Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e203631353837.roa
File:                     3133312e3139362e31382e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          dODcAhadulEjOk1HzdcHughH5QHl7Sf5vA1r6yvb5E4=
Subject key identifier:   FA:A0:5F:52:FA:92:20:90:60:19:A9:6E:09:63:B3:7C:6A:0D:89:5F
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       1B0FC9E0E7850F5A3698AAEBBF5B4E97FB6D6C75
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e203631353837.roa
Signing time:             Mon 28 Jul 2025 13:05:45 +0000
ROA not before:           Mon 28 Jul 2025 13:00:45 +0000
ROA not after:            Mon 27 Jul 2026 13:05:45 +0000
asID:                     61587
IP address blocks:        131.196.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 00:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0f:c9:e0:e7:85:0f:5a:36:98:aa:eb:bf:5b:4e:97:fb:6d:6c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 28 13:00:45 2025 GMT
            Not After : Jul 27 13:05:45 2026 GMT
        Subject: CN=FAA05F52FA9220906019A96E0963B37C6A0D895F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:0d:70:d9:29:a9:02:14:11:03:67:93:6b:
                    cd:56:86:dc:98:20:58:9e:2a:c2:92:47:02:e5:a2:
                    eb:ca:1d:39:59:4c:a7:39:1e:b9:0d:4d:46:16:29:
                    17:46:11:87:78:ac:36:9c:ee:85:c8:fa:6e:e5:f8:
                    eb:b5:a7:73:33:14:0c:10:a4:82:c6:f8:54:aa:dc:
                    f7:44:5a:58:c8:75:96:4c:9c:60:8f:50:9e:eb:c4:
                    da:4b:76:ee:ab:f8:f0:f6:a5:0e:69:49:40:8c:a2:
                    27:33:ce:f6:bd:de:d8:19:cb:91:7c:5b:8e:05:fe:
                    42:03:b0:df:1d:3e:8b:98:22:e4:bf:e7:c1:0c:9b:
                    79:f8:35:d7:7f:a3:0c:c8:55:01:c0:c7:61:39:8b:
                    be:d5:64:49:48:0b:0e:6f:37:b6:33:2f:e1:70:03:
                    1e:60:eb:1b:c0:57:65:30:e4:ec:47:22:d2:d9:01:
                    89:56:18:13:82:4e:90:2e:76:f7:c4:c7:d8:9c:45:
                    82:e7:b4:00:74:71:f9:bc:4e:3e:1c:05:18:95:82:
                    0f:a3:7a:db:f2:2b:7a:4d:14:65:5f:52:7d:34:aa:
                    45:28:1d:8f:5c:0b:60:b5:2a:fd:4c:2f:6b:8c:a2:
                    10:32:fb:cc:02:ad:33:4e:f5:38:a5:f5:76:1e:3c:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:5F:52:FA:92:20:90:60:19:A9:6E:09:63:B3:7C:6A:0D:89:5F
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:d5:96:07:85:7f:b5:9c:f8:37:70:9c:e8:92:81:1f:0b:
         1c:69:61:b9:ca:e2:28:6b:8a:2f:2c:32:cb:fc:ff:73:d6:e3:
         7e:fb:96:a4:ce:19:c7:35:97:96:7a:fd:43:06:21:f0:43:2b:
         d9:28:07:65:a2:3b:08:e8:cb:b5:87:e3:d7:4b:c7:a4:8a:38:
         46:e3:94:17:36:2f:58:08:ac:bf:01:30:e6:be:c6:c0:77:f6:
         42:e2:24:3f:fd:52:fd:6d:4d:22:0f:f7:14:1c:b2:a3:99:5d:
         9c:75:71:3c:1c:95:39:87:6f:72:7a:05:e6:ed:c3:94:b4:88:
         d1:9a:84:09:0f:de:ce:67:95:98:d0:c4:24:aa:fb:f3:75:b5:
         73:9c:bc:8f:0c:2c:bb:f8:cf:d5:d8:46:ae:e3:61:aa:0c:8d:
         ff:7e:f5:82:53:22:cd:71:4b:8f:05:c5:57:5b:e3:81:16:e4:
         00:9e:9d:3f:d6:e3:9b:78:f0:65:87:39:a1:1c:01:41:c9:89:
         4b:01:dc:d7:00:0f:bf:be:bf:83:8e:f9:70:26:e7:31:bd:d4:
         a3:c9:e9:cc:d8:ea:ca:25:a0:ef:21:0a:9e:3e:94:2a:8e:d0:
         c9:77:bf:7b:4d:4a:40:6e:67:07:6e:93:20:bc:0b:1c:df:de:
         81:6b:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:20 2025 by rpki-client