Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
File:                     3133312e37322e38302e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          4RfePzQntvBjVhELVuuojFUZkkLVNchTlylLiK2Unso=
Subject key identifier:   62:05:64:8A:48:68:E9:93:AD:E6:D6:7C:D6:05:46:68:CD:5F:1D:E8
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       678EE3A3845167D83052F05668CFD018B09AF941
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 19:20:04 +0000
ROA not before:           Tue 08 Apr 2025 19:15:04 +0000
ROA not after:            Tue 07 Apr 2026 19:20:04 +0000
asID:                     28584
IP address blocks:        131.72.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:e3:a3:84:51:67:d8:30:52:f0:56:68:cf:d0:18:b0:9a:f9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:15:04 2025 GMT
            Not After : Apr  7 19:20:04 2026 GMT
        Subject: CN=6205648A4868E993ADE6D67CD6054668CD5F1DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:fc:5d:71:13:68:9a:70:98:0a:6e:71:25:
                    fc:bd:be:ab:bf:ac:ff:44:35:f8:39:09:42:d4:2a:
                    7a:f1:27:e2:e9:12:c9:e9:69:08:d6:61:e3:3f:35:
                    fb:b3:be:f1:56:bb:18:c3:41:13:36:cc:34:2c:c7:
                    58:45:18:21:3b:89:ba:88:ea:f4:83:01:08:37:48:
                    15:38:95:57:09:3d:af:04:94:ca:07:ba:86:c9:06:
                    7b:0b:01:38:cd:c1:b7:d7:b4:57:03:cd:39:56:08:
                    3c:7d:aa:05:3a:bd:26:93:a6:32:c6:7d:aa:03:09:
                    95:b6:5c:a5:db:8a:92:79:68:0a:db:17:e6:61:70:
                    34:2f:35:80:ab:68:1c:eb:1d:b2:89:8b:30:77:ce:
                    d8:db:e0:f5:7c:c6:ca:2f:9c:11:df:96:7f:d2:0c:
                    7c:a9:be:4d:9b:cd:53:ac:9e:9b:20:f1:d7:ed:8b:
                    c4:a4:ea:6f:24:3d:33:de:4b:b7:e6:53:cc:e3:02:
                    ed:48:5c:a8:f3:dc:67:48:f6:5c:55:18:f4:c9:5e:
                    bd:8a:4f:51:95:31:32:e1:02:bb:96:2e:ac:5b:cd:
                    46:25:04:23:68:48:02:80:c7:c3:ae:53:9f:19:bb:
                    31:94:5f:8f:12:28:fd:6c:8a:be:a1:7c:21:7d:bd:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:64:8A:48:68:E9:93:AD:E6:D6:7C:D6:05:46:68:CD:5F:1D:E8
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:28:d4:50:0a:79:cb:d8:eb:be:f0:42:65:05:47:fe:1a:
         91:e7:1f:9d:a6:b7:e9:75:a3:df:20:81:d2:3f:de:02:d9:2f:
         5c:23:96:b4:3d:9e:58:81:6e:3e:d1:0d:a2:ad:69:69:6b:03:
         67:0d:3e:77:cb:9a:c4:ef:92:b7:1e:d1:8d:59:8f:33:49:59:
         f8:7f:41:fa:9d:2b:7a:06:a9:eb:eb:dd:3f:b7:c7:ec:58:c2:
         d1:54:24:30:10:07:e6:51:c3:84:1b:b3:b4:79:cc:5f:a6:75:
         99:64:60:bd:0f:98:6d:c3:33:f7:38:dc:92:83:32:e5:e9:20:
         21:35:c8:47:02:9a:62:e9:35:a0:35:04:4a:c4:98:d6:5b:dd:
         8a:72:98:c7:86:fd:c6:3a:07:ed:a2:d0:de:cd:a9:cc:8b:10:
         cc:32:7c:0b:2e:17:5f:54:54:70:6b:0a:97:33:c3:3e:40:b5:
         24:c6:80:38:e5:d7:3c:b6:5c:1e:ca:72:92:c4:0c:a1:f4:e4:
         c7:95:d0:17:45:dc:28:68:05:0b:b8:66:52:9c:0c:de:ac:2c:
         a8:a9:56:95:19:4d:31:d7:f1:65:77:e0:4b:eb:f1:2d:67:49:
         59:7a:01:a4:70:75:ef:c2:d2:1d:9a:3d:ea:34:51:77:6a:2b:
         c1:64:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:34:23 2025 by rpki-client