Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
File:                     3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier:          OIMLLCMI0kOPa8LVkaDfTsqBWqZL49nu9lzfakP7kSE=
Subject key identifier:   E8:FB:63:D2:5D:44:B2:75:30:09:00:10:D3:5C:8D:69:FC:7A:85:77
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       36CC84F35099B4916342B026BA11FE6E9F32B405
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:45 +0000
ROA not before:           Mon 07 Jul 2025 15:14:45 +0000
ROA not after:            Mon 06 Jul 2026 15:19:45 +0000
asID:                     264425
IP address blocks:        131.221.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cc:84:f3:50:99:b4:91:63:42:b0:26:ba:11:fe:6e:9f:32:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:45 2025 GMT
            Not After : Jul  6 15:19:45 2026 GMT
        Subject: CN=E8FB63D25D44B27530090010D35C8D69FC7A8577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:5b:73:97:85:6c:06:f6:c6:ba:f7:70:8f:
                    8c:73:39:c0:70:4e:4d:df:ef:ea:db:17:cb:ed:de:
                    d9:a2:6e:cf:4c:4e:10:45:80:0c:62:00:43:a9:85:
                    1b:8c:8b:dd:2d:1f:bb:d9:5a:63:9f:8f:a6:a1:22:
                    43:6f:56:06:de:85:eb:c1:d0:76:6f:96:03:8e:75:
                    8d:cd:8e:5a:b6:d9:57:2b:36:6c:56:8d:4e:79:f7:
                    f4:30:d6:46:25:ea:cf:cb:8e:28:e6:89:ef:01:fa:
                    10:6a:c0:d2:aa:d0:53:6b:be:4f:00:26:d1:f9:58:
                    37:d8:9e:55:2e:97:6e:79:dc:15:5f:01:93:29:af:
                    e9:5f:9c:b7:32:30:38:6d:a9:12:db:68:0e:fd:10:
                    40:6d:da:5b:7e:e0:ae:f0:63:a7:30:23:7d:93:fe:
                    66:a9:b3:71:41:70:cf:2f:f7:a1:2f:60:1b:6b:73:
                    97:f9:fb:d5:56:51:38:73:2e:f3:f0:dd:2d:4e:e0:
                    25:ce:3d:24:0d:fe:14:98:3a:98:22:4b:2e:44:63:
                    7a:5b:73:0f:4f:8c:4c:fd:da:c7:1b:69:20:ec:07:
                    bc:8e:db:d8:dd:57:fc:97:31:02:5b:0e:39:af:19:
                    72:f8:ac:45:66:bd:4b:98:cf:7d:7f:c5:00:9d:e4:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FB:63:D2:5D:44:B2:75:30:09:00:10:D3:5C:8D:69:FC:7A:85:77
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:88:0f:f4:10:ea:4c:7e:59:a7:f7:d4:94:ee:f6:10:1a:72:
         b4:67:43:8e:42:f7:97:15:4d:56:e1:be:7f:12:95:b9:35:ff:
         0d:55:ea:62:cd:23:96:5c:9d:04:f0:ca:cf:ac:07:8d:e5:13:
         b0:9c:0b:c7:f1:e5:48:2b:14:e4:47:2e:4c:07:2a:4a:79:ac:
         bf:50:0d:c2:40:7c:ce:19:91:53:0c:e0:1b:5f:88:ec:2a:08:
         0c:bd:a4:8c:02:65:09:6d:77:c4:9a:c0:ba:d6:f8:97:17:ac:
         e3:30:25:f4:f3:84:2b:02:12:1d:cf:22:91:35:e0:b0:d9:90:
         4a:f0:76:ef:14:3a:c5:7c:13:50:ee:2e:4c:52:18:f4:fe:54:
         10:23:0a:9c:fb:30:fc:a2:3b:41:72:c8:1e:ae:fd:22:5e:93:
         3f:a1:91:0c:87:1c:f1:84:69:d1:83:2a:4a:22:c1:b9:d2:a9:
         b2:fa:d6:10:3b:80:55:ea:5a:ee:7f:aa:4f:73:f4:2b:18:46:
         10:4d:6c:3f:20:93:aa:47:b0:5b:df:7e:f7:94:41:01:fd:82:
         21:db:9b:7e:b2:7e:1c:7a:1f:d7:07:97:b7:30:7b:e7:de:14:
         bc:81:7b:e6:ad:62:50:fa:f5:a8:c4:b3:75:62:ca:49:0e:06:
         79:66:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:07 2025 by rpki-client