Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          shQ6RlrDMCg1UVNX6u7oPDAKUI9u30KMgOqCIQDlDQE=
Subject key identifier:   D6:55:ED:76:CF:F7:2E:14:90:F1:9C:E4:2A:56:A9:34:0D:2B:C5:AF
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       25E3C1E00642CBECC237507259FDC220B1E30B34
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:21 +0000
ROA not before:           Thu 06 Mar 2025 15:36:21 +0000
ROA not after:            Thu 05 Mar 2026 15:41:21 +0000
asID:                     262352
IP address blocks:        131.72.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e3:c1:e0:06:42:cb:ec:c2:37:50:72:59:fd:c2:20:b1:e3:0b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:21 2025 GMT
            Not After : Mar  5 15:41:21 2026 GMT
        Subject: CN=D655ED76CFF72E1490F19CE42A56A9340D2BC5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:18:86:3d:55:a0:07:66:7b:52:23:e5:c0:
                    ec:47:93:88:7d:ee:58:07:b1:3b:d4:d4:41:13:06:
                    29:aa:08:fb:1e:9e:26:b7:21:9f:2b:88:6d:be:e8:
                    1b:67:50:2f:b7:32:a4:a0:8c:97:9c:83:1b:aa:fc:
                    a4:db:6c:0a:38:a7:df:dc:04:9f:ab:88:c3:70:ae:
                    b7:7a:db:01:7d:a0:f4:98:a7:f0:60:5d:31:7d:00:
                    86:e9:cf:d8:e9:c5:18:48:8f:54:35:52:fc:d9:07:
                    2d:40:51:61:5e:f0:fe:b5:68:67:b4:61:31:1f:13:
                    67:5b:b0:49:28:6e:1a:0a:7c:35:3c:58:5e:6d:d1:
                    f3:dd:f4:2c:59:4e:1b:59:ae:5b:ea:17:5c:4a:4e:
                    c3:b8:14:20:4c:21:4d:f9:a2:82:3f:cc:18:73:0f:
                    03:eb:5c:54:83:59:5a:fe:64:fc:95:ef:a4:62:00:
                    2b:d2:24:70:f7:fc:30:4e:c6:b9:c3:14:0e:70:18:
                    1a:70:30:92:4e:1a:c7:2f:23:73:6c:ef:26:39:8d:
                    39:30:ec:3f:f1:ab:f2:3c:24:47:db:49:f5:26:dd:
                    ca:48:cd:9f:f1:6f:f0:97:1b:8b:b2:6a:50:e0:c1:
                    4c:5c:8c:4b:45:bd:b0:72:4c:80:74:38:4c:e7:76:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:55:ED:76:CF:F7:2E:14:90:F1:9C:E4:2A:56:A9:34:0D:2B:C5:AF
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:c8:28:95:80:75:c1:cf:87:da:ae:80:44:66:03:f5:a8:
         f8:ed:ad:7b:1d:67:f3:52:0b:fd:dc:1f:97:e1:d7:f8:a5:c1:
         71:41:8d:71:ee:f1:b2:14:bd:fd:19:8d:70:38:a0:6d:4c:9b:
         ee:00:d3:b8:02:3f:e6:bc:89:bf:4a:d4:dc:1d:6f:60:3c:7b:
         0f:e5:15:f4:84:65:27:38:94:87:e7:1a:a3:bf:a6:ff:fd:d0:
         df:67:9c:00:c6:2d:e7:e1:fd:bb:42:4b:b7:e6:a4:d6:eb:60:
         a9:d9:11:1d:bf:d2:28:9e:da:79:4a:29:5c:b5:c7:36:40:87:
         90:db:6d:5e:9a:f2:32:90:a1:bd:d0:d5:2a:a2:0f:0f:13:bd:
         54:77:1f:0f:1c:f3:cf:74:17:2c:c5:38:7a:79:ba:2b:ea:b5:
         ad:ba:ee:4d:40:ef:4a:54:34:01:10:9a:76:a9:eb:2c:26:39:
         a3:b0:e6:b3:22:cc:fb:f6:fb:ca:dc:a6:4b:75:64:ac:84:07:
         04:67:3f:e6:22:7c:38:ee:08:00:cc:68:b3:cd:be:b5:9b:0e:
         96:a2:5e:6d:88:05:3b:8d:3c:5f:60:4c:e6:32:c8:20:ce:79:
         42:87:6e:18:f9:83:ea:40:1e:5d:94:6b:ce:de:0e:ba:6c:64:
         12:33:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:23:01 2025 by rpki-client