Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133332e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133332e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          Nfi/3K7RaeU9B4RunBosrACaUqGqbSOVZpuXxwdnlLk=
Subject key identifier:   01:DA:57:03:EE:23:AD:E6:4D:0F:77:F8:41:B6:29:D3:58:C5:35:B0
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       653E30A6A86C401239267AE2F2987CF44A894AC5
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133332e302f32342d3234203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:34 +0000
ROA not before:           Thu 06 Mar 2025 00:55:34 +0000
ROA not after:            Thu 05 Mar 2026 01:00:34 +0000
asID:                     61637
IP address blocks:        131.100.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:30:a6:a8:6c:40:12:39:26:7a:e2:f2:98:7c:f4:4a:89:4a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:34 2025 GMT
            Not After : Mar  5 01:00:34 2026 GMT
        Subject: CN=01DA5703EE23ADE64D0F77F841B629D358C535B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:65:fe:29:fc:e1:11:cb:40:4c:3f:9c:83:
                    42:d1:d2:82:8b:85:5d:35:2b:75:4b:16:ac:11:71:
                    40:8d:e5:34:4b:5e:61:91:23:71:9f:fd:4c:4e:52:
                    19:ef:d7:55:23:63:07:9d:59:f0:ca:8e:ec:12:a9:
                    93:bb:d2:ba:e2:3a:47:41:0c:33:b6:96:d9:57:ab:
                    48:53:8c:e0:17:21:1a:06:ef:6d:9b:9c:8b:11:5c:
                    31:0b:74:2c:82:ab:e4:06:3d:21:08:c7:51:a6:b4:
                    38:7b:92:ba:6f:64:f7:12:60:e3:16:7b:95:55:da:
                    a1:4f:7f:5a:c3:8f:ae:cb:77:12:8b:6c:ee:e6:1a:
                    2b:08:18:6c:bb:19:b9:1a:87:93:19:bb:bc:45:7c:
                    62:f0:04:c9:c3:32:f9:6d:31:ad:0a:3e:ef:96:41:
                    91:46:17:a3:3a:46:cb:36:b4:ce:ef:b5:fb:7e:0d:
                    e3:94:a6:8a:19:39:1b:8c:3d:d8:87:ed:4f:ac:7a:
                    60:7a:ce:a9:a2:a9:c7:10:f8:6c:59:05:a0:11:cd:
                    5e:b0:a1:99:9f:1b:c2:08:51:a9:f0:59:f4:c1:13:
                    1d:06:9b:5b:0f:2f:43:25:8e:96:21:25:4c:33:f0:
                    ee:85:08:ed:1e:7e:e0:d6:8e:a4:59:b1:c2:ad:b6:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:57:03:EE:23:AD:E6:4D:0F:77:F8:41:B6:29:D3:58:C5:35:B0
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133332e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:6e:6f:07:42:71:81:d2:1e:f6:f2:23:42:66:86:99:60:
         51:6c:b8:e5:de:eb:52:c3:9e:fc:d2:06:df:93:63:23:78:37:
         e5:a5:d3:03:82:f5:47:8b:55:42:fb:30:5e:44:24:34:44:73:
         ae:f7:a2:ed:94:2f:e9:6c:8a:7c:1b:be:76:2f:97:0e:03:fc:
         ce:24:e8:cb:b9:98:c5:b6:77:e1:4d:b6:d8:e6:73:06:7f:95:
         85:c5:e9:e2:28:9e:ce:1b:11:13:ab:e8:61:95:df:ce:24:dd:
         b4:99:c8:7a:d6:92:07:41:e6:46:7a:97:8b:d5:bc:37:37:9e:
         fe:66:d5:b2:12:e4:62:5d:0d:d7:57:1b:6c:62:90:0a:f9:3a:
         7c:06:84:19:d9:cf:bc:2e:ef:63:95:5d:cc:c5:99:65:1f:7e:
         40:e3:91:13:1f:65:ab:11:b5:47:21:a7:3f:e9:5e:ea:3b:61:
         1b:cf:5d:12:9f:d9:51:c4:b3:3c:ea:c2:5a:19:09:4f:e3:37:
         ea:c1:fe:19:1e:f0:b5:03:3e:04:ab:11:aa:27:a0:5b:77:3c:
         ef:10:7f:90:6d:3f:79:dc:52:3b:16:b4:82:8f:4c:f2:93:17:
         21:e9:00:05:81:e3:a0:35:e6:90:c5:37:4a:71:6c:4a:43:0a:
         9c:61:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:16 2025 by rpki-client