Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3232203d3e20323730373737.roa
File:                     3133312e3136312e3131362e302f32322d3232203d3e20323730373737.roa (raw, json)
Hash identifier:          DxLgBdIYAn3UKxjtUci4PADlVwCHIGvBwmEDbTNhFOQ=
Subject key identifier:   0C:C0:97:72:CD:96:5B:4E:E9:A5:66:2E:2D:99:F2:9F:DE:D9:26:74
Certificate issuer:       /CN=202D680D4DF230713D515261F90FC214E69FBA3E
Certificate serial:       6BDFFA5966BE39C1DE867E455C5DBCD41C341EBD
Authority key identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3232203d3e20323730373737.roa
Signing time:             Mon 12 May 2025 18:23:05 +0000
ROA not before:           Mon 12 May 2025 18:18:05 +0000
ROA not after:            Mon 11 May 2026 18:23:05 +0000
asID:                     270777
IP address blocks:        131.161.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:fa:59:66:be:39:c1:de:86:7e:45:5c:5d:bc:d4:1c:34:1e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202D680D4DF230713D515261F90FC214E69FBA3E
        Validity
            Not Before: May 12 18:18:05 2025 GMT
            Not After : May 11 18:23:05 2026 GMT
        Subject: CN=0CC09772CD965B4EE9A5662E2D99F29FDED92674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:5e:49:f2:9a:b9:10:e8:c4:7c:31:f4:0f:
                    ff:6e:14:e2:4f:8a:ae:2f:b2:83:b5:f8:8b:2b:7c:
                    3f:87:23:c5:4c:0a:a7:ae:ee:1c:d3:89:6c:2c:f2:
                    cb:81:5b:96:d0:63:c6:ab:a5:cc:23:5d:28:94:e7:
                    b1:43:8a:c7:14:5a:51:ed:09:7d:c0:b2:f1:21:05:
                    1e:ab:29:76:a5:fd:12:da:e7:07:b4:ac:5a:86:91:
                    cc:fd:6a:44:b8:6d:5e:b9:5c:33:6b:83:10:2f:82:
                    fa:5b:f0:5d:ad:d0:42:c7:bb:c1:6f:ce:61:20:e1:
                    a9:a9:52:37:3f:f4:b9:77:2c:01:79:36:1a:26:53:
                    45:0b:08:32:a6:a6:76:53:bd:b7:2d:c4:74:3a:3b:
                    73:23:09:28:ea:a6:f6:ae:23:0c:26:d4:17:d7:ef:
                    7b:f1:1f:2e:df:49:12:8a:32:07:6c:8c:38:a8:52:
                    64:2e:8e:bd:69:2f:56:d3:ed:b1:80:e5:aa:a5:1b:
                    7d:29:65:16:1b:c1:99:aa:1e:7a:c0:ee:d9:a6:f0:
                    cf:c7:f4:47:b3:0c:24:1c:0c:2f:33:7f:0d:07:84:
                    1c:79:6b:91:3a:5d:2b:c1:6d:db:f0:bc:a7:1c:cc:
                    bf:84:04:c3:23:35:38:40:d8:b9:40:4f:45:53:ec:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:97:72:CD:96:5B:4E:E9:A5:66:2E:2D:99:F2:9F:DE:D9:26:74
            X509v3 Authority Key Identifier:
                keyid:20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3232203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:25:9a:e2:7e:36:57:d4:de:6e:7b:1f:8d:b9:64:49:91:
         e0:e9:77:cd:45:55:b8:26:61:09:f8:9e:b5:2c:2e:eb:a4:e7:
         75:e8:b3:ce:e6:d1:41:80:a8:95:fc:fd:fd:0b:a4:d8:5c:f2:
         ca:fd:15:30:25:8d:55:48:06:a8:03:ad:af:d2:fd:2b:0a:aa:
         15:60:2d:f7:f3:f1:d6:35:57:4d:65:79:89:86:45:a1:aa:55:
         69:66:21:62:4b:6c:e3:69:83:4a:4f:c5:5e:e4:4c:96:b8:2d:
         99:c0:a0:ef:b7:b4:59:8b:64:1d:eb:9b:3e:a7:bc:65:aa:7a:
         8e:31:6e:67:e9:3b:42:d6:76:2c:87:31:73:e1:20:ef:6a:00:
         cf:06:02:c3:e4:51:bb:da:ff:22:02:78:ac:c0:b7:da:5b:c0:
         45:b3:75:fe:b6:05:3c:7c:8c:70:e7:18:71:ec:1e:aa:2f:cf:
         a1:3a:51:a5:75:15:00:0d:37:63:5c:5a:bc:66:21:57:15:19:
         3a:d3:05:de:f0:fd:bf:eb:82:0e:6b:7b:8e:c4:23:1b:12:8b:
         1a:1e:73:01:eb:a0:62:63:38:5c:32:27:13:a6:fc:36:9d:6c:
         e9:ed:99:1e:73:33:70:38:37:c3:10:9d:ad:37:e1:a9:3d:5b:
         bb:7b:e8:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa9/6WWa+OcHehn5FXF281Bw0Hr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRDY4MEQ0REYyMzA3MTNENTE1MjYxRjkwRkMyMTRF
NjlGQkEzRTAeFw0yNTA1MTIxODE4MDVaFw0yNjA1MTExODIzMDVaMDMxMTAvBgNV
BAMTKDBDQzA5NzcyQ0Q5NjVCNEVFOUE1NjYyRTJEOTlGMjlGREVEOTI2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qF5J8pq5EOjEfDH0D/9uFOJP
iq4vsoO1+IsrfD+HI8VMCqeu7hzTiWws8suBW5bQY8arpcwjXSiU57FDiscUWlHt
CX3AsvEhBR6rKXal/RLa5we0rFqGkcz9akS4bV65XDNrgxAvgvpb8F2t0ELHu8Fv
zmEg4ampUjc/9Ll3LAF5NhomU0ULCDKmpnZTvbctxHQ6O3MjCSjqpvauIwwm1BfX
73vxHy7fSRKKMgdsjDioUmQujr1pL1bT7bGA5aqlG30pZRYbwZmqHnrA7tmm8M/H
9EezDCQcDC8zfw0HhBx5a5E6XSvBbdvwvKcczL+EBMMjNThA2LlAT0VT7OcTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDMCXcs2WW07ppWYuLZnyn97ZJnQwHwYDVR0j
BBgwFoAUIC1oDU3yMHE9UVJh+Q/CFOafuj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzU1SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpi
WGsvMC8yMDJENjgwRDRERjIzMDcxM0Q1MTUyNjFGOTBGQzIxNEU2OUZCQTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMkQ2ODBENERGMjMwNzEz
RDUxNTI2MUY5MEZDMjE0RTY5RkJBM0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM3MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhdDANBgkqhkiG9w0BAQsFAAOCAQEAMV4l
muJ+NlfU3m57H425ZEmR4Ol3zUVVuCZhCfietSwu66TndeizzubRQYColfz9/Quk
2Fzyyv0VMCWNVUgGqAOtr9L9KwqqFWAt9/Px1jVXTWV5iYZFoapVaWYhYkts42mD
Sk/FXuRMlrgtmcCg77e0WYtkHeubPqe8Zap6jjFuZ+k7QtZ2LIcxc+Eg72oAzwYC
w+RRu9r/IgJ4rMC32lvARbN1/rYFPHyMcOcYceweqi/PoTpRpXUVAA03Y1xavGYh
VxUZOtMF3vD9v+uCDmt7jsQjGxKLGh5zAeugYmM4XDInE6b8Np1s6e2ZHnMzcDg3
wxCdrTfhqT1bu3voKQ==
-----END CERTIFICATE-----
Generated at Tue May 13 21:49:34 2025 by rpki-client