Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
File:                     3133312e302e3131362e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          bkNLjNksK4wVIjw2uX8WAmuy5TmTenpCvnjoXo4oF5U=
Subject key identifier:   C9:D1:88:8C:17:A1:E0:46:44:72:EB:F1:8C:B8:15:AC:1D:B4:57:25
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       68B372A8BDE6633FA4F1958BE5108EE7200EED74
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
Signing time:             Thu 06 Mar 2025 19:06:07 +0000
ROA not before:           Thu 06 Mar 2025 19:01:07 +0000
ROA not after:            Thu 05 Mar 2026 19:06:07 +0000
asID:                     61884
IP address blocks:        131.0.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 08:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:72:a8:bd:e6:63:3f:a4:f1:95:8b:e5:10:8e:e7:20:0e:ed:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Mar  6 19:01:07 2025 GMT
            Not After : Mar  5 19:06:07 2026 GMT
        Subject: CN=C9D1888C17A1E0464472EBF18CB815AC1DB45725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:b3:fd:71:fc:ab:f2:52:b1:78:f1:bc:14:
                    99:7a:2a:96:7e:fb:9b:5d:53:c4:fe:23:a3:00:fe:
                    64:e8:9d:d4:87:bc:b1:89:2b:c0:00:c8:93:ba:71:
                    16:31:f6:23:01:5a:12:40:b8:6f:f6:d8:08:eb:45:
                    1d:e7:61:23:42:7f:da:2f:f1:44:a4:2c:5c:35:30:
                    74:47:72:a3:cf:fd:a8:78:64:0b:89:b2:71:0c:bd:
                    54:49:4d:28:3c:8c:a8:2d:df:fc:55:9d:a7:2e:ef:
                    c2:1b:56:70:a6:ad:25:57:ff:ae:a2:ae:a2:ad:0e:
                    24:54:db:98:c8:e1:0a:9e:d5:2f:de:5c:37:aa:4b:
                    11:bd:3c:d3:66:ac:d6:d9:aa:30:f6:86:db:fd:8c:
                    d2:83:62:71:2a:e2:03:82:0b:e4:80:7a:e3:c3:c6:
                    34:34:ca:d8:f7:e3:1e:b0:a3:2b:d0:0f:bc:9e:17:
                    5a:91:50:ec:23:41:d2:bc:88:84:8e:12:da:1f:29:
                    13:f2:8e:c3:0c:cd:cc:a7:f6:b5:e7:24:c4:6b:dd:
                    72:84:ea:81:37:7b:fd:23:54:08:1c:b9:7d:40:e4:
                    f9:60:53:07:a6:39:f7:2d:49:30:05:8e:89:f5:40:
                    ec:5c:06:f9:5c:c0:63:1d:4f:83:53:bf:fa:71:c9:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D1:88:8C:17:A1:E0:46:44:72:EB:F1:8C:B8:15:AC:1D:B4:57:25
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:7f:9c:0f:ff:7b:75:a4:2d:18:95:aa:eb:d0:1f:27:c5:
         d2:57:f5:44:08:63:7d:a0:f5:c4:83:d2:73:ca:9a:19:b5:56:
         da:e5:36:03:2f:cb:6a:0b:ef:eb:10:ea:1f:58:ac:d1:7f:b8:
         f7:dd:81:fb:23:6f:3c:37:06:45:df:83:e6:58:30:2d:96:83:
         ae:d9:52:1a:47:a0:ca:b9:64:b2:4a:b3:e8:76:f8:01:71:e2:
         18:33:14:2e:47:e0:ba:30:06:92:d8:f9:5b:14:2f:e9:7b:a5:
         2a:80:c5:99:68:ee:63:49:e9:3f:e2:44:04:68:ae:f1:ce:92:
         c7:e2:63:e7:4f:2f:99:42:a4:d2:05:cb:96:d7:37:4e:3e:f4:
         e8:bd:5a:f2:52:55:42:dd:d4:30:65:1f:44:2e:7f:33:75:40:
         a7:13:bc:cc:3d:44:e6:07:64:ea:16:c7:e6:43:c1:7d:1e:04:
         1b:9f:86:15:a8:01:2d:98:46:f1:44:5f:76:ac:2a:d6:b7:eb:
         30:1e:91:a7:ae:66:2c:27:14:de:d9:73:9d:4a:3e:5a:16:d3:
         4d:d7:5e:65:89:ef:32:43:fc:1d:55:d7:9d:ad:72:2b:71:96:
         5e:f2:b1:47:25:15:39:e8:3c:16:a1:64:1d:23:06:26:43:aa:
         1d:b7:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:12 2025 by rpki-client