Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa
File:                     3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa (raw, json)
Hash identifier:          Ji9jAy9TXinZ+CA8IJwCfrBN8hpU2KS6agAu3U2tZZw=
Subject key identifier:   16:D6:03:12:43:6F:89:E8:8A:12:E6:BE:45:5B:95:81:F2:53:82:7C
Certificate issuer:       /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
Certificate serial:       130223484CBE9DE59FE699B8F699D2BA05C2F078
Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa
Signing time:             Thu 06 Mar 2025 04:00:12 +0000
ROA not before:           Thu 06 Mar 2025 03:55:12 +0000
ROA not after:            Thu 05 Mar 2026 04:00:12 +0000
asID:                     264434
IP address blocks:        131.221.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl
                          rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:02:23:48:4c:be:9d:e5:9f:e6:99:b8:f6:99:d2:ba:05:c2:f0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Validity
            Not Before: Mar  6 03:55:12 2025 GMT
            Not After : Mar  5 04:00:12 2026 GMT
        Subject: CN=16D60312436F89E88A12E6BE455B9581F253827C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:e6:aa:5c:29:e0:37:ef:46:42:73:bb:e6:
                    c2:81:03:ee:72:6f:f1:73:9c:43:c0:d5:a9:4b:54:
                    36:b2:ac:0c:b9:93:5d:aa:5a:a5:f0:f0:b3:a5:99:
                    84:98:63:8b:20:5f:31:6f:24:08:96:ba:1f:c8:c2:
                    69:f7:ca:6b:3e:7e:96:b6:13:e9:0f:cc:b2:11:5d:
                    81:bc:74:85:dc:7b:f9:96:e0:e1:23:5f:e7:23:36:
                    75:5a:e1:77:d9:5d:95:52:fb:5d:94:0f:84:07:b3:
                    c4:6c:b5:16:2e:9d:55:d9:65:32:7b:07:8a:ff:5f:
                    84:9c:1f:05:86:8e:15:4f:0b:e5:b9:fc:b6:4a:fb:
                    6f:73:cf:4e:82:a8:c9:31:97:25:df:6e:03:80:67:
                    b6:ed:33:70:3c:a3:b7:0f:1b:2f:6b:75:bc:8c:f9:
                    69:4a:fb:cf:44:32:45:23:ba:eb:1c:48:58:42:59:
                    8b:d8:e6:7f:2a:41:a9:6a:e3:46:19:3c:4f:1f:cc:
                    ab:7d:2e:6b:40:c2:c7:10:0c:0f:ba:05:8b:3c:5e:
                    5d:d1:34:ca:99:84:13:2a:4c:6b:e1:f2:44:cb:bd:
                    ce:26:f5:27:72:77:a4:d3:62:30:f2:c0:19:bd:a8:
                    6e:a0:15:c7:be:08:e4:c0:e4:99:72:de:82:c9:29:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D6:03:12:43:6F:89:E8:8A:12:E6:BE:45:5B:95:81:F2:53:82:7C
            X509v3 Authority Key Identifier:
                keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:4a:2b:ca:33:3b:c3:d4:47:f5:fa:fe:16:3d:9f:58:59:
         f9:c6:78:82:4a:d7:c8:d9:2d:d1:00:96:56:28:7b:be:21:24:
         15:8e:93:9a:fa:c4:0e:5e:82:19:ed:da:c5:11:0c:80:4c:70:
         2c:a2:b4:03:ce:0b:a7:b1:c7:ff:ba:2a:5d:60:9e:a8:e9:9d:
         64:37:56:77:75:f8:ae:da:e0:89:41:48:5e:51:2a:35:b7:d3:
         ad:fc:b9:15:55:ac:cc:1b:b9:ed:dd:e6:8e:f7:d4:51:4f:ef:
         cc:f1:87:a7:c3:4a:53:23:4b:8b:27:99:46:72:63:2e:e9:13:
         f0:24:0a:fe:13:7f:f5:f5:d7:a8:4e:16:f6:87:92:46:f6:3f:
         c2:26:30:4d:34:57:59:b5:a7:d3:4a:6a:38:f6:12:b0:e5:19:
         c7:41:62:f0:4b:3e:54:cf:9a:50:7f:24:bd:12:82:5a:3d:da:
         81:19:4b:68:d4:7d:64:7e:63:6c:5e:73:47:6a:3c:60:cf:a3:
         91:7d:68:d5:a5:e4:cb:c7:8a:ab:06:05:c5:be:65:e2:81:86:
         07:95:ee:38:31:90:cb:46:be:0b:e3:f0:91:ed:77:95:4a:2a:
         e3:8f:9c:73:74:6b:26:79:d0:1e:26:c9:18:be:b7:c6:db:47:
         59:cc:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:41:38 2025 by rpki-client