Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
File:                     3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier:          SQmEbRUssduD/eiQZqSUZW5JAQXnMfLuA0iBzt9PEVg=
Subject key identifier:   50:4F:95:3F:D0:7D:B2:59:47:AA:6B:0A:D4:B3:61:D7:20:34:BE:00
Certificate issuer:       /CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Certificate serial:       6F41F3EC6D70E71E26690881729C93C911F5ACF2
Authority key identifier: 39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61649
IP address blocks:        131.100.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:41:f3:ec:6d:70:e7:1e:26:69:08:81:72:9c:93:c9:11:f5:ac:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=504F953FD07DB25947AA6B0AD4B361D72034BE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:90:51:1a:bb:a4:ae:01:6d:69:bc:5e:ef:
                    c8:82:62:36:75:f5:45:ff:bc:bd:c1:0c:e5:e0:f0:
                    8b:08:b5:4c:56:c9:6e:9a:73:12:0d:e1:3b:ff:4a:
                    61:45:8d:55:3a:66:9d:51:22:dc:11:ab:05:ac:ba:
                    99:1f:d7:f3:bb:d3:cc:c7:1e:86:eb:6d:cb:9a:ed:
                    84:d5:1a:8f:ef:6f:0c:2f:7d:a8:41:1d:9e:b0:ab:
                    0c:f2:9e:16:d8:6c:aa:e1:a1:81:7d:93:a5:4d:df:
                    b9:eb:b6:b2:be:99:0e:bb:e1:0c:9a:3d:04:26:ea:
                    b6:f1:eb:2a:ff:23:2f:30:93:83:23:d4:8f:a4:98:
                    61:88:92:c7:64:8c:ea:48:44:72:49:59:93:2d:ce:
                    86:bb:09:1e:f2:d3:c2:e7:d1:96:22:a2:e8:03:85:
                    1f:4e:2f:3e:e2:b6:b3:af:eb:2f:05:da:61:7b:c5:
                    ca:1a:9c:54:9d:18:c3:c5:34:38:4c:25:fc:ca:51:
                    09:17:b4:45:06:28:d6:e2:23:f6:3e:0f:d9:ac:1e:
                    2c:6a:08:2f:32:59:99:3c:ca:0e:71:1e:53:eb:4a:
                    e5:4a:c5:b3:c0:57:28:62:b7:4c:c0:dc:df:e2:74:
                    7b:9d:45:d3:66:e4:57:09:fb:02:32:7c:83:7f:c0:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4F:95:3F:D0:7D:B2:59:47:AA:6B:0A:D4:B3:61:D7:20:34:BE:00
            X509v3 Authority Key Identifier:
                keyid:39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:08:d5:8d:53:f5:5a:03:6a:85:70:9a:23:04:c3:5c:85:eb:
         6a:24:5e:f8:d0:e2:0f:84:e6:de:f7:b2:52:9d:54:43:2c:1a:
         c2:61:dd:dc:ff:d6:80:3c:b6:27:9e:02:88:c7:e7:97:f6:08:
         51:8c:52:12:d0:55:24:ad:66:65:31:61:4f:79:f4:68:af:7f:
         8e:fe:60:6a:a9:ba:c1:cf:ef:84:a0:4c:04:6a:cf:a1:86:d4:
         3a:17:9a:5c:cb:69:a9:ad:66:58:13:59:00:9a:5a:ca:55:93:
         58:a7:73:bb:af:4b:88:a4:c5:e7:05:a3:4b:c8:49:b8:97:74:
         5c:bb:e8:9d:65:1f:dd:d6:c3:95:85:34:f2:30:63:9f:2b:00:
         28:16:9f:b3:cb:cb:35:dd:6c:48:ca:12:a4:1b:eb:88:a9:8f:
         01:ce:14:ba:44:82:f2:28:96:0f:ab:22:35:88:84:61:19:78:
         00:ab:10:ab:5d:eb:f9:1f:a0:4a:de:ee:32:e2:33:7b:3f:72:
         a9:b7:60:ad:a8:99:3f:49:fa:52:e1:02:a6:be:10:b9:cb:fc:
         28:58:04:eb:f5:d5:09:9b:99:3e:e0:50:16:f1:da:8c:e7:51:
         56:9f:10:15:d9:b4:59:f3:cd:66:34:b8:b7:e0:82:08:57:f0:
         57:82:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:48:06 2025 by rpki-client