Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32342d3234203d3e20323635393930.roa
File:                     3133312e3139362e3230302e302f32342d3234203d3e20323635393930.roa (raw, json)
Hash identifier:          zO8Rswuv4tKAF3ipQnqqHoprKXLjIbM1uXpyB4qH9cY=
Subject key identifier:   CB:D9:D2:4A:03:9C:A5:CD:D6:84:98:F9:A0:AB:A6:7F:D5:A8:7F:F1
Certificate issuer:       /CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
Certificate serial:       3B948C1E85DA139229784B80F47ED12034D73BD7
Authority key identifier: B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32342d3234203d3e20323635393930.roa
Signing time:             Tue 10 Jun 2025 19:52:03 +0000
ROA not before:           Tue 10 Jun 2025 19:47:03 +0000
ROA not after:            Tue 09 Jun 2026 19:52:03 +0000
asID:                     265990
IP address blocks:        131.196.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl
                          rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 00:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:8c:1e:85:da:13:92:29:78:4b:80:f4:7e:d1:20:34:d7:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
        Validity
            Not Before: Jun 10 19:47:03 2025 GMT
            Not After : Jun  9 19:52:03 2026 GMT
        Subject: CN=CBD9D24A039CA5CDD68498F9A0ABA67FD5A87FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:4a:93:1e:0a:1c:33:3c:ca:bf:42:7a:8c:
                    38:1e:ad:ef:f1:73:06:ef:65:6a:55:25:70:24:2a:
                    46:9f:83:31:0e:62:9f:cc:f4:91:15:3f:fa:7b:2f:
                    71:8c:f4:ab:93:10:b7:52:07:b4:b3:27:b7:68:02:
                    88:3d:58:5a:1c:6e:63:ba:ad:b5:8f:3e:88:53:17:
                    59:93:e3:07:2c:94:18:16:ea:44:27:23:d9:e3:76:
                    3d:a8:1d:9f:f6:66:bd:39:18:f5:a0:10:48:29:42:
                    ab:bf:17:b3:43:ac:47:34:95:79:6f:a4:5d:98:b0:
                    35:7d:db:05:27:36:dc:39:60:ae:14:95:08:3a:3d:
                    c8:de:77:b1:05:7a:bd:96:5c:5d:b5:6f:05:b0:99:
                    f9:a2:bb:5e:fc:60:3d:09:90:47:99:c7:fa:eb:ca:
                    83:69:63:4e:ad:f2:c4:21:a7:27:9c:37:46:0a:02:
                    dc:25:9d:fa:8e:33:71:f5:47:4f:c9:46:44:99:7a:
                    ef:09:70:f9:19:11:b5:06:12:d9:c7:bc:fd:4f:4c:
                    df:53:ff:65:32:3a:d4:d1:46:c8:f9:53:47:d0:fc:
                    41:cf:2b:e7:24:45:f3:1a:ee:65:a6:27:24:65:7c:
                    54:3c:55:96:7b:d2:4e:96:65:05:2c:d0:22:a0:d9:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:D2:4A:03:9C:A5:CD:D6:84:98:F9:A0:AB:A6:7F:D5:A8:7F:F1
            X509v3 Authority Key Identifier:
                keyid:B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32342d3234203d3e20323635393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:05:c5:6f:42:4a:14:9c:d6:73:5a:bf:d1:99:3b:92:32:1e:
         19:32:65:a0:63:48:20:59:d8:83:65:19:dd:c8:ee:5d:2c:d8:
         d7:e9:4e:e4:36:9e:07:21:b9:d4:97:05:24:28:70:de:fe:61:
         5b:75:cd:b3:a9:4f:66:99:4b:b4:86:83:75:97:4d:74:28:64:
         c9:c4:e1:0e:2d:63:19:4b:ef:84:c5:74:5a:9d:e4:69:82:14:
         4a:38:29:e8:2c:67:78:ab:3f:12:b9:f5:c1:2b:b6:fe:b2:1d:
         ce:02:dd:bf:ba:02:a1:c9:f1:82:ae:6c:ee:5f:b7:f4:7e:90:
         bd:5b:f7:94:ff:b2:4d:77:2a:79:48:dd:ef:44:19:2e:ff:70:
         07:42:ff:b1:cf:5d:99:de:df:0d:87:04:0d:62:1b:98:a7:7f:
         85:13:07:28:8d:36:90:81:91:96:6c:b6:c4:a0:8c:41:39:78:
         cf:71:ce:bf:36:6f:a6:49:80:6e:45:4e:64:07:ba:14:0f:f2:
         f5:d9:a3:1c:b6:40:88:e3:5b:41:98:90:55:df:2d:8e:0a:ac:
         41:6a:aa:f1:b7:04:ba:3b:b4:ec:64:ce:33:45:58:ad:be:d4:
         7b:46:63:c3:ad:4e:d4:6f:d7:4e:26:2d:fd:ea:f2:8d:b6:48:
         f2:db:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:47:59 2025 by rpki-client