Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          BKp18IBViTxi2bDDTkfoKCBsW4Bt/AsQx74GrJKV488=
Subject key identifier:   21:57:84:02:7B:95:A0:B0:32:50:59:71:3B:2B:F1:22:E1:42:22:EE
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       06AC349AF13C8886AA025816EFDFBCB86C03A1CD
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 06 Mar 2025 06:33:12 +0000
ROA not before:           Thu 06 Mar 2025 06:28:12 +0000
ROA not after:            Thu 05 Mar 2026 06:33:12 +0000
asID:                     264392
IP address blocks:        131.161.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ac:34:9a:f1:3c:88:86:aa:02:58:16:ef:df:bc:b8:6c:03:a1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Mar  6 06:28:12 2025 GMT
            Not After : Mar  5 06:33:12 2026 GMT
        Subject: CN=215784027B95A0B0325059713B2BF122E14222EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:10:97:79:d3:e8:c2:31:5c:00:68:ad:e2:
                    ad:68:bf:da:31:35:ee:42:19:5b:a5:4d:a0:99:b6:
                    54:1d:69:8f:28:f3:84:f9:70:8e:ed:69:63:4b:c0:
                    c9:3b:0f:76:4c:d3:04:5d:e6:fb:94:b3:0c:6c:b8:
                    4e:da:e9:43:86:53:f5:39:29:a8:30:9d:cd:bb:69:
                    a2:c5:8a:84:51:c4:9b:e1:f5:a1:82:75:6f:71:03:
                    e1:65:99:fa:b9:85:9f:c8:44:d5:0d:ed:ef:60:51:
                    16:77:54:34:39:e0:e5:98:18:e1:11:d6:b3:99:c3:
                    a3:1d:b2:63:b8:17:36:f9:76:71:2d:4d:fe:57:cb:
                    f5:94:c6:c6:a3:d4:6f:09:5a:c2:04:d4:43:56:fb:
                    8c:2e:ec:57:35:95:b2:72:19:8f:b4:9e:24:9f:6d:
                    36:7d:a7:72:bb:df:7b:08:4e:8d:d9:bc:c2:5c:d7:
                    16:e1:86:f7:13:78:2a:13:9c:40:cc:30:63:77:94:
                    74:ba:4a:80:56:60:41:1b:77:c7:15:c8:40:9a:77:
                    a3:8b:91:c2:3a:19:cf:f8:ab:ed:49:5e:d7:db:ec:
                    61:52:59:06:16:2e:47:a5:95:81:57:d0:85:f6:29:
                    5e:df:ee:cc:98:d2:68:d0:a3:16:70:1b:e1:44:92:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:57:84:02:7B:95:A0:B0:32:50:59:71:3B:2B:F1:22:E1:42:22:EE
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bd:a4:64:b4:0c:78:39:1d:6d:d6:98:72:c7:a2:98:65:13:
         c8:d3:b4:20:2d:62:c7:cd:6b:67:be:d5:97:66:0a:e4:44:72:
         f7:e5:6d:fc:7f:46:c8:98:37:79:04:21:8d:f7:37:79:1a:2c:
         e9:af:d1:75:b6:89:51:53:af:2e:02:69:1c:6b:4c:76:17:0a:
         4a:d8:9e:e6:01:19:ec:10:37:fc:42:b6:91:91:35:00:82:dd:
         97:0d:8f:b1:ea:c8:d6:4a:e8:d6:ab:08:ea:f0:26:57:7e:3d:
         6c:e1:e7:2a:64:12:6c:a4:00:b0:f6:4d:66:84:6b:b1:5d:d2:
         3f:b6:72:dc:42:c8:1b:9a:f5:3f:19:41:b9:92:6e:8e:b6:33:
         6a:3f:d1:52:b5:e8:93:1b:f4:77:74:41:bf:bc:78:f9:37:c1:
         ca:d3:df:e4:86:76:c7:3a:f1:fa:3f:fe:8a:78:59:67:cb:ea:
         55:52:f0:e3:06:fd:fa:34:0a:c1:c3:6b:f8:0a:a5:99:d9:bf:
         4e:ed:c5:42:c4:dd:26:86:85:b6:b8:75:f6:94:f3:6d:7e:e5:
         b9:a0:52:f5:a2:bb:78:ed:19:a7:bc:e1:49:c5:93:58:15:db:
         3b:cc:86:b1:21:c0:23:7d:6e:aa:4b:98:7a:09:3f:9d:fa:4f:
         ab:b2:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:41:09 2025 by rpki-client