Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          whNNELiXGX17WIuP6N28zCH6hY578TR+z8IF7iiM+Xg=
Subject key identifier:   49:17:EB:40:BD:44:0B:0A:BE:0A:E4:9B:4E:B2:F9:F3:85:BB:34:DE
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       0C53180679986ACD5627DD454E5B9A26993FFA5E
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 06 Mar 2025 13:45:55 +0000
ROA not before:           Thu 06 Mar 2025 13:40:55 +0000
ROA not after:            Thu 05 Mar 2026 13:45:55 +0000
asID:                     264381
IP address blocks:        131.161.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:18:06:79:98:6a:cd:56:27:dd:45:4e:5b:9a:26:99:3f:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Mar  6 13:40:55 2025 GMT
            Not After : Mar  5 13:45:55 2026 GMT
        Subject: CN=4917EB40BD440B0ABE0AE49B4EB2F9F385BB34DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:1d:8b:5a:f0:0b:ce:1e:c3:e6:4c:52:d1:
                    88:6c:b3:45:11:16:28:21:d2:14:9d:91:d4:55:de:
                    4b:fa:18:3a:85:f6:fd:a2:27:dd:bb:be:8b:41:a9:
                    2c:c1:20:c4:76:d5:80:19:c7:4e:e2:30:92:e9:52:
                    b2:7d:fc:51:ca:5e:57:4b:68:88:d2:9f:05:9f:39:
                    b0:64:73:d5:2a:33:27:ba:3a:6e:bf:0d:9d:5e:96:
                    dc:3f:d9:a6:37:31:fd:ca:e6:ea:0d:78:be:60:cd:
                    c1:e4:6e:6e:02:03:b0:31:bf:c2:c2:a6:cc:d5:88:
                    49:33:2b:56:e6:c5:83:81:15:53:73:8f:86:12:cf:
                    b4:f5:51:d7:8a:8b:3e:6e:0b:01:4b:13:13:0d:90:
                    d2:32:64:2b:06:0b:63:6c:f5:a0:ea:18:3b:e5:55:
                    c9:56:29:b1:a7:b1:2a:02:4d:02:6c:e2:c7:70:9e:
                    b6:50:25:10:bd:fd:21:7c:fd:ad:87:f4:93:23:23:
                    fe:88:51:14:af:e9:43:87:36:86:57:2e:52:8e:9d:
                    12:5a:2b:be:68:02:29:0b:95:3f:12:76:6f:0c:c3:
                    f6:f5:db:b1:43:5c:25:d7:aa:b4:b0:91:9a:08:85:
                    f4:b4:39:ce:dd:2a:58:62:1c:11:91:85:64:f9:0d:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:EB:40:BD:44:0B:0A:BE:0A:E4:9B:4E:B2:F9:F3:85:BB:34:DE
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:14:5a:46:e5:3c:ec:5d:8f:55:ea:8b:57:fd:02:f5:11:
         29:de:42:d9:37:b3:bf:7f:97:0f:ee:fd:55:df:ec:c8:93:9d:
         94:e3:21:da:3a:1a:7d:22:60:bb:e7:39:66:8c:6a:55:2c:47:
         be:04:df:e8:9d:47:84:87:5d:2f:84:f5:80:19:23:19:41:59:
         df:52:c2:14:b1:ed:05:b7:00:44:10:f8:70:46:d7:e1:ee:70:
         1d:5d:e1:b4:d3:2c:43:e9:2a:e9:20:5e:4a:0a:55:b4:16:c2:
         f7:6c:75:f0:36:70:ef:db:b1:9a:6f:54:40:61:0c:0f:d6:00:
         61:43:dc:8f:5d:0c:aa:85:53:5c:91:fa:29:ca:ba:bf:1c:4b:
         55:07:d9:d5:f0:76:6d:b4:58:ad:cb:30:bf:15:1c:b8:c6:e9:
         8b:a8:01:c3:39:ea:b3:47:1f:19:f0:34:70:7b:02:3e:4a:30:
         7f:f4:6e:ee:4e:ab:4f:55:2a:df:db:ad:fa:58:73:c5:22:2b:
         f3:ea:21:97:ca:08:9a:b4:30:0b:f3:c1:51:bc:aa:a4:c9:9b:
         dd:ee:65:06:72:39:75:7c:9f:7c:e0:dc:28:0b:f0:c4:5b:27:
         e5:3e:4b:e9:54:57:95:20:b8:9e:12:3f:5d:0a:7e:40:a6:2b:
         20:55:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:21:40 2025 by rpki-client