Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35362e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          /K5F51UKOZFz4si4z+uc5Hhr8t3lmD+NyhcZ8DaeKio=
Subject key identifier:   22:28:1A:28:19:1A:E5:4F:99:17:F7:32:22:D7:37:77:44:9D:71:1F
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       0EA333DC785BB6B4E75D22FF2F83E477DD90EE87
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 17 Apr 2025 22:00:01 +0000
ROA not before:           Thu 17 Apr 2025 21:55:01 +0000
ROA not after:            Thu 16 Apr 2026 22:00:01 +0000
asID:                     61728
IP address blocks:        131.72.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:33:dc:78:5b:b6:b4:e7:5d:22:ff:2f:83:e4:77:dd:90:ee:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: Apr 17 21:55:01 2025 GMT
            Not After : Apr 16 22:00:01 2026 GMT
        Subject: CN=22281A28191AE54F9917F73222D73777449D711F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:51:d2:09:ae:1e:58:7c:d4:97:ef:0e:39:
                    6d:c9:ec:4c:e0:1a:64:5c:2e:16:68:ca:16:3a:e1:
                    6b:57:31:42:e8:c7:e6:91:08:ae:87:0f:03:9e:12:
                    91:5e:85:5b:f3:3f:d4:04:87:9b:47:ac:ac:9d:d2:
                    25:dc:54:8a:1c:6d:a9:74:80:cb:75:a4:4c:80:e8:
                    ca:e4:2c:11:bc:82:4c:19:92:4b:7a:86:15:19:4c:
                    a2:84:56:04:05:58:50:0e:16:28:48:2e:9b:76:72:
                    8d:b0:a7:54:e2:4f:77:5b:16:fd:a8:5b:0f:66:29:
                    c1:20:3c:1c:71:14:52:72:e4:24:6b:a4:0a:08:8b:
                    3b:fd:76:63:c1:5d:ad:bb:b5:42:3f:4c:20:fc:bd:
                    33:15:ef:16:58:c9:8b:fc:50:52:03:40:39:05:ba:
                    f4:7a:b5:86:90:ef:3e:44:b2:65:34:26:15:06:ed:
                    57:16:3a:8f:a3:2d:7a:0b:e1:97:fe:c8:f8:09:6e:
                    3a:c9:6a:01:f5:60:33:2a:aa:52:26:30:47:25:b9:
                    bd:97:be:67:73:ec:36:3f:a0:60:39:37:3d:bb:e1:
                    65:3b:0c:1f:54:de:3e:f4:33:c8:44:dd:02:4f:9a:
                    e7:18:01:6c:01:02:41:db:cf:60:25:da:61:b2:e4:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:28:1A:28:19:1A:E5:4F:99:17:F7:32:22:D7:37:77:44:9D:71:1F
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:87:9b:ff:7a:6c:e6:eb:7e:0c:cf:a1:d2:d6:45:f3:ab:
         3d:6a:41:e2:37:a4:8b:68:c8:f2:5b:fb:65:22:35:a3:2f:d5:
         41:fe:ec:ef:79:be:5b:17:b8:bf:0b:a3:06:77:fe:9a:38:be:
         6d:11:03:33:b8:3d:d8:73:bf:a2:95:0d:26:d3:07:cc:65:0d:
         2f:1c:a0:4a:80:5e:7b:db:26:f0:8e:15:d1:58:db:47:9b:37:
         3a:f4:66:f2:61:8e:a1:83:9d:fa:c7:25:4f:cb:21:cf:2a:8f:
         61:af:54:19:38:de:f0:0d:d3:98:35:85:43:f1:6d:fd:5a:fe:
         43:9e:73:f8:03:05:61:4e:25:19:c5:ce:3c:eb:3e:49:37:2e:
         cd:ea:c6:a7:9f:9c:8a:9c:09:66:c3:4b:ea:73:a3:05:51:0f:
         67:8e:33:93:c4:21:7b:08:23:08:a1:f8:41:b7:c4:99:29:59:
         05:ac:3f:d5:db:80:06:87:e6:ff:22:22:c2:ad:29:56:27:8f:
         60:f0:b3:eb:80:cc:76:73:38:3b:b0:10:04:23:16:3b:ea:86:
         f6:18:e3:21:ba:46:7b:83:2e:6f:05:c6:92:85:11:a0:8f:8f:
         86:41:09:82:4e:b8:5f:97:2d:6f:76:5b:7c:00:e3:49:d1:91:
         89:77:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:29 2025 by rpki-client