Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3133312e302e3132302e302f32322d3234203d3e20323632373434.roa
File:                     3133312e302e3132302e302f32322d3234203d3e20323632373434.roa (raw, json)
Hash identifier:          lRaxssTjwsADx0tTLomOkPqh36dZ9G3pNVR/TiTkChM=
Subject key identifier:   E4:4B:02:B2:51:6C:47:03:99:9B:F5:E3:2E:BE:21:08:4F:DF:06:C9
Certificate issuer:       /CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
Certificate serial:       48C00C46EB4B6D62DAB31790D13D2B1F9DC69020
Authority key identifier: 1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3133312e302e3132302e302f32322d3234203d3e20323632373434.roa
Signing time:             Mon 10 Mar 2025 20:46:18 +0000
ROA not before:           Mon 10 Mar 2025 20:41:18 +0000
ROA not after:            Mon 09 Mar 2026 20:46:18 +0000
asID:                     262744
IP address blocks:        131.0.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl
                          rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:0c:46:eb:4b:6d:62:da:b3:17:90:d1:3d:2b:1f:9d:c6:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
        Validity
            Not Before: Mar 10 20:41:18 2025 GMT
            Not After : Mar  9 20:46:18 2026 GMT
        Subject: CN=E44B02B2516C4703999BF5E32EBE21084FDF06C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:9f:20:d0:6a:8e:22:ad:ab:24:67:7d:b9:
                    ab:ae:9d:64:96:52:71:80:58:54:66:4e:d5:de:e9:
                    53:46:b6:77:3b:d0:2a:48:3c:0c:dd:81:96:13:bf:
                    d4:da:e0:72:be:5a:f1:48:50:69:12:63:82:28:0a:
                    bd:a8:9f:a4:1f:ec:1e:3e:a1:13:25:6e:55:f6:81:
                    e3:b5:80:20:fd:7c:74:ac:95:b9:88:81:4f:33:fa:
                    21:fa:d9:ef:d7:5f:dc:75:31:6f:65:41:41:02:36:
                    49:6b:a1:a1:09:bf:d1:91:32:cb:7e:7c:dd:d6:fd:
                    5d:72:50:7f:4c:78:bd:6e:0e:57:4d:62:07:eb:fd:
                    f9:cf:53:9b:6a:85:8c:80:ef:68:8b:d2:1d:27:21:
                    cf:fc:f7:0c:f0:a3:f6:13:a5:7d:18:e2:af:48:2e:
                    67:e0:2f:68:b2:69:59:62:9d:1e:76:93:89:c5:3a:
                    9a:4c:2c:90:95:ca:dc:99:91:e9:60:fe:d4:ba:4f:
                    04:5b:04:34:d1:59:0a:be:7e:30:ce:5d:56:e6:ba:
                    17:f6:be:98:78:65:13:ea:80:76:51:5e:75:e6:35:
                    ad:8f:5b:ab:69:92:c4:15:f5:b5:fb:d4:bf:41:1e:
                    e2:b7:7a:e0:6b:8c:87:2b:ce:d9:9f:cc:d8:4e:46:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:02:B2:51:6C:47:03:99:9B:F5:E3:2E:BE:21:08:4F:DF:06:C9
            X509v3 Authority Key Identifier:
                keyid:1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3133312e302e3132302e302f32322d3234203d3e20323632373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:bc:68:60:86:6e:b6:17:86:1c:22:77:46:b5:89:5d:c8:
         ac:96:93:9e:ab:32:ac:80:96:7e:da:01:59:90:8a:32:3f:8f:
         35:c6:fc:55:a4:44:df:a7:45:06:af:eb:61:9f:ff:76:ed:78:
         93:44:10:99:0c:0a:a9:7c:c0:38:26:8d:7b:72:d6:b9:14:e2:
         c8:26:2f:31:f6:09:3b:54:20:6e:76:0a:a8:6f:66:c5:65:88:
         99:7b:83:d7:a1:36:d8:5a:ac:8c:f1:e1:66:f9:4c:fe:b3:5b:
         f5:ae:63:e2:02:e1:29:b2:c8:cf:3b:b9:77:b2:c4:05:f0:41:
         0f:ac:56:18:1a:83:a9:0a:dc:14:06:31:81:d5:45:20:9a:7e:
         1d:8d:73:44:a3:1b:c4:7f:f2:0b:0c:22:d2:fc:93:b1:ba:e7:
         17:11:b9:d2:9a:61:e6:82:4e:ef:22:1b:62:cf:c1:c7:69:63:
         98:5e:1b:d7:f5:29:9c:2b:9c:a1:67:ae:e3:cd:d5:38:56:07:
         c8:61:47:96:b3:65:46:8c:7e:44:47:d4:9d:36:a3:b5:3a:2d:
         0a:98:c7:97:b5:20:a6:c5:ff:e5:bf:f5:f6:84:53:09:87:80:
         9b:50:3f:e5:d6:0a:da:89:ac:b4:b4:78:e4:d8:cc:09:19:79:
         c0:d5:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:37:20 2025 by rpki-client