Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32322d3232203d3e203631353837.roa
File:                     3133312e3139362e31362e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          +16tEJ6D78TOPkWwHsqWePW0K8pThzfAW7fhTckPO50=
Subject key identifier:   3A:79:9E:2F:19:85:05:18:A3:51:83:63:E1:3D:36:40:B5:D4:F5:DA
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       53A28E89C0651B3B09C3888A88CE2DDA8C762494
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32322d3232203d3e203631353837.roa
Signing time:             Mon 28 Jul 2025 13:05:16 +0000
ROA not before:           Mon 28 Jul 2025 13:00:16 +0000
ROA not after:            Mon 27 Jul 2026 13:05:16 +0000
asID:                     61587
IP address blocks:        131.196.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 00:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:8e:89:c0:65:1b:3b:09:c3:88:8a:88:ce:2d:da:8c:76:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 28 13:00:16 2025 GMT
            Not After : Jul 27 13:05:16 2026 GMT
        Subject: CN=3A799E2F19850518A3518363E13D3640B5D4F5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:d6:7d:fd:39:41:ef:cb:f0:2d:8d:10:14:
                    10:5f:8f:2e:b3:df:dc:be:86:c1:8b:ae:e7:ad:e7:
                    62:82:71:33:11:cf:0e:d2:c8:d0:8f:41:05:96:10:
                    3c:be:b3:54:ab:3c:83:8c:bc:bd:49:34:bb:c2:79:
                    2b:e8:2d:a5:ef:64:97:a6:81:c1:f3:1e:9e:d4:72:
                    47:1b:66:2f:9e:d7:59:14:ea:23:25:7a:5f:8f:fe:
                    fb:98:d8:52:74:bf:13:ee:63:18:66:6a:92:6a:85:
                    80:88:62:ee:df:80:e5:50:0f:d9:de:11:0a:a4:38:
                    7c:49:de:5a:2e:12:f9:6a:e8:31:93:4a:c4:f9:ef:
                    7e:e3:d0:8c:d3:c6:6c:8d:f5:2d:88:5d:03:b1:73:
                    6b:ea:5d:05:d6:43:2b:eb:3f:4c:81:b1:70:8e:4a:
                    b2:91:eb:28:39:fb:eb:b8:f7:72:0f:d0:26:12:08:
                    d6:48:b8:94:99:42:81:7b:46:1d:d7:1b:c7:27:a4:
                    4d:c6:8d:e5:49:8d:ce:b3:ad:49:0f:0a:e7:96:81:
                    87:78:01:8c:44:6a:2c:cb:e8:fd:71:53:f2:1f:be:
                    76:73:65:d7:12:e8:74:14:e7:02:f9:05:e9:fb:55:
                    2b:3e:0e:f9:90:e7:9b:3c:ae:b2:bf:5a:38:76:e6:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:9E:2F:19:85:05:18:A3:51:83:63:E1:3D:36:40:B5:D4:F5:DA
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:10:5c:43:54:e0:74:74:cb:00:96:c3:ef:e8:75:f8:d0:cb:
         10:44:2a:65:68:4f:b4:53:fb:86:8c:00:4e:6e:56:d9:6a:25:
         18:74:4f:1a:a3:65:56:24:22:28:c6:78:db:05:e0:d2:3b:0d:
         8b:db:83:7a:2e:87:21:57:30:e2:f4:41:e8:35:ab:76:01:74:
         f2:4a:6a:42:49:7d:63:f7:24:8e:ce:04:1f:7c:50:89:e3:a6:
         64:82:a8:6f:9f:21:35:c1:20:be:0d:aa:28:55:e6:64:00:4f:
         f4:06:18:5c:45:59:c5:44:4f:3e:c2:f6:c0:1e:bb:4e:68:1a:
         46:af:b8:e2:6a:70:0f:df:60:ed:44:b1:cd:2d:6e:36:ef:79:
         cd:18:17:09:7e:e5:2f:4b:34:da:4f:3a:01:eb:a2:80:17:96:
         49:63:bf:62:e1:04:71:af:f1:6d:01:e2:43:68:01:35:a1:ae:
         5a:a0:29:a3:ed:4c:b0:9a:7d:51:e8:00:74:68:23:af:b5:11:
         cc:0b:6e:1f:79:2e:a8:e8:7a:6e:60:02:e3:6a:f1:b5:53:bc:
         63:4c:91:73:90:77:7b:ae:d8:9f:ba:3b:4f:70:86:59:ba:87:
         c6:ff:cd:39:08:35:ca:bb:5f:9f:b5:3a:22:23:ee:48:21:f5:
         c0:0e:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:48 2025 by rpki-client