Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
File:                     3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          J2os+yBVbJ75LHvWXYl37oENdZnBGb1/25a4CiXyyK8=
Subject key identifier:   3D:B8:33:6A:9D:8E:E7:3B:B6:F9:7F:CC:C1:F9:AC:57:C7:7A:7E:64
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       37A145EDD3CE3C8BD1D7C41347B949FD3E570018
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
Signing time:             Thu 06 Mar 2025 22:51:14 +0000
ROA not before:           Thu 06 Mar 2025 22:46:14 +0000
ROA not after:            Thu 05 Mar 2026 22:51:14 +0000
asID:                     52783
IP address blocks:        131.255.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:45:ed:d3:ce:3c:8b:d1:d7:c4:13:47:b9:49:fd:3e:57:00:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Mar  6 22:46:14 2025 GMT
            Not After : Mar  5 22:51:14 2026 GMT
        Subject: CN=3DB8336A9D8EE73BB6F97FCCC1F9AC57C77A7E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:b0:4a:e2:bb:04:18:ae:1a:da:b9:2d:01:
                    5f:cd:60:60:bd:b5:67:8f:ce:fa:8d:b9:1b:d6:d9:
                    64:d2:09:21:c9:cf:ba:a0:44:f7:b2:e6:d2:2a:f7:
                    f2:92:46:96:71:f4:84:04:cf:74:07:de:58:39:58:
                    64:41:80:98:e9:92:e8:3d:4a:bd:95:3a:89:f1:1a:
                    9c:aa:5b:cd:de:79:39:5b:28:cc:66:91:7a:c6:0d:
                    2d:65:0c:4e:8b:7c:59:05:be:f6:b7:10:7a:88:22:
                    9e:6a:fb:2f:16:28:89:90:71:7a:1c:62:f6:1c:68:
                    46:d0:d6:1f:f6:a9:a4:4b:09:75:2d:de:34:20:f0:
                    2e:89:c1:f0:9d:40:fb:53:c9:0e:40:a7:62:d6:98:
                    f0:15:19:03:6e:02:76:d9:a9:8f:e2:44:a1:a8:f6:
                    36:84:43:50:27:04:09:d1:48:f5:e3:ee:7d:40:5a:
                    65:94:3f:40:20:99:de:fb:a7:99:af:8b:3e:bf:00:
                    40:32:f0:de:f1:2e:76:a5:74:fe:9f:cc:15:94:be:
                    7a:a4:27:0e:55:61:81:47:28:79:7c:ae:9c:5d:19:
                    d8:6b:f3:8d:9b:4d:44:aa:04:f0:18:37:01:cc:de:
                    36:77:3b:91:40:60:34:9f:17:53:02:8d:1a:be:2b:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:33:6A:9D:8E:E7:3B:B6:F9:7F:CC:C1:F9:AC:57:C7:7A:7E:64
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:e1:2c:36:cc:15:c3:99:8d:15:9d:f0:78:5b:83:61:be:
         3d:e3:5a:d3:af:22:eb:ba:cf:de:00:20:48:d5:86:d3:c0:63:
         bb:61:89:90:9f:a0:9a:ed:4b:46:2d:08:27:e1:69:0c:03:76:
         eb:7c:ab:f2:b1:7e:9a:94:ee:a3:70:42:1a:fd:7e:af:9f:07:
         9f:25:d6:29:e0:af:75:24:b4:ba:e7:3b:c7:93:21:95:3e:1a:
         85:3c:03:4a:fe:3f:10:39:13:d7:54:63:0f:67:59:36:e8:d6:
         33:2c:f5:80:59:bd:75:a6:06:dc:da:71:aa:62:d5:d9:2f:c0:
         9a:cd:c7:f2:52:fc:7a:90:c3:d2:7b:ff:db:7c:cd:b9:e5:1a:
         9c:5e:16:bd:cf:37:d9:39:be:c0:f0:a4:68:8d:a2:99:e9:f8:
         9c:30:d0:41:5a:df:98:8b:5a:d0:ea:dd:0f:7d:4c:2f:b5:64:
         28:e6:5a:9c:4d:d7:0a:16:96:6d:3d:47:74:b0:03:41:5f:4b:
         8c:0d:fe:3b:22:c2:9b:9f:90:d2:08:89:8a:5e:e1:c3:16:b1:
         ae:e0:f8:34:7b:17:36:ee:35:60:73:ad:bd:e4:6f:fe:24:1e:
         57:6a:d0:ee:0f:80:30:bd:b8:39:4e:c3:28:0a:45:c5:e7:6b:
         64:49:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:05:27 2025 by rpki-client