Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          0Mm6ksde07vzbOZyThbm3McvVIRlw1lZh9Iu0+35cWk=
Subject key identifier:   C5:1C:FB:C6:98:71:89:0A:32:6B:78:8C:8E:3B:84:C2:18:90:88:91
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       7CFF568B22C86C518BE496D5AA3384FE50E67A57
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:33 +0000
ROA not before:           Thu 06 Mar 2025 00:55:33 +0000
ROA not after:            Thu 05 Mar 2026 01:00:33 +0000
asID:                     61637
IP address blocks:        131.100.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ff:56:8b:22:c8:6c:51:8b:e4:96:d5:aa:33:84:fe:50:e6:7a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:33 2025 GMT
            Not After : Mar  5 01:00:33 2026 GMT
        Subject: CN=C51CFBC69871890A326B788C8E3B84C218908891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:2f:89:bd:63:05:83:8b:2a:80:bf:93:ba:
                    4c:6f:55:48:6a:b5:f9:8c:c1:87:80:46:b1:82:b8:
                    7d:13:82:e8:93:38:bd:3f:aa:ba:5d:13:e7:48:0d:
                    6c:31:3b:72:d8:2e:f7:ea:2e:94:8a:08:ad:b4:33:
                    40:54:a7:63:6b:b3:b4:a0:29:cd:67:f4:a6:56:39:
                    76:8d:4e:bc:cd:c7:a2:38:40:e8:92:79:99:52:86:
                    45:eb:d2:cf:5d:5f:4a:59:a2:dd:03:74:c0:9c:40:
                    00:b9:43:ae:43:5a:cf:0c:d9:10:2e:29:30:1b:63:
                    be:b3:f4:15:85:15:7e:bf:8a:b8:02:6e:2d:d8:2c:
                    ec:8e:31:22:97:5c:e5:b4:55:06:c9:40:83:42:2d:
                    ef:d6:58:95:03:10:2c:f5:a5:60:70:c5:85:6f:d2:
                    11:8e:9e:d4:74:93:83:4f:85:aa:7b:03:88:49:70:
                    d4:3c:35:df:b6:ed:8d:9e:8e:04:fb:a6:6c:35:32:
                    65:26:f6:55:cd:23:fb:38:4d:69:84:fb:1d:0c:1e:
                    99:f4:85:51:fa:d1:05:f2:57:19:e6:df:36:a2:89:
                    77:b7:5e:04:6c:7a:42:ca:99:dd:d5:4f:57:84:39:
                    39:81:3b:95:8e:a1:7b:f1:84:5d:2e:2c:8e:8b:c0:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:FB:C6:98:71:89:0A:32:6B:78:8C:8E:3B:84:C2:18:90:88:91
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:81:58:91:ab:ce:31:e8:7f:a0:8b:18:ac:61:2e:bc:3e:b9:
         15:43:76:6f:a4:20:fe:d2:b0:fd:ca:e9:ea:be:74:40:8a:67:
         d4:59:77:79:90:c8:0a:fe:47:10:04:48:90:7f:69:c6:01:d2:
         5e:60:58:38:5d:22:0b:b6:64:48:93:5b:71:b1:12:12:28:b6:
         88:e9:bf:92:f5:91:e5:e5:59:a7:cb:9d:90:4f:80:23:67:22:
         71:37:02:f0:76:de:15:c8:fd:7b:5f:f5:87:8c:1f:84:66:33:
         e6:f5:ca:c4:6f:5e:e0:cb:49:de:f2:92:bb:16:51:c1:58:76:
         76:70:5a:86:e0:78:ac:70:46:dd:b7:86:39:ee:2d:33:09:2f:
         05:92:3e:ed:a4:f4:89:ab:e9:01:57:db:05:54:25:2c:89:2a:
         69:a8:8b:4a:82:b3:25:28:fc:51:57:5e:0e:7e:77:b2:d1:e0:
         ec:3e:bf:37:23:c4:d2:40:5d:be:32:b7:1b:3a:dc:c2:16:fe:
         c9:5b:cd:52:77:e7:0f:c2:e9:ee:6d:9a:c3:d9:3e:6b:11:74:
         e6:14:37:77:6f:a0:0d:86:4e:d0:e0:b2:ef:2e:bf:31:e6:d4:
         ce:14:79:ef:ce:cb:f5:d6:59:fe:38:3d:e2:92:58:6b:2f:00:
         db:fc:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:25 2025 by rpki-client