Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa
File:                     3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          NBtojmF/Hxu2LucsIyIgWmwVSapjv+byUAHP9tkVNJo=
Subject key identifier:   4B:04:AB:80:D1:1C:FF:71:88:5F:2B:30:86:B8:C2:32:16:00:C7:04
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       3A7205E7C1BF71B89210424537D6FCBCE9F9CF35
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:07 +0000
ROA not before:           Thu 06 Mar 2025 04:25:07 +0000
ROA not after:            Thu 05 Mar 2026 04:30:07 +0000
asID:                     22177
IP address blocks:        131.100.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:72:05:e7:c1:bf:71:b8:92:10:42:45:37:d6:fc:bc:e9:f9:cf:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:07 2025 GMT
            Not After : Mar  5 04:30:07 2026 GMT
        Subject: CN=4B04AB80D11CFF71885F2B3086B8C2321600C704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:ee:34:1e:3b:5a:16:6a:7a:ef:f8:3f:0f:
                    e8:31:bd:45:cf:1f:26:2f:3f:46:c4:a4:8e:ad:4f:
                    a8:4a:61:6c:e6:30:35:14:b0:78:f5:3d:87:fa:d2:
                    4e:7b:bf:9a:6d:59:38:d6:04:9c:7a:31:f0:05:5b:
                    fd:fb:f6:a1:34:4d:ad:7f:b1:3a:63:63:62:97:19:
                    2d:9f:79:78:eb:e0:b8:26:3c:17:22:0f:8d:13:63:
                    e4:03:8b:c4:d9:b9:bb:a3:db:af:56:63:96:d9:ec:
                    75:34:99:de:8b:fc:ce:ca:3c:3c:8b:30:37:2d:fd:
                    c8:2c:33:bc:b9:b2:9e:95:86:21:3b:86:27:7c:80:
                    48:9d:6e:48:ae:d7:c7:79:91:83:4b:93:33:c5:fc:
                    ad:c0:59:6a:eb:86:15:0c:c6:09:1c:df:a1:d0:17:
                    92:27:a1:6a:6c:0c:49:00:a3:d2:1c:6e:ab:74:7e:
                    d5:b7:8e:e2:ba:fc:b8:26:2f:a0:c9:9a:e1:94:42:
                    74:fe:d8:ab:d7:1f:bc:69:98:82:10:35:67:da:bf:
                    81:9d:7b:f9:50:c4:89:99:be:d0:0c:ca:e9:33:fd:
                    66:1c:d9:d8:41:3e:ce:83:4d:55:40:5f:b8:4b:dd:
                    30:7e:fa:a7:63:fc:87:80:a5:8d:bd:a6:28:f0:40:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:AB:80:D1:1C:FF:71:88:5F:2B:30:86:B8:C2:32:16:00:C7:04
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:63:59:aa:af:90:d9:46:93:83:94:0e:e0:8c:4a:ef:ca:77:
         8b:66:4a:44:d4:65:82:13:89:9d:9a:6b:d9:ef:fb:ce:ad:07:
         6b:50:f1:f8:5d:e8:4b:ac:61:4b:2d:15:68:ac:d9:9a:9f:7c:
         c1:cf:06:b1:75:8d:82:b8:9e:df:ed:3f:45:4e:b1:c3:70:3e:
         92:3c:47:a4:55:e6:3c:51:b2:af:4d:64:9d:7d:f3:95:22:2d:
         cf:ad:85:7d:66:dd:cc:ef:bc:eb:0e:09:3e:40:ce:f3:ed:85:
         a9:54:2c:4d:9c:49:cf:00:a4:a4:11:fe:1d:33:be:87:e5:6e:
         f5:1c:1b:fb:74:aa:71:1f:8f:14:a3:bb:74:79:95:d7:43:32:
         57:01:01:cc:66:1f:93:d9:ea:96:7c:ea:0c:2a:2c:d2:68:82:
         68:bb:e3:14:74:fc:fc:97:25:8f:7c:4d:62:2b:15:b5:ce:4f:
         e3:e4:d4:63:0e:24:7c:c6:bf:e1:f8:86:fa:6f:59:2a:28:f1:
         c7:63:bc:1f:b5:2c:56:5b:7c:62:fb:d1:9e:53:a6:bb:b6:46:
         e4:fe:d3:ba:6f:04:c4:55:7e:8b:49:bc:49:94:ab:10:b7:26:
         bb:43:21:20:3d:12:d1:c3:0a:d9:16:00:97:7a:bb:ce:8b:dd:
         00:10:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:08:47 2025 by rpki-client