Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32342d3332203d3e203631363638.roa
File:                     3133312e3130302e3234382e302f32342d3332203d3e203631363638.roa (raw, json)
Hash identifier:          0SvU3Yz+rAkF/y8217nMICtoRYO2qBiIOpxpDVNaQUo=
Subject key identifier:   F8:31:27:4A:A8:66:96:CA:B7:66:8B:89:7D:A7:7D:F8:F5:2E:90:92
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       12EA0B7D5BB20983CCEEE89936135D5A7C8BF411
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32342d3332203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:04:13 +0000
ROA not before:           Wed 30 Apr 2025 19:59:13 +0000
ROA not after:            Wed 29 Apr 2026 20:04:13 +0000
asID:                     61668
IP address blocks:        131.100.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ea:0b:7d:5b:b2:09:83:cc:ee:e8:99:36:13:5d:5a:7c:8b:f4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 19:59:13 2025 GMT
            Not After : Apr 29 20:04:13 2026 GMT
        Subject: CN=F831274AA86696CAB7668B897DA77DF8F52E9092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:a7:63:28:63:d4:73:70:39:e0:94:db:d5:
                    fb:65:1d:e9:19:54:94:5b:04:2a:b6:2e:c6:aa:73:
                    31:58:bb:fe:0e:f3:58:a0:a4:94:83:63:dc:7c:c5:
                    a4:b0:7b:8e:ca:7c:d7:e6:9e:d5:14:1f:f3:d4:81:
                    21:21:d4:44:0a:a1:fa:49:be:24:e9:d0:05:6b:57:
                    38:37:d7:b2:49:63:b7:15:a9:b3:c4:10:02:e6:96:
                    5d:a1:ff:73:a2:2b:2a:9a:2c:6d:6f:32:14:80:cd:
                    c8:24:0c:11:07:6e:6a:4f:25:99:24:3d:66:49:33:
                    86:d7:7e:d7:29:56:fa:37:1a:d6:af:ba:b6:92:63:
                    29:72:35:d8:60:f0:f1:37:1e:00:94:a6:3d:95:c0:
                    9f:da:56:61:ba:1d:a6:15:69:91:3f:6c:1b:e1:5e:
                    1a:4e:08:60:5a:40:61:95:6e:05:e5:f3:2b:8a:4a:
                    bf:7d:b5:3f:cf:d0:8b:5d:38:5a:98:5b:83:68:73:
                    d5:cd:9f:40:ad:50:8d:1c:73:6c:bc:c8:d2:3d:08:
                    d2:e1:af:8f:df:6a:93:5d:8b:7b:30:9e:72:dc:5d:
                    b9:76:79:5d:17:3d:da:03:fa:d6:3a:7d:38:bf:8d:
                    06:f1:9a:11:23:01:bd:ee:ff:6f:49:aa:3f:64:3d:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:27:4A:A8:66:96:CA:B7:66:8B:89:7D:A7:7D:F8:F5:2E:90:92
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32342d3332203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:70:87:92:70:f1:74:cf:dd:cf:9d:02:b0:4e:e7:b6:15:3e:
         70:17:60:10:c0:97:5a:e1:e8:55:29:04:57:5c:83:26:bd:3c:
         60:ea:17:d7:02:85:54:67:91:dd:0e:2a:92:36:8b:5e:46:f0:
         8e:82:70:bf:d7:b3:d6:b6:37:ee:f4:5b:97:b4:98:4e:e7:fe:
         17:40:14:9c:71:29:4e:07:4c:56:a1:7d:66:2c:b0:07:6f:11:
         00:43:e3:a0:0c:6d:d8:64:a8:62:4f:1c:21:a5:54:56:dc:cf:
         6d:48:c0:5e:de:62:a5:de:72:ba:64:4c:4a:dc:3b:58:85:3a:
         1c:ef:3f:de:77:ed:88:e1:c3:f1:55:86:99:08:d4:17:fa:29:
         6b:6a:8d:18:55:cf:00:cc:1a:ba:cb:4f:05:3a:ce:ed:ae:91:
         f4:dc:d3:7d:33:f8:78:3a:16:a3:7c:93:4a:a4:4f:de:e3:08:
         47:23:d6:b4:aa:2a:6d:b4:ee:58:7b:40:90:2c:10:9e:99:cf:
         b6:f2:57:2d:95:92:64:2e:34:cc:66:3e:2a:cb:4a:c9:57:8f:
         6e:f4:4b:b8:3d:fc:44:cd:0c:67:cf:93:9b:d9:62:57:8c:81:
         67:04:17:c1:7b:bd:14:a2:b1:72:ba:4a:48:ab:d8:f4:b3:b8:
         80:df:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:46:45 2025 by rpki-client