Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa
File:                     3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          5cK989zVmEz7SzRQXLG59MrB/Vksoim8X49YM/ERrDw=
Subject key identifier:   F1:C6:10:89:D6:2E:89:02:EF:A1:6C:FD:4A:97:A6:12:C0:53:6D:69
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       0D6849CEA4F7506C06C63249911EEEED44004BFD
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:10:12 +0000
ROA not before:           Fri 07 Mar 2025 19:05:12 +0000
ROA not after:            Fri 06 Mar 2026 19:10:12 +0000
asID:                     22381
IP address blocks:        131.108.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 06:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:68:49:ce:a4:f7:50:6c:06:c6:32:49:91:1e:ee:ed:44:00:4b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:05:12 2025 GMT
            Not After : Mar  6 19:10:12 2026 GMT
        Subject: CN=F1C61089D62E8902EFA16CFD4A97A612C0536D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:88:d0:d4:c8:53:95:b3:20:e6:7e:69:d7:
                    7f:6b:37:98:92:dd:05:0d:72:be:d4:20:99:7b:e9:
                    27:76:40:63:fc:eb:8c:c4:65:c8:de:a8:31:e7:dd:
                    85:b8:a1:8e:f9:55:21:06:79:a0:84:98:b0:e4:13:
                    13:a9:f8:57:30:71:21:eb:2e:09:00:39:62:33:e0:
                    11:07:ea:8d:0f:60:3a:f2:a4:71:5c:03:aa:94:46:
                    71:dc:90:1a:1a:59:62:eb:3a:b1:4d:28:53:57:fd:
                    b7:0b:f0:85:27:25:f8:c9:c9:07:03:96:c9:d3:24:
                    ba:b7:fb:8d:7b:c7:a1:f5:03:4d:7f:7d:21:00:d7:
                    a0:1e:dd:c3:00:07:35:14:50:bf:ab:f2:55:7a:60:
                    8d:21:1c:df:5e:57:d9:3d:3b:2a:1f:dd:9b:8d:40:
                    87:9e:a4:38:78:e2:c0:bc:43:b4:c4:82:b6:d9:39:
                    4e:6e:08:e6:02:89:92:b5:e9:df:98:57:bd:a6:1c:
                    e0:2a:6d:0c:0e:9a:c9:4e:ce:55:ea:6b:98:a5:9b:
                    67:e2:74:3b:c3:db:f4:a6:19:7a:18:ff:9f:1c:7a:
                    26:c3:8b:b6:7b:39:5e:e6:68:a3:12:88:4c:6e:61:
                    a2:99:7b:d7:a6:5f:89:2d:df:6d:54:94:b6:b7:b3:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:10:89:D6:2E:89:02:EF:A1:6C:FD:4A:97:A6:12:C0:53:6D:69
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:bc:81:de:d1:ee:99:27:91:ce:f3:35:ff:c5:e3:3e:54:
         22:77:7e:c9:f7:7a:6f:46:5f:b6:cc:fd:63:78:bd:3c:84:bb:
         19:6d:34:6d:d2:17:74:4c:16:c6:b0:03:07:8b:5c:ca:4a:de:
         cb:92:d5:a8:94:70:4b:2b:1f:57:34:b2:1f:c9:e0:cb:9c:8b:
         93:fc:35:45:d4:db:02:dc:2b:3a:12:22:23:3c:77:6f:ba:9b:
         6b:9e:37:e9:39:10:c5:0d:64:5e:99:23:24:50:e7:f0:51:6a:
         4a:3c:8a:1f:a4:33:3b:5b:fe:d8:71:ce:60:f5:72:93:93:c2:
         7a:77:f1:89:43:da:4b:c0:e9:78:af:78:0c:27:4a:77:be:34:
         6e:be:83:74:5f:9f:60:4f:d7:bb:cc:51:1f:1a:c0:b1:f5:c2:
         a3:3f:58:1d:4d:8d:12:41:dd:29:d0:5a:f8:3e:10:b5:1e:e9:
         bc:5b:13:5c:01:96:91:fe:28:bf:cc:b5:26:8d:99:7f:02:a0:
         22:0c:e5:f3:bc:b5:85:8f:c9:83:66:56:9c:03:6b:b5:a4:00:
         9d:35:9e:ef:c3:6d:ec:d9:21:66:30:40:b2:59:ab:56:38:e7:
         6f:be:cf:b4:47:9b:6b:63:5b:4c:d2:ff:b8:d3:b1:f3:0e:b1:
         52:ca:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:07:11 2025 by rpki-client