Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/3133312e3235352e3138342e302f32322d3332203d3e20323634343932.roa
File:                     3133312e3235352e3138342e302f32322d3332203d3e20323634343932.roa (raw, json)
Hash identifier:          FWYJErsOG35LZVtu+5DTAIA++5LUUa7pyJvjMn+p2+I=
Subject key identifier:   81:DA:C6:93:B4:C8:9B:64:57:F9:25:44:DA:22:E7:3E:62:67:91:EF
Certificate issuer:       /CN=258DCD12D49ACC6C188C511F71E74D6E692B16BD
Certificate serial:       36E58B9FDA2223DB79C02B1AB5EE58B63CF5ADE7
Authority key identifier: 25:8D:CD:12:D4:9A:CC:6C:18:8C:51:1F:71:E7:4D:6E:69:2B:16:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/3133312e3235352e3138342e302f32322d3332203d3e20323634343932.roa
Signing time:             Thu 06 Mar 2025 07:12:15 +0000
ROA not before:           Thu 06 Mar 2025 07:07:15 +0000
ROA not after:            Thu 05 Mar 2026 07:12:15 +0000
asID:                     264492
IP address blocks:        131.255.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.crl
                          rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e5:8b:9f:da:22:23:db:79:c0:2b:1a:b5:ee:58:b6:3c:f5:ad:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258DCD12D49ACC6C188C511F71E74D6E692B16BD
        Validity
            Not Before: Mar  6 07:07:15 2025 GMT
            Not After : Mar  5 07:12:15 2026 GMT
        Subject: CN=81DAC693B4C89B6457F92544DA22E73E626791EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:9d:6b:4c:59:a6:88:19:d6:eb:4e:22:62:
                    f3:c6:e0:2c:2b:05:23:3d:12:80:54:66:b7:b2:5d:
                    df:c1:09:d8:b4:4a:e1:b3:7d:a5:dd:65:53:3d:ab:
                    f4:72:eb:a4:27:70:0f:ea:52:09:c3:2f:b3:a3:e4:
                    a0:03:07:69:15:1c:85:2c:56:64:d4:97:12:be:29:
                    25:eb:74:4e:89:87:27:ea:4d:d2:21:e3:bd:84:49:
                    03:7e:cb:67:b4:e3:5a:62:e5:8d:d5:65:fc:f7:d5:
                    58:4a:c0:ac:fe:10:f3:3f:20:dd:fd:83:5b:d4:2d:
                    b6:6c:50:80:dd:90:9f:8f:51:75:b2:0f:89:48:a3:
                    52:18:9a:8f:69:e9:ff:03:32:23:4a:ea:d2:a1:25:
                    2f:49:fc:b7:ef:c2:11:c3:dd:2f:1b:51:64:78:14:
                    5e:60:b6:71:ca:ad:3e:d4:c5:53:6f:b1:17:b7:fd:
                    e4:21:6c:09:b9:f6:71:c0:79:3b:a2:7b:76:58:7a:
                    9a:f9:73:2a:b7:76:0d:3a:54:5a:dc:ce:19:7a:ed:
                    62:60:39:fe:dc:99:c4:d3:3a:5e:74:f5:20:80:98:
                    b6:2a:80:ec:26:16:85:e6:ac:d0:cc:9e:cd:6a:c7:
                    fa:fe:2e:c1:48:d2:b8:49:14:bd:fc:27:10:43:ff:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DA:C6:93:B4:C8:9B:64:57:F9:25:44:DA:22:E7:3E:62:67:91:EF
            X509v3 Authority Key Identifier:
                keyid:25:8D:CD:12:D4:9A:CC:6C:18:8C:51:1F:71:E7:4D:6E:69:2B:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/3133312e3235352e3138342e302f32322d3332203d3e20323634343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:ef:ca:5f:fb:7b:7f:d5:93:71:6f:e3:7b:02:7d:5f:29:
         77:d1:e1:00:5e:05:61:f9:74:ab:5f:35:d6:74:cd:98:87:cf:
         0b:45:97:da:5d:fb:6d:2e:29:23:97:d2:ab:f4:c8:12:48:c9:
         da:e3:35:65:3e:33:0a:99:2b:c7:a4:7b:42:87:5a:fb:6b:32:
         7d:6d:db:06:7b:09:85:3a:73:19:e6:e4:2c:91:55:23:f4:78:
         d8:fa:c2:5e:3b:c8:56:39:54:c1:0b:3d:8f:79:e9:a0:97:21:
         e8:9e:34:df:7d:5c:e2:69:a8:4a:e2:ae:1a:96:aa:42:9f:39:
         ff:d9:67:ca:4a:5e:d1:60:85:aa:3c:94:3d:0c:52:dc:dc:5e:
         76:5e:43:c8:dd:41:b0:ba:5e:b0:a2:c6:b9:d9:f0:99:56:f2:
         c2:1a:df:59:d5:81:35:83:13:0f:4d:30:15:7b:99:29:cd:44:
         fc:9f:91:2f:a3:53:8e:6a:5c:05:12:6d:16:53:c6:4a:64:97:
         54:a2:13:7e:32:f7:1b:8d:28:bc:a3:4a:76:73:63:a7:aa:18:
         1b:a1:23:ec:97:0a:ab:a5:fe:6f:ce:8f:80:6b:01:0b:1a:0a:
         0f:e6:26:c1:dd:8b:18:32:58:e7:c0:62:8d:9c:3e:0e:fd:ad:
         59:1f:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:02:55 2025 by rpki-client