Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37352e302f32342d3234203d3e203631373536.roa
File:                     3133312e3130302e37352e302f32342d3234203d3e203631373536.roa (raw, json)
Hash identifier:          9XqQZjG2rLwoB18fXlu+izBnz/MAwilQ6rLKsHNaBYo=
Subject key identifier:   5F:EC:EB:D6:D4:13:99:45:A2:18:16:7F:0A:2B:ED:D3:0B:D0:80:E7
Certificate issuer:       /CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
Certificate serial:       5D53E03215323F950D562FDF145BED2595FE88C6
Authority key identifier: A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37352e302f32342d3234203d3e203631373536.roa
Signing time:             Wed 16 Apr 2025 18:38:38 +0000
ROA not before:           Wed 16 Apr 2025 18:33:38 +0000
ROA not after:            Wed 15 Apr 2026 18:38:38 +0000
asID:                     61756
IP address blocks:        131.100.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:53:e0:32:15:32:3f:95:0d:56:2f:df:14:5b:ed:25:95:fe:88:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
        Validity
            Not Before: Apr 16 18:33:38 2025 GMT
            Not After : Apr 15 18:38:38 2026 GMT
        Subject: CN=5FECEBD6D4139945A218167F0A2BEDD30BD080E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4c:a0:ad:dd:52:ce:e8:47:99:e5:b1:90:fc:
                    44:8c:d3:df:1a:02:1b:f4:34:ea:71:3e:74:ed:d5:
                    74:d7:49:38:d0:54:8f:ef:d1:ae:11:bc:ff:81:c5:
                    8c:5a:86:97:d7:16:1b:e7:3e:de:fa:dd:6a:00:de:
                    7a:ba:6c:c8:80:eb:cc:42:ed:5d:f5:33:e0:1e:e8:
                    0b:01:b5:2e:08:c0:1f:87:06:76:4e:48:c0:ed:04:
                    8e:7c:40:62:42:70:af:3f:d3:ff:8d:18:5d:f0:a4:
                    ce:f8:58:81:51:27:46:29:10:07:46:a4:47:2b:b0:
                    26:79:30:c2:58:6b:5a:6a:68:8b:9a:75:31:15:c2:
                    79:b5:c2:7e:f1:82:84:e0:3b:0d:38:57:9d:69:9f:
                    a1:92:b9:40:a4:7a:b7:2e:6c:da:5d:39:db:c6:a5:
                    0f:1c:c0:30:33:ee:05:9c:e0:d6:9a:af:ce:77:a5:
                    7a:77:63:39:4c:cc:ff:70:5b:1e:7a:1a:58:87:43:
                    9e:39:58:ba:8b:89:1c:0d:cf:c1:b4:9c:76:77:63:
                    ff:65:d1:10:0a:b3:6f:7a:a4:27:37:99:c0:ec:2c:
                    4c:4f:53:4d:63:50:a1:aa:95:36:06:5f:31:21:85:
                    2e:34:a3:95:af:2b:3a:77:d0:44:f9:59:b4:c4:b7:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EC:EB:D6:D4:13:99:45:A2:18:16:7F:0A:2B:ED:D3:0B:D0:80:E7
            X509v3 Authority Key Identifier:
                keyid:A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37352e302f32342d3234203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:2e:bc:69:0c:8f:e6:7d:c3:bf:c3:e1:ac:af:83:c8:fd:
         99:38:12:82:01:d5:6c:32:58:18:58:78:e6:97:96:72:2d:b8:
         7e:64:1a:94:10:4b:0e:20:1b:4c:c6:cf:60:20:98:ec:29:0e:
         72:54:f6:b6:2e:ef:09:20:c2:55:b3:11:66:93:2b:4d:8e:83:
         88:31:20:f9:0c:b8:45:6d:17:a7:4d:34:54:15:11:90:6f:04:
         c4:90:ec:7e:16:6b:73:5f:d3:24:42:ed:58:2f:99:d3:88:93:
         dd:5a:22:f1:50:48:ad:e8:60:22:ad:43:b1:98:99:8b:b5:70:
         4d:52:5a:ed:e1:eb:91:fb:32:24:28:b9:b1:9b:0f:11:dc:ab:
         2a:4d:c9:59:b2:be:cf:84:da:b0:34:e9:63:4c:7b:ea:b2:18:
         3d:a4:ff:83:44:fb:04:24:27:c7:ee:e3:35:96:2b:26:91:e5:
         fc:dc:d1:59:18:02:70:a2:60:33:72:ea:8d:b7:19:06:23:d3:
         1c:56:91:f8:67:43:2b:c4:77:6d:ec:85:bd:52:43:73:c0:c2:
         8f:9a:b9:fb:a1:1c:0b:17:d1:9a:48:00:ff:ea:9c:2e:a5:29:
         42:2e:36:08:33:27:1e:f4:35:74:14:4c:fd:64:41:34:e0:38:
         57:45:e6:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXVPgMhUyP5UNVi/fFFvtJZX+iMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNEQjAzRkI1MDFGNTlCODI0OURDMzc2QUI5MUZEMUQ5
NkQxNDM1RTAeFw0yNTA0MTYxODMzMzhaFw0yNjA0MTUxODM4MzhaMDMxMTAvBgNV
BAMTKDVGRUNFQkQ2RDQxMzk5NDVBMjE4MTY3RjBBMkJFREQzMEJEMDgwRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0TKCt3VLO6EeZ5bGQ/ESM098a
Ahv0NOpxPnTt1XTXSTjQVI/v0a4RvP+BxYxahpfXFhvnPt763WoA3nq6bMiA68xC
7V31M+Ae6AsBtS4IwB+HBnZOSMDtBI58QGJCcK8/0/+NGF3wpM74WIFRJ0YpEAdG
pEcrsCZ5MMJYa1pqaIuadTEVwnm1wn7xgoTgOw04V51pn6GSuUCkercubNpdOdvG
pQ8cwDAz7gWc4Naar853pXp3YzlMzP9wWx56GliHQ545WLqLiRwNz8G0nHZ3Y/9l
0RAKs296pCc3mcDsLExPU01jUKGqlTYGXzEhhS40o5WvKzp30ET5WbTEt4MjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX+zr1tQTmUWiGBZ/Civt0wvQgOcwHwYDVR0j
BBgwFoAUo9sD+1AfWbgkncN2q5H9HZbRQ14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC9BM0RCMDNGQjUwMUY1OUI4MjQ5REMzNzZBQjkxRkQxRDk2RDE0MzVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzREIwM0ZCNTAxRjU5Qjgy
NDlEQzM3NkFCOTFGRDFEOTZEMTQzNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRWHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAv
MzEzMzMxMmUzMTMwMzAyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2RLMA0GCSqGSIb3DQEBCwUAA4IBAQCVDS68aQyP
5n3Dv8PhrK+DyP2ZOBKCAdVsMlgYWHjml5ZyLbh+ZBqUEEsOIBtMxs9gIJjsKQ5y
VPa2Lu8JIMJVsxFmkytNjoOIMSD5DLhFbRenTTRUFRGQbwTEkOx+FmtzX9MkQu1Y
L5nTiJPdWiLxUEit6GAirUOxmJmLtXBNUlrt4euR+zIkKLmxmw8R3KsqTclZsr7P
hNqwNOljTHvqshg9pP+DRPsEJCfH7uM1lismkeX83NFZGAJwomAzcuqNtxkGI9Mc
VpH4Z0MrxHdt7IW9UkNzwMKPmrn7oRwLF9GaSAD/6pwupSlCLjYIMyce9DV0FEz9
ZEE04DhXReYR
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:30 2025 by rpki-client on console.sobornost.net