Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/3133312e3136312e3137362e302f32322d3234203d3e20323634333834.roa
File:                     3133312e3136312e3137362e302f32322d3234203d3e20323634333834.roa (raw, json)
Hash identifier:          VRXzZQuBqt5Du35/VEfbHsoo71fyvydqvOwdwOP4kh8=
Subject key identifier:   12:F2:70:8B:E2:FB:6B:7A:D6:4D:6F:F4:7B:F0:7C:01:EE:1F:A8:65
Certificate issuer:       /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
Certificate serial:       73982FED4D4436AAC5E4E0D3514BA4BB150D8FD5
Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/3133312e3136312e3137362e302f32322d3234203d3e20323634333834.roa
Signing time:             Fri 27 Jun 2025 14:09:13 +0000
ROA not before:           Fri 27 Jun 2025 14:04:13 +0000
ROA not after:            Fri 26 Jun 2026 14:09:13 +0000
asID:                     264384
IP address blocks:        131.161.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl
                          rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 22:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:2f:ed:4d:44:36:aa:c5:e4:e0:d3:51:4b:a4:bb:15:0d:8f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
        Validity
            Not Before: Jun 27 14:04:13 2025 GMT
            Not After : Jun 26 14:09:13 2026 GMT
        Subject: CN=12F2708BE2FB6B7AD64D6FF47BF07C01EE1FA865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:28:0a:5e:46:c7:99:ba:be:65:00:d2:ab:
                    3d:21:0d:da:54:05:66:76:56:10:46:35:fe:f4:74:
                    65:bf:5a:6f:40:98:2c:52:ee:1c:3a:f0:a4:8e:b1:
                    99:2e:e5:7a:5c:d5:b0:f2:e3:af:b4:1a:63:a9:5c:
                    65:6d:39:b5:7b:93:de:84:6a:43:99:6e:ce:4a:33:
                    e0:96:63:d7:a0:c8:1d:48:b9:8c:27:b3:0b:77:f8:
                    f0:fe:c5:84:88:2d:b5:03:53:2d:14:f6:f4:32:31:
                    c3:a6:74:51:86:5a:c7:31:0f:63:f0:f1:50:73:8e:
                    5f:b4:83:18:42:b8:04:ea:8f:74:70:ad:09:73:27:
                    dd:f1:2d:5a:a3:bd:46:39:8d:a1:9e:60:9a:9b:a8:
                    f6:67:26:1f:80:f3:7f:08:2e:f0:49:24:e9:d8:b9:
                    9d:46:65:0f:4e:0a:5d:30:66:17:a8:91:c0:de:13:
                    25:e2:68:a7:38:c6:37:90:2b:6f:80:71:44:87:72:
                    e8:20:22:db:64:18:27:5e:57:f4:3a:53:55:b1:d7:
                    42:0c:20:2a:56:63:29:9d:db:16:d4:dd:9e:02:2d:
                    a3:f2:73:dc:b8:3a:11:f3:08:d5:a9:bb:7b:b0:15:
                    cf:bf:34:22:ef:2c:62:ea:5b:b1:d3:78:82:32:50:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F2:70:8B:E2:FB:6B:7A:D6:4D:6F:F4:7B:F0:7C:01:EE:1F:A8:65
            X509v3 Authority Key Identifier:
                keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/3133312e3136312e3137362e302f32322d3234203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:03:e8:e7:f4:25:76:4c:20:c4:9a:f9:3a:bb:fe:e1:81:37:
         d1:22:75:de:5b:4f:25:db:2d:9f:91:93:78:cc:20:94:ec:d2:
         08:5d:65:87:99:bc:64:79:a4:8e:ce:49:7d:68:65:16:17:9e:
         aa:48:8e:59:61:c4:c0:58:86:6c:4f:35:ad:ff:96:c0:f4:25:
         fd:7d:a7:03:50:7f:b0:54:72:58:32:2f:01:f9:a2:46:4f:d8:
         b5:8b:8a:94:24:af:cc:e7:1f:8d:ee:49:c1:73:41:7e:3e:84:
         1d:db:71:75:00:36:64:3f:2d:11:91:86:c5:3a:06:55:61:ec:
         b9:4b:3d:82:34:a5:cf:99:5a:a0:bb:7a:72:ae:d9:c6:9f:6b:
         46:50:89:16:4a:61:bb:68:ab:14:d9:67:c0:77:42:aa:a9:9a:
         15:a0:e6:3c:d2:9c:da:7f:7c:29:bc:66:a9:81:6f:e2:26:0c:
         a1:13:d0:1b:3a:ae:a1:f9:b5:72:50:37:25:53:d5:aa:77:98:
         be:da:75:c7:70:98:8f:b7:b8:d4:86:c1:0e:7c:3b:7c:15:33:
         bc:d9:ad:79:a0:75:4a:3b:14:45:75:44:12:31:01:ff:a7:57:
         1b:d3:0e:3a:81:a5:bb:cc:d1:f3:16:82:00:30:f1:c5:4f:dd:
         8b:b5:45:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc5gv7U1ENqrF5ODTUUukuxUNj9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5REYyNEY5MkY1Nzk1OEMxMEUzMzU3NkVBMEEwN0JF
MURDQThGQjAeFw0yNTA2MjcxNDA0MTNaFw0yNjA2MjYxNDA5MTNaMDMxMTAvBgNV
BAMTKDEyRjI3MDhCRTJGQjZCN0FENjRENkZGNDdCRjA3QzAxRUUxRkE4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXygKXkbHmbq+ZQDSqz0hDdpU
BWZ2VhBGNf70dGW/Wm9AmCxS7hw68KSOsZku5Xpc1bDy46+0GmOpXGVtObV7k96E
akOZbs5KM+CWY9egyB1IuYwnswt3+PD+xYSILbUDUy0U9vQyMcOmdFGGWscxD2Pw
8VBzjl+0gxhCuATqj3RwrQlzJ93xLVqjvUY5jaGeYJqbqPZnJh+A838ILvBJJOnY
uZ1GZQ9OCl0wZheokcDeEyXiaKc4xjeQK2+AcUSHcuggIttkGCdeV/Q6U1Wx10IM
ICpWYymd2xbU3Z4CLaPyc9y4OhHzCNWpu3uwFc+/NCLvLGLqW7HTeIIyUIDLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEvJwi+L7a3rWTW/0e/B8Ae4fqGUwHwYDVR0j
BBgwFoAUK53yT5L1eVjBDjNXbqCge+HcqPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3
dnYvMS8yQjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCOURGMjRGOTJGNTc5NThD
MTBFMzM1NzZFQTBBMDdCRTFEQ0E4RkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0Y3ZZTTZXdnczQ2tCamM5SDUxN2Vldmg2M3prZFhQVFlUV3lTQk5EN3Z2LzEv
MzEzMzMxMmUzMTM2MzEyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhsDANBgkqhkiG9w0BAQsFAAOCAQEAmQPo
5/QldkwgxJr5Orv+4YE30SJ13ltPJdstn5GTeMwglOzSCF1lh5m8ZHmkjs5JfWhl
FheeqkiOWWHEwFiGbE81rf+WwPQl/X2nA1B/sFRyWDIvAfmiRk/YtYuKlCSvzOcf
je5JwXNBfj6EHdtxdQA2ZD8tEZGGxToGVWHsuUs9gjSlz5laoLt6cq7Zxp9rRlCJ
Fkphu2irFNlnwHdCqqmaFaDmPNKc2n98KbxmqYFv4iYMoRPQGzquofm1clA3JVPV
qneYvtp1x3CYj7e41IbBDnw7fBUzvNmteaB1SjsURXVEEjEB/6dXG9MOOoGlu8zR
8xaCADDxxU/di7VFVg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:23:25 2025 by rpki-client