Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa
File:                     3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=
Subject key identifier:   27:35:A7:65:22:26:90:63:09:E2:0A:71:8E:FC:BF:4C:C6:86:E2:79
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       0201C42FE79EF2F62A6C106F15D8F86820FF499D
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 16 Apr 2025 13:55:45 +0000
ROA not before:           Wed 16 Apr 2025 13:50:45 +0000
ROA not after:            Wed 15 Apr 2026 13:55:45 +0000
asID:                     262316
IP address blocks:        131.221.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:01:c4:2f:e7:9e:f2:f6:2a:6c:10:6f:15:d8:f8:68:20:ff:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Apr 16 13:50:45 2025 GMT
            Not After : Apr 15 13:55:45 2026 GMT
        Subject: CN=2735A7652226906309E20A718EFCBF4CC686E279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:7d:0d:e1:49:17:9f:d5:08:c9:93:c3:fe:
                    5c:7c:e0:f4:7f:8a:6b:42:4e:1c:a2:f3:cd:49:2a:
                    ec:aa:9c:2c:6b:1d:38:50:88:2a:d5:62:0e:b5:5e:
                    fc:36:e5:57:a5:4d:65:16:23:f5:38:ec:ba:3f:76:
                    78:06:40:57:2f:0c:f5:33:d1:22:d6:4f:c8:8f:3f:
                    2a:22:c3:ed:e9:c9:6b:d5:bc:42:c9:67:9d:3e:b1:
                    51:4c:3e:45:98:7f:11:b3:ed:9e:e6:a8:8d:75:22:
                    26:5d:eb:a2:26:07:67:25:f1:79:83:fa:89:79:c0:
                    83:49:44:37:39:3c:1d:a0:a9:19:28:82:d3:63:52:
                    0c:af:2a:b5:e1:bb:c6:2a:07:d6:4c:01:73:15:95:
                    14:34:1e:a0:e9:74:4f:01:97:36:a5:07:24:e4:fd:
                    dd:95:ca:54:21:a2:10:69:4f:29:13:37:6e:63:1e:
                    15:15:2b:5a:c2:e5:56:7a:05:0c:ba:08:38:34:af:
                    be:05:86:71:d4:05:d2:e1:2a:f2:b5:15:cb:cd:44:
                    1d:5e:28:1e:f6:08:3f:14:0b:17:b6:22:b6:ff:86:
                    dd:a4:3c:1c:04:96:2a:64:33:14:07:a8:02:88:48:
                    ba:18:e0:8d:aa:43:d1:4d:68:64:e1:61:b3:ff:fd:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:A7:65:22:26:90:63:09:E2:0A:71:8E:FC:BF:4C:C6:86:E2:79
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:71:77:c0:e2:b5:fd:42:07:fa:f0:e5:50:a2:c1:ae:37:
         62:b3:22:77:b6:12:aa:7f:3a:cc:3a:fe:59:3e:09:ce:28:13:
         ad:44:ac:a0:25:50:06:5e:dc:da:1d:26:1a:b8:e2:13:be:71:
         ca:ce:57:f2:60:b5:fb:0f:ae:cf:ed:98:80:ba:00:03:20:bb:
         ca:bf:90:de:6c:1e:df:f6:8e:f8:31:5f:a0:c6:db:6a:ce:79:
         0f:1c:31:9a:0e:e0:f8:93:5e:97:e5:91:55:0b:4c:71:73:a2:
         9b:18:8f:5f:d9:10:3f:62:bc:82:b4:40:87:7a:7e:41:55:2c:
         c5:ad:d3:e9:f3:77:d5:c5:de:13:72:41:5a:c7:61:ba:38:45:
         89:f3:68:94:f5:ea:48:1d:a3:93:cb:64:9d:59:b7:94:e3:7d:
         ed:9e:2b:c3:1b:b6:b5:76:9c:f0:de:6b:95:f8:d5:af:9d:50:
         8f:0a:98:9a:8a:07:36:7b:f6:2a:46:b7:18:69:f3:24:4f:15:
         61:77:6c:69:99:41:11:97:4d:12:51:f0:90:15:df:6c:12:75:
         1b:70:55:0d:55:3a:11:74:35:9b:7d:0e:b7:4e:30:0f:3e:b7:
         52:ff:c2:15:4d:b6:20:14:ee:cc:ef:e3:8c:1f:41:c7:45:e2:
         48:6d:ea:70
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAgHEL+ee8vYqbBBvFdj4aCD/SZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNTA0MTYxMzUwNDVaFw0yNjA0MTUxMzU1NDVaMDMxMTAvBgNV
BAMTKDI3MzVBNzY1MjIyNjkwNjMwOUUyMEE3MThFRkNCRjRDQzY4NkUyNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyT30N4UkXn9UIyZPD/lx84PR/
imtCThyi881JKuyqnCxrHThQiCrVYg61Xvw25VelTWUWI/U47Lo/dngGQFcvDPUz
0SLWT8iPPyoiw+3pyWvVvELJZ50+sVFMPkWYfxGz7Z7mqI11IiZd66ImB2cl8XmD
+ol5wINJRDc5PB2gqRkogtNjUgyvKrXhu8YqB9ZMAXMVlRQ0HqDpdE8BlzalByTk
/d2VylQhohBpTykTN25jHhUVK1rC5VZ6BQy6CDg0r74FhnHUBdLhKvK1FcvNRB1e
KB72CD8UCxe2Irb/ht2kPBwElipkMxQHqAKISLoY4I2qQ9FNaGThYbP//YFVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJzWnZSImkGMJ4gpxjvy/TMaG4nkwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzMzMxMmUzMjMyMzEyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPdyDANBgkqhkiG9w0BAQsFAAOCAQEAgz9x
d8Ditf1CB/rw5VCiwa43YrMid7YSqn86zDr+WT4JzigTrUSsoCVQBl7c2h0mGrji
E75xys5X8mC1+w+uz+2YgLoAAyC7yr+Q3mwe3/aO+DFfoMbbas55Dxwxmg7g+JNe
l+WRVQtMcXOimxiPX9kQP2K8grRAh3p+QVUsxa3T6fN31cXeE3JBWsdhujhFifNo
lPXqSB2jk8tknVm3lON97Z4rwxu2tXac8N5rlfjVr51QjwqYmooHNnv2Kka3GGnz
JE8VYXdsaZlBEZdNElHwkBXfbBJ1G3BVDVU6EXQ1m30Ot04wDz63Uv/CFU22IBTu
zO/jjB9Bx0XiSG3qcA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:38 2025 by rpki-client on console.sobornost.net