Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/3133312e3139362e39362e302f32322d3234203d3e20323635393639.roa
File:                     3133312e3139362e39362e302f32322d3234203d3e20323635393639.roa (raw, json)
Hash identifier:          zpzTGMYdvpD0HyMGJZVbD+ywfsTkyki3GEJYUax0Cyk=
Subject key identifier:   DF:17:F5:B8:A7:4E:D0:5A:92:21:E0:5C:C6:D4:16:D4:B4:44:5A:1D
Certificate issuer:       /CN=C66A6FE81524B90A83D44FED912B1CECBF99912C
Certificate serial:       08F38C0EB1F472CCD624AE92C5C4448927166785
Authority key identifier: C6:6A:6F:E8:15:24:B9:0A:83:D4:4F:ED:91:2B:1C:EC:BF:99:91:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C66A6FE81524B90A83D44FED912B1CECBF99912C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/3133312e3139362e39362e302f32322d3234203d3e20323635393639.roa
Signing time:             Thu 15 May 2025 13:55:46 +0000
ROA not before:           Thu 15 May 2025 13:50:46 +0000
ROA not after:            Thu 14 May 2026 13:55:46 +0000
asID:                     265969
IP address blocks:        131.196.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/C66A6FE81524B90A83D44FED912B1CECBF99912C.crl
                          rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/C66A6FE81524B90A83D44FED912B1CECBF99912C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C66A6FE81524B90A83D44FED912B1CECBF99912C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 14:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f3:8c:0e:b1:f4:72:cc:d6:24:ae:92:c5:c4:44:89:27:16:67:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C66A6FE81524B90A83D44FED912B1CECBF99912C
        Validity
            Not Before: May 15 13:50:46 2025 GMT
            Not After : May 14 13:55:46 2026 GMT
        Subject: CN=DF17F5B8A74ED05A9221E05CC6D416D4B4445A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:6c:89:c7:f2:87:80:7a:0c:e3:73:04:46:
                    02:d0:33:57:29:ac:5d:fb:8a:47:17:db:72:38:ad:
                    59:c6:ac:ad:ed:d2:35:b8:d2:9a:dc:6a:6c:45:cf:
                    1c:c0:44:fb:3b:f8:db:1c:89:24:3d:f8:74:b5:1b:
                    0a:cd:17:9d:2b:fa:af:8d:ce:24:f9:d3:31:b5:53:
                    06:08:72:7a:30:b1:02:1c:74:96:5d:20:95:a9:ab:
                    49:cd:ef:e1:93:f0:c0:64:1c:95:10:ec:90:e0:90:
                    80:52:84:cf:5c:43:9b:36:c9:66:f1:9f:cb:ee:56:
                    68:dd:26:e1:ef:d6:9c:7d:db:ef:ca:67:61:0f:bf:
                    17:39:9b:ba:17:5d:6f:4a:29:03:64:f3:17:ac:d7:
                    c2:04:a4:54:b2:e8:2c:c7:7f:1f:5d:ac:14:92:79:
                    08:30:77:31:90:00:33:11:2d:ee:09:ca:81:b5:ba:
                    83:5c:76:f0:4c:12:38:48:8d:4f:3c:90:c1:a6:c6:
                    03:ea:54:86:f5:ce:05:72:31:17:9c:a1:82:fb:81:
                    e4:df:1d:cb:19:28:8f:86:64:f1:f9:10:cb:f4:1d:
                    84:a2:e0:39:82:55:d3:25:b7:5a:58:4e:1d:9d:1c:
                    d6:82:16:f6:05:db:d0:3c:c9:08:73:d9:62:2b:4c:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:17:F5:B8:A7:4E:D0:5A:92:21:E0:5C:C6:D4:16:D4:B4:44:5A:1D
            X509v3 Authority Key Identifier:
                keyid:C6:6A:6F:E8:15:24:B9:0A:83:D4:4F:ED:91:2B:1C:EC:BF:99:91:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/C66A6FE81524B90A83D44FED912B1CECBF99912C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C66A6FE81524B90A83D44FED912B1CECBF99912C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/3133312e3139362e39362e302f32322d3234203d3e20323635393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:ef:35:22:6d:ba:2d:d0:81:db:71:c9:f2:22:c7:28:93:
         27:4c:b1:44:50:8b:b0:0f:ba:50:7b:b4:65:c0:12:87:e3:f2:
         49:b8:f9:0c:8a:76:d6:53:23:07:ac:6a:47:2d:23:09:90:4b:
         07:78:52:25:96:ac:9c:fe:58:b9:3e:69:b7:ea:e0:de:30:96:
         67:ae:f1:3d:c4:f4:3f:33:07:d0:36:c9:5b:63:ea:8b:19:5a:
         43:3a:71:d8:93:10:3b:30:35:6e:cf:c8:7d:9d:8d:be:d9:01:
         03:02:c7:fc:15:3b:3e:98:2e:ab:c1:83:e2:bf:be:0d:bd:07:
         d2:b6:b6:41:26:08:e5:0d:de:85:64:be:75:5b:9b:4c:23:27:
         d4:15:0d:b1:1c:e8:39:4f:fb:2e:53:a9:4c:19:10:af:24:b6:
         a1:45:5a:22:26:87:db:d8:78:c9:81:0b:e4:7f:57:f1:15:1d:
         78:c8:91:31:d7:4f:1b:6d:6e:53:71:7e:b6:1b:53:bc:e8:01:
         fb:81:20:79:a4:f7:14:02:5a:08:31:d1:f9:20:e3:42:b4:1c:
         93:25:3a:53:05:31:08:db:0d:7d:e2:35:54:d0:e8:38:50:f0:
         f0:f3:28:f3:22:fd:d7:1b:25:59:de:45:d2:e4:10:b5:3c:d2:
         4a:3c:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:52:25 2025 by rpki-client