Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32342d3234203d3e203631353837.roa
File:                     3133312e3139362e31362e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          ALrv+0tawR0YPjPXQ/WErOZ+Xqh/qHkkd9PKHLIJtNw=
Subject key identifier:   3B:23:DB:54:F2:F8:8E:05:9B:5D:CB:AB:71:B6:A7:BC:F3:79:8E:62
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       4B36B212B666A2894589DC7AF36DEF3C0692704A
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32342d3234203d3e203631353837.roa
Signing time:             Mon 28 Jul 2025 13:05:28 +0000
ROA not before:           Mon 28 Jul 2025 13:00:28 +0000
ROA not after:            Mon 27 Jul 2026 13:05:28 +0000
asID:                     61587
IP address blocks:        131.196.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 00:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:36:b2:12:b6:66:a2:89:45:89:dc:7a:f3:6d:ef:3c:06:92:70:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 28 13:00:28 2025 GMT
            Not After : Jul 27 13:05:28 2026 GMT
        Subject: CN=3B23DB54F2F88E059B5DCBAB71B6A7BCF3798E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:54:ba:2d:a8:77:02:8e:c6:fb:6d:c0:3a:
                    21:d2:f2:e7:d9:8a:9f:76:80:40:32:40:4b:62:49:
                    89:24:6f:1f:65:ff:9c:0e:6f:05:49:f2:63:c6:08:
                    da:4c:5c:c5:38:30:2a:3d:02:0b:95:b2:1d:c5:0f:
                    7f:e9:1e:db:90:8d:4b:33:c4:3b:0c:24:9c:3b:09:
                    1a:a3:bd:a2:fe:7a:67:32:41:49:10:db:36:4e:a1:
                    08:f3:55:26:5c:e6:ba:5f:f2:05:c5:f8:f2:1d:fa:
                    4f:a6:45:aa:49:80:6f:3f:84:e5:5a:64:f3:67:b5:
                    f6:a1:78:07:a0:a4:bf:88:fa:7f:fb:5d:04:e0:f4:
                    b7:08:db:08:4b:6b:55:4c:07:de:60:48:98:fb:ba:
                    df:c7:a5:e3:ec:94:75:93:a9:4c:c4:2a:71:ec:55:
                    b9:ec:fc:23:87:9b:20:80:45:17:80:82:2d:8d:8b:
                    01:96:1c:d0:23:d4:ce:b5:e7:50:2e:d8:fa:32:c2:
                    7a:26:4d:6c:99:3d:d1:fd:68:6a:52:d2:d2:7a:0f:
                    1d:d6:f4:1c:d8:2f:4c:6b:58:56:44:a0:ec:d5:31:
                    c4:2f:a1:55:16:1e:33:b9:0a:ee:99:67:b5:30:31:
                    7a:41:d6:b3:a4:b3:c4:a5:ff:8a:5a:84:93:77:27:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:23:DB:54:F2:F8:8E:05:9B:5D:CB:AB:71:B6:A7:BC:F3:79:8E:62
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:d5:d9:1c:91:40:fd:44:6d:58:db:b5:5d:14:fc:7f:7a:
         0c:45:7d:83:87:7d:64:71:47:14:4a:5f:e9:b6:1f:4a:86:30:
         f7:eb:da:18:e9:dd:67:26:61:50:b2:d5:8e:68:13:42:87:b6:
         78:15:e0:d0:bc:1d:1b:59:32:62:bc:14:da:0a:c3:b1:21:4d:
         2f:e8:d7:b5:f1:2f:4f:80:17:8c:5e:40:e0:12:ab:bd:56:e4:
         6b:68:1e:8f:6f:11:63:23:a9:4e:f9:63:c7:d7:63:f6:58:e5:
         92:39:d9:97:bd:af:61:a7:d9:c1:64:37:ee:df:22:96:3f:59:
         ee:e5:3a:04:37:fc:35:86:14:0e:75:9b:60:c0:07:d3:d9:0b:
         3e:c6:23:ab:9d:0f:eb:92:80:d2:33:86:f4:a7:f6:c3:9c:2b:
         b4:a6:8f:a1:5b:aa:20:4b:7e:fe:15:d4:8e:19:27:d7:db:ce:
         be:6a:4c:3d:09:13:3d:9a:85:94:61:12:cc:0d:b9:f9:d1:e2:
         51:bb:e7:5d:8f:31:3b:1c:c7:49:c1:a0:b9:a9:f3:d4:9a:0e:
         2a:dc:a1:58:5f:82:f8:ac:01:c9:bb:c9:39:f3:5b:24:03:6f:
         fe:17:61:93:88:a3:5a:87:5a:fb:b5:37:3d:70:46:9e:3c:b0:
         2c:15:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:21 2025 by rpki-client