Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa
File:                     3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=
Subject key identifier:   40:3C:82:0D:13:2C:A7:EE:5B:F3:1C:2E:16:3F:AF:FB:00:A3:B7:D1
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       06C0D8CC40330B158DD4DBF8F9CB1C443424D0B4
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 12 Jul 2025 23:16:42 +0000
ROA not before:           Sat 12 Jul 2025 23:11:42 +0000
ROA not after:            Sat 11 Jul 2026 23:16:42 +0000
asID:                     61678
IP address blocks:        131.108.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:d8:cc:40:33:0b:15:8d:d4:db:f8:f9:cb:1c:44:34:24:d0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jul 12 23:11:42 2025 GMT
            Not After : Jul 11 23:16:42 2026 GMT
        Subject: CN=403C820D132CA7EE5BF31C2E163FAFFB00A3B7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:f1:08:81:02:3b:e1:db:61:21:2a:ad:3f:
                    03:86:52:8e:c5:3e:31:44:0c:4e:55:0a:2d:7f:4b:
                    30:bc:72:33:76:0e:eb:34:a0:ff:b8:83:43:3c:c5:
                    b3:4f:66:02:72:45:29:0b:e6:9c:6b:a5:1c:23:23:
                    57:e2:e4:ba:70:2c:92:5a:81:56:16:b8:fc:14:09:
                    8b:c6:85:15:6e:fe:7e:4a:d5:3a:cd:b3:b7:e2:e4:
                    0f:33:1b:3d:50:b1:9b:4a:63:d3:8a:a0:f1:3e:2f:
                    c7:91:17:93:a5:11:3d:c6:c2:a2:7d:9f:1d:1f:91:
                    aa:f8:e8:b1:ac:08:cf:98:02:b1:89:73:77:1c:02:
                    94:12:21:9d:92:89:22:05:cd:b7:8a:71:aa:9f:25:
                    08:7a:a0:d4:39:8f:48:03:a9:22:38:05:06:75:e9:
                    d7:a0:e1:e0:b0:aa:b9:b4:e7:25:0e:68:84:b0:3f:
                    c2:19:30:62:b4:5b:40:e6:71:a8:b7:ae:ee:06:39:
                    81:b9:ed:9d:b4:58:b3:52:b5:43:e0:08:80:88:1c:
                    4f:f3:9c:86:bc:59:ee:b2:41:1b:93:04:6c:41:63:
                    b9:2d:58:c8:db:50:c9:9b:01:1e:44:69:a7:78:6e:
                    f3:9f:c9:c5:af:0d:e8:97:b1:8b:d4:bb:c4:39:ca:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:82:0D:13:2C:A7:EE:5B:F3:1C:2E:16:3F:AF:FB:00:A3:B7:D1
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:d7:e7:25:30:89:a0:43:e1:ff:0c:5b:9e:b0:0d:1e:d6:
         e9:0c:fe:21:2d:9a:28:a8:b5:73:bf:12:9a:12:ef:b8:fb:d5:
         22:09:55:ba:bd:44:55:83:41:10:38:3b:84:1f:35:bd:dc:40:
         ff:f0:2d:a1:80:93:30:16:6e:5b:18:e1:d8:73:00:fd:24:94:
         a5:cf:9a:40:7f:22:33:07:f3:e4:3c:61:57:29:dd:77:bf:da:
         dd:43:86:2e:38:e3:b7:ae:ba:98:c2:e6:67:96:fb:21:ba:3e:
         72:16:ec:2b:f1:fb:ca:c0:3e:81:bd:da:4a:8f:44:43:27:b5:
         30:d9:84:9b:2c:37:5a:d9:e7:ed:a5:1a:5e:a4:12:6e:99:48:
         2e:ed:1f:51:85:1e:7c:ae:56:5e:65:43:ef:c7:db:7f:6c:e9:
         e5:4d:b4:d4:a7:7a:67:17:51:9d:4d:a6:0f:9a:10:07:62:aa:
         a5:9e:7c:a0:ac:a5:7e:3f:36:e9:1b:eb:f2:7e:c7:ed:b9:03:
         79:77:b3:f9:97:bb:0b:57:cb:ed:bc:0a:48:85:73:d7:40:29:
         c3:51:84:fa:d6:42:00:93:9e:6e:21:20:cd:82:88:3e:29:64:
         74:de:54:4b:2e:8a:8f:cd:b7:78:1b:be:e5:1c:1e:dd:a6:97:
         d0:12:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:45:17 2025 by rpki-client