Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
File:                     3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier:          ohncBCmyXUzrHKvX9zMnLaZici/ZynzGdXz91tV6HcQ=
Subject key identifier:   5D:43:13:9C:B4:49:23:E0:32:40:C3:04:20:7E:01:87:08:F9:2C:86
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       6A6C09C46F8A9CD4B8CCAE3A07EA46CC77B156DD
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
Signing time:             Wed 05 Mar 2025 19:00:20 +0000
ROA not before:           Wed 05 Mar 2025 18:55:20 +0000
ROA not after:            Wed 04 Mar 2026 19:00:20 +0000
asID:                     61639
IP address blocks:        131.100.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6c:09:c4:6f:8a:9c:d4:b8:cc:ae:3a:07:ea:46:cc:77:b1:56:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Mar  5 18:55:20 2025 GMT
            Not After : Mar  4 19:00:20 2026 GMT
        Subject: CN=5D43139CB44923E03240C304207E018708F92C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:97:94:a4:1a:7b:e4:a4:4a:93:05:5f:42:
                    f5:9e:2b:e8:52:c1:1b:30:64:f7:de:00:02:14:3c:
                    94:5a:52:8d:73:b9:3f:8d:b7:bc:6f:da:88:b0:12:
                    90:f3:ce:f4:e9:ba:b0:8b:b6:53:3b:c9:da:24:7c:
                    ac:1b:47:65:79:50:7d:7c:06:6b:57:21:e7:df:d1:
                    5d:e7:a0:79:67:26:c1:79:d7:e5:b5:d7:ad:c8:26:
                    c6:d7:0b:22:63:17:d1:32:f9:fc:ce:69:db:6a:dd:
                    d0:16:a5:88:ae:27:56:7d:25:e0:2e:13:87:ad:2e:
                    f4:b9:02:98:38:59:1f:f5:b5:74:e4:ce:fb:d8:5a:
                    c1:33:7e:a5:d2:d3:fd:6f:dc:4b:11:7d:20:b3:4d:
                    1c:a8:e5:cf:72:2e:44:06:ed:8a:e2:44:0a:a6:8f:
                    58:49:6d:c7:6b:7a:1c:1b:1c:36:32:5b:2d:57:0c:
                    d8:39:95:ac:22:ee:31:1c:93:1f:78:40:33:0f:bf:
                    4b:a8:f2:bb:12:9c:b1:69:7a:8f:81:86:7f:12:bf:
                    7b:87:9c:aa:3d:6f:44:57:04:98:2e:db:4e:15:5f:
                    7a:4c:32:48:b8:17:59:0f:06:b1:f1:1f:34:00:13:
                    28:37:22:8c:92:1f:81:98:f6:75:b9:2b:f0:7d:82:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:13:9C:B4:49:23:E0:32:40:C3:04:20:7E:01:87:08:F9:2C:86
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:56:e6:91:a8:a1:19:93:a7:88:3c:db:df:a2:0b:ff:a1:8f:
         e3:40:19:df:42:d1:73:b6:e9:18:bc:9f:c8:79:af:18:01:03:
         a6:2b:5a:1a:bf:b4:5b:04:da:aa:9a:64:23:77:e4:2d:5d:0b:
         f4:60:5a:b9:ce:da:21:76:37:dd:67:c3:23:bc:df:1f:50:f7:
         0e:bd:38:0d:a5:17:ce:30:e4:76:b6:57:14:b6:19:be:a3:ff:
         98:08:49:4c:5f:eb:ec:00:d3:15:02:e1:a3:15:9c:c5:b7:92:
         c8:c1:4e:21:f9:8a:73:11:76:bd:62:30:6f:f7:20:39:b6:8a:
         bf:8a:a2:33:ff:3d:78:06:c0:de:1e:83:03:35:98:a5:f9:bd:
         4d:7c:38:fe:74:bf:55:86:39:aa:3b:c9:5b:ff:37:12:bd:a8:
         9a:96:6d:c3:cd:84:a8:96:22:19:74:48:95:88:f4:9d:c3:d7:
         91:6c:7a:9f:f1:0b:28:a7:12:df:cf:5b:75:eb:14:c6:70:ef:
         2a:25:c6:6e:fd:c3:ae:c0:21:79:da:69:58:a9:fc:5b:0a:e5:
         74:0d:6d:87:27:78:4e:ab:e4:75:52:63:ad:7e:8b:ce:72:8c:
         c0:4b:41:ee:4c:25:62:2c:c7:14:47:7e:a3:c6:84:6a:6d:16:
         f0:81:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:37 2025 by rpki-client