Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          mzLtq1JCPuHrIeQ9q9qOTQjafE/z/+yhvDd++fksUgU=
Subject key identifier:   AD:62:D9:2C:6C:4E:CE:3D:18:7B:23:1A:EF:2C:A9:58:00:83:4C:01
Certificate issuer:       /CN=98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7
Certificate serial:       52CE1017F689D1AEB617F905FC2A3F717D9F30CF
Authority key identifier: 98:B1:F9:F2:FC:04:61:84:27:83:D5:FB:F3:C8:25:AD:1E:8C:20:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time:             Mon 17 Feb 2025 13:40:36 +0000
ROA not before:           Mon 17 Feb 2025 13:35:36 +0000
ROA not after:            Mon 16 Feb 2026 13:40:36 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 13:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:10:17:f6:89:d1:ae:b6:17:f9:05:fc:2a:3f:71:7d:9f:30:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7
        Validity
            Not Before: Feb 17 13:35:36 2025 GMT
            Not After : Feb 16 13:40:36 2026 GMT
        Subject: CN=AD62D92C6C4ECE3D187B231AEF2CA95800834C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:d6:c3:64:28:8c:94:07:79:ac:c6:f9:22:
                    47:45:45:07:24:60:b6:0f:79:28:9d:fa:08:b2:28:
                    df:08:19:76:ff:d3:93:f2:bc:9b:e0:74:f3:84:4f:
                    e2:86:0a:bc:ef:25:6f:81:3b:53:25:a5:e3:6f:b8:
                    70:ed:cb:32:15:40:cf:7e:04:5e:69:b9:bd:51:7a:
                    e2:85:d0:12:87:bd:98:51:0f:0b:48:9c:29:bc:5d:
                    02:1c:13:2e:7c:06:0a:7f:01:65:c4:18:3e:39:d5:
                    ae:e6:21:16:68:f7:29:57:e2:17:c2:87:8f:1a:17:
                    54:33:a5:28:f2:de:05:de:99:f3:23:80:cd:84:09:
                    b5:8c:a9:2e:c0:bb:f8:66:f8:40:88:b7:a9:66:4b:
                    36:9b:ad:39:f5:1d:df:3b:ad:d0:ad:11:7f:14:9d:
                    00:a2:23:6f:19:2e:f5:05:bf:c1:55:ad:db:d6:83:
                    d5:67:6f:16:64:01:d7:79:ba:3e:51:09:01:35:db:
                    a0:c2:2d:95:ff:e7:55:45:00:a8:cf:b0:67:29:72:
                    3e:ac:38:7d:57:64:00:57:85:29:9f:a1:f4:3c:e2:
                    1e:8c:8c:dc:83:bd:5a:39:c4:af:b5:51:83:07:bc:
                    75:f9:8f:84:b6:dd:3e:b7:15:57:b4:47:e4:0a:ea:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:D9:2C:6C:4E:CE:3D:18:7B:23:1A:EF:2C:A9:58:00:83:4C:01
            X509v3 Authority Key Identifier:
                keyid:98:B1:F9:F2:FC:04:61:84:27:83:D5:FB:F3:C8:25:AD:1E:8C:20:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98B1F9F2FC0461842783D5FBF3C825AD1E8C20A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:83:53:cc:92:ad:26:a7:46:df:da:9f:15:a9:a7:6c:f2:09:
         78:d5:74:bc:4b:90:a5:0f:99:50:c3:77:c5:e8:90:5e:82:0b:
         dd:be:c8:42:de:2d:8a:6e:09:91:80:d4:b6:d7:93:c3:ef:f8:
         d6:66:e5:a0:cf:dc:b3:3a:2f:14:f1:86:98:14:a9:ed:14:b1:
         29:6b:ca:98:3a:c7:24:d4:1f:df:56:ec:d2:4a:ea:74:8b:37:
         b9:c8:d3:6d:ac:8f:32:bd:44:70:ae:96:13:73:9f:45:ae:a4:
         2c:30:68:03:85:3c:43:e6:83:2c:0b:09:d4:d6:03:22:ec:e9:
         c9:70:62:8a:27:4f:65:ab:f3:8b:ba:0a:83:b3:10:5f:eb:10:
         36:e0:c4:b9:5e:7b:a6:94:16:03:5b:db:c1:ab:af:19:d2:56:
         a1:7d:99:a0:2e:3d:3e:bd:11:bc:68:20:c4:50:f8:46:46:1e:
         e8:1e:09:2e:d1:8e:01:2d:f8:03:30:da:06:37:db:ac:32:58:
         75:a7:35:ed:62:ac:3e:ee:3e:b6:ca:22:32:54:89:24:3a:56:
         48:b6:ea:25:5d:e1:c6:c1:12:3d:20:68:ba:25:db:63:4c:58:
         10:7c:ee:5c:b7:1c:c1:8d:b0:52:dc:98:22:53:0c:c8:45:1b:
         2d:17:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:42:23 2025 by rpki-client