Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa
File:                     3133312e37322e31362e302f32322d3332203d3e203631373133.roa (raw, json)
Hash identifier:          +/tnNDFK+S0r4hUgOhlPZiGwZeM0OyQfvKFB7XO61yA=
Subject key identifier:   41:72:71:1B:5F:78:61:E1:F6:C3:FB:F6:0F:E8:C2:76:2C:3F:E1:E2
Certificate issuer:       /CN=05820AE98D024F672790ED727F0660C773FF956B
Certificate serial:       0EC2A31F3BE60730A101DF72DC0D713D478F5FEB
Authority key identifier: 05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa
Signing time:             Thu 10 Apr 2025 20:43:06 +0000
ROA not before:           Thu 10 Apr 2025 20:38:06 +0000
ROA not after:            Thu 09 Apr 2026 20:43:06 +0000
asID:                     61713
IP address blocks:        131.72.16.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:a3:1f:3b:e6:07:30:a1:01:df:72:dc:0d:71:3d:47:8f:5f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820AE98D024F672790ED727F0660C773FF956B
        Validity
            Not Before: Apr 10 20:38:06 2025 GMT
            Not After : Apr  9 20:43:06 2026 GMT
        Subject: CN=4172711B5F7861E1F6C3FBF60FE8C2762C3FE1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:79:00:0e:e7:fb:50:59:72:3a:0e:5b:90:
                    06:40:8f:9e:52:c2:6a:0e:09:45:c1:53:68:10:e3:
                    68:34:7c:4e:ac:fa:22:01:69:0b:3c:78:93:3b:4c:
                    bd:3f:cc:a4:d0:67:3d:ea:06:8a:65:f9:f7:f8:fa:
                    46:02:1e:30:60:c8:47:9b:de:66:13:3d:c9:61:de:
                    64:d3:01:16:e9:15:0c:59:c4:74:6d:7c:21:47:ef:
                    c3:ba:80:9d:da:32:f3:c4:cc:5e:81:78:a0:6f:0f:
                    32:08:b2:85:65:6d:55:db:95:56:39:f2:26:c0:1c:
                    02:d1:82:b9:4d:72:69:e4:c1:35:50:23:8d:4c:41:
                    35:ff:a1:05:75:9c:a5:80:d1:98:4c:b6:f5:76:f1:
                    23:d7:95:2b:08:7e:7b:45:f1:d9:ec:0e:26:75:38:
                    3e:9d:b7:11:d8:dc:3f:fd:59:58:c7:b2:19:b6:86:
                    b6:2b:26:ca:05:14:b8:7c:51:e4:75:2a:e6:25:bf:
                    64:d4:99:dc:01:4f:ce:79:6e:da:d5:93:77:25:48:
                    25:4a:c9:52:96:e5:63:1d:ca:aa:dd:dd:09:45:62:
                    c5:74:75:b8:ce:70:60:90:54:df:9e:be:e9:c8:15:
                    65:b0:2b:b0:a9:fa:a4:0b:01:1a:cb:fd:a6:82:b8:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:71:1B:5F:78:61:E1:F6:C3:FB:F6:0F:E8:C2:76:2C:3F:E1:E2
            X509v3 Authority Key Identifier:
                keyid:05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3133312e37322e31362e302f32322d3332203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:81:d9:0e:62:92:d0:41:95:ef:f1:e3:29:b2:b0:cf:36:
         00:73:da:bb:01:c9:9c:7c:b8:44:5c:3b:12:3e:62:cc:fe:a7:
         14:8a:ba:84:c9:57:6e:75:c5:d4:69:92:e8:b3:28:d5:2a:41:
         57:55:31:cd:b3:55:b5:66:65:c9:ce:8b:bc:4b:f0:b7:bf:6f:
         34:23:ba:78:a8:f5:f5:75:73:95:86:e1:97:ce:b3:1a:c2:7f:
         41:c0:51:fd:de:fc:95:0f:c4:95:6c:23:fd:e4:7a:c6:30:7e:
         92:b4:9a:dd:b7:d8:d9:8c:47:2a:0d:13:aa:8b:7b:e8:7b:95:
         57:26:3a:d4:65:bb:50:4d:1f:76:66:e0:84:70:a8:fb:75:6a:
         02:43:0a:fd:a6:5c:9b:f6:26:f8:85:ed:e5:4d:67:b8:6e:b9:
         8f:7a:e5:47:f8:31:2e:55:29:f2:59:6e:74:68:8d:2f:20:ba:
         71:f9:0d:ee:a3:da:50:3f:86:d4:4d:16:7b:8a:cf:02:cf:36:
         04:3f:8d:c5:97:58:be:dd:45:ad:fa:c4:12:34:73:96:36:81:
         21:da:56:fe:10:f2:94:b7:fc:c9:d5:27:30:46:9b:1a:e4:9a:
         b5:6c:b2:40:09:f7:d4:cb:ae:64:c8:05:b7:90:1d:72:3d:bf:
         53:2a:b5:ba
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDsKjHzvmBzChAd9y3A1xPUePX+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU4MjBBRTk4RDAyNEY2NzI3OTBFRDcyN0YwNjYwQzc3
M0ZGOTU2QjAeFw0yNTA0MTAyMDM4MDZaFw0yNjA0MDkyMDQzMDZaMDMxMTAvBgNV
BAMTKDQxNzI3MTFCNUY3ODYxRTFGNkMzRkJGNjBGRThDMjc2MkMzRkUxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMM3kADuf7UFlyOg5bkAZAj55S
wmoOCUXBU2gQ42g0fE6s+iIBaQs8eJM7TL0/zKTQZz3qBopl+ff4+kYCHjBgyEeb
3mYTPclh3mTTARbpFQxZxHRtfCFH78O6gJ3aMvPEzF6BeKBvDzIIsoVlbVXblVY5
8ibAHALRgrlNcmnkwTVQI41MQTX/oQV1nKWA0ZhMtvV28SPXlSsIfntF8dnsDiZ1
OD6dtxHY3D/9WVjHshm2hrYrJsoFFLh8UeR1KuYlv2TUmdwBT855btrVk3clSCVK
yVKW5WMdyqrd3QlFYsV0dbjOcGCQVN+evunIFWWwK7Cp+qQLARrL/aaCuKlBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQXJxG194YeH2w/v2D+jCdiw/4eIwHwYDVR0j
BBgwFoAUBYIK6Y0CT2cnkO1yfwZgx3P/lWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpqVmVUenNIMmhmeGlDVXYzQ0gxeTd1a2VjZ3F6N1pNdTJrdFBLQVRX
Z1IvMC8wNTgyMEFFOThEMDI0RjY3Mjc5MEVENzI3RjA2NjBDNzczRkY5NTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1ODIwQUU5OEQwMjRGNjcy
NzkwRUQ3MjdGMDY2MEM3NzNGRjk1NkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqalZlVHpzSDJoZnhpQ1V2M0NIMXk3dWtlY2dxejdaTXUya3RQS0FUV2dSLzAv
MzEzMzMxMmUzNzMyMmUzMTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoNIEDANBgkqhkiG9w0BAQsFAAOCAQEAr92B2Q5iktBB
le/x4ymysM82AHPauwHJnHy4RFw7Ej5izP6nFIq6hMlXbnXF1GmS6LMo1SpBV1Ux
zbNVtWZlyc6LvEvwt79vNCO6eKj19XVzlYbhl86zGsJ/QcBR/d78lQ/ElWwj/eR6
xjB+krSa3bfY2YxHKg0Tqot76HuVVyY61GW7UE0fdmbghHCo+3VqAkMK/aZcm/Ym
+IXt5U1nuG65j3rlR/gxLlUp8lludGiNLyC6cfkN7qPaUD+G1E0We4rPAs82BD+N
xZdYvt1FrfrEEjRzljaBIdpW/hDylLf8ydUnMEabGuSatWyyQAn31MuuZMgFt5Ad
cj2/Uyq1ug==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:05 2025 by rpki-client on console.sobornost.net