b2:a8:85:93:
         44:79:a9:74:69:46:45:72:4a:d1:73:a1:af:f3:e6:6c:93:f3:
         9c:d5:0d:38:2a:9a:b5:78:bb:dd:70:ed:3d:d1:18:65:1d:7c:
         71:61:fa:b2:42:11:e8:f7:4b:51:df:41:95:8b:aa:a7:76:ab:
         37:a7:a8:19:7f:1a:de:ed:2d:8c:e6:f7:c6:6c:bf:6f:2b:40:
         f1:20:9e:58:62:57:14:15:d9:06:53:52:ef:f5:94:03:04:44:
         a1:d7:08:62:b7:fb:df:80:f5:b2:07:8e:4d:b2:0c:ce:1c:d9:
         b9:1b:ac:f0:7e:6d:50:a4:0e:a3:9e:59:8a:8a:24:8c:e8:4d:
         ea:6a:32:3a:c3:06:d1:90:53:90:bf:66:b6:f0:bf:f2:ce:e8:
         9e:7a:0d:bb:4e:fd:e5:3a:4d:8d:dd:24:7c:27:d7:45:26:da:
         1c:7c:ed:ea:ec:44:11:06:bc:f7:99:05:1b:c5:1d:87:3c:d2:
         78:1c:cd:ba:c4:1f:2e:26:3b:29:8b:3f:15:4b:e1:8d:6f:a2:
         81:76:d5:ef
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUceQNJzgwibatfKLHMm9EDyHa88gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMzMkY1RTc3QkI1NTNBMzA5NkEzM0JCREU3NjgyODdE
MEIxNEIyNjAeFw0yNTA4MTkxMzU3MjFaFw0yNjA4MTgxNDAyMjFaMDMxMTAvBgNV
BAMTKEZDMkFEN0NFQzA2NUZDMzM5ODlCM0UxNkZFMzRBM0FFMTRFMjFFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjZwfCFp9bzrDlGh3LFz0lXSb
JqoNaz/TQxcrp3JHEUebXDBR7oGXSp000xeBYZtbg/PCanszwf/SvaXU5AzZoVZz
sOFzB2nXLfZwjBlySA1SZ2/GzXHFVNGlUGQMqLyPY02xyS2s/FuKFBGyhRwFAyq9
46E3poF6j/DZqc8E/FFkRa8Dl2bboqqK777nb7tae6Tykt6T6Vgb+aBjGcFnGqQi
IyEBr6CAb4r0S/ZYWpmLgvhevGpvS5MhEXQjtk8MEtVSfeFYicnmF2/Yk+cyG3Zu
23Ve8nQZZLuEtpud1q7IwEKvQu1Zq4XdWR8ePvU/jeO3cdSeHOH6F1TUt9OPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/CrXzsBl/DOYmz4W/jSjrhTiHt0wHwYDVR0j
BBgwFoAU/DL153u1U6MJajO73naCh9CxSyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC9GQzMyRjVFNzdCQjU1M0EzMDk2QTMzQkJERTc2ODI4N0QwQjE0QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDMzJGNUU3N0JCNTUzQTMw
OTZBMzNCQkRFNzY4Mjg3RDBCMTRCMjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhhDANBgkqhkiG9w0BAQsFAAOCAQEAb1i8
9jLuwnVeHnJ4cd5c6DqSRmn/MNYIzy5gkxiLQIWrTtsyeZ6VHn5NaonpQqKAUbCy
qIWTRHmpdGlGRXJK0XOhr/PmbJPznNUNOCqatXi73XDtPdEYZR18cWH6skIR6PdL
Ud9BlYuqp3arN6eoGX8a3u0tjOb3xmy/bytA8SCeWGJXFBXZBlNS7/WUAwREodcI
Yrf734D1sgeOTbIMzhzZuRus8H5tUKQOo55ZiookjOhN6moyOsMG0ZBTkL9mtvC/
8s7onnoNu0795TpNjd0kfCfXRSbaHHzt6uxEEQa895kFG8UdhzzSeBzNusQfLiY7
KYs/FUvhjW+igXbV7w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:16 2025 by rpki-client