Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35392e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          vxjeQ+GZehNHUyb5yiibX6M1WWYIazlhdcC5IwamGpM=
Subject key identifier:   3E:88:B0:31:76:2E:CE:45:66:97:ED:76:28:31:D3:72:C8:3A:12:DF
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       2113DC2210486318BADEF1C245E2C301D7578896
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 17 Apr 2025 22:00:00 +0000
ROA not before:           Thu 17 Apr 2025 21:55:00 +0000
ROA not after:            Thu 16 Apr 2026 22:00:00 +0000
asID:                     61728
IP address blocks:        131.72.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:dc:22:10:48:63:18:ba:de:f1:c2:45:e2:c3:01:d7:57:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: Apr 17 21:55:00 2025 GMT
            Not After : Apr 16 22:00:00 2026 GMT
        Subject: CN=3E88B031762ECE456697ED762831D372C83A12DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:bd:e1:94:95:50:03:d8:b1:28:84:fc:52:
                    25:c6:65:c0:e0:67:1d:17:07:a4:6f:8b:10:07:ff:
                    56:c0:5a:f8:31:a6:15:0d:5e:d2:01:e9:98:eb:9c:
                    cd:bc:31:aa:ed:d7:28:7e:00:fd:0e:63:b4:e3:42:
                    52:39:36:0b:7d:78:41:22:06:6f:42:d5:78:f5:96:
                    90:21:ce:a1:aa:8d:eb:f3:a9:b8:cc:fb:fc:14:de:
                    c9:90:b8:0e:f5:a7:e2:c8:a5:61:a0:e8:25:f0:c1:
                    88:7e:fd:de:59:c5:e2:a8:41:5b:22:fb:38:65:43:
                    ed:ab:0e:68:eb:ea:a5:10:8d:77:20:11:d1:66:b6:
                    86:ca:bd:86:e8:6a:57:90:5d:5f:66:4b:73:71:2d:
                    42:8b:7b:26:b9:fd:7e:e9:a8:fa:6f:7a:8c:28:38:
                    4d:0a:06:bc:d2:d9:9c:4a:d1:92:80:51:77:3c:27:
                    ab:46:f8:1e:e2:2f:01:f4:33:7d:c9:6d:77:66:ac:
                    29:dc:be:0e:2a:71:03:c4:7b:3b:15:2a:8c:01:c7:
                    9c:c6:a0:a2:1f:ae:bf:77:e0:fe:63:0b:8e:f6:52:
                    99:29:53:3b:d9:a5:0c:1d:ec:56:23:5b:64:7a:9f:
                    21:65:3b:19:58:0a:d2:90:09:db:77:f2:02:dc:67:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:B0:31:76:2E:CE:45:66:97:ED:76:28:31:D3:72:C8:3A:12:DF
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35392e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:a9:5e:64:ae:bb:34:f7:5d:c3:7d:14:7c:54:cf:e0:8e:
         07:a0:8d:74:51:7b:44:e7:05:5b:5d:66:fd:67:a7:c7:bc:41:
         8a:32:3d:9d:c9:e3:53:16:14:be:3f:f6:ab:c6:b2:bc:76:51:
         56:1d:6e:ef:15:ed:73:50:94:07:56:d5:55:48:0b:df:62:a2:
         58:06:34:e0:a2:08:88:6a:31:74:db:14:86:b3:6f:18:09:61:
         d8:ec:37:ce:c0:27:ed:1c:ad:bc:46:e7:0f:73:92:cf:3b:e9:
         8e:f6:52:f8:61:bd:ea:bd:87:f7:58:6c:79:cb:5c:a1:f2:ea:
         71:37:1e:59:16:68:c2:fb:4b:d0:27:d4:2c:ef:7b:29:f5:1f:
         44:20:5f:8f:4e:ef:20:b3:bd:2b:72:13:2d:ba:6e:26:62:5f:
         4d:e3:a2:72:0f:23:ba:27:14:65:c8:f4:c6:d3:6f:55:04:bd:
         bc:f7:e9:c4:cf:13:79:93:87:b7:83:2d:28:54:cc:ca:ff:09:
         7f:31:97:1a:a3:1f:2f:18:a5:69:5f:fd:84:18:df:85:56:0e:
         6f:61:51:d8:33:3a:62:8c:00:6e:bb:66:cb:14:40:aa:9e:3e:
         a7:bb:04:4f:a8:23:a1:07:d5:9b:dc:f1:6b:08:dd:6a:6e:fc:
         d2:5e:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:54:16 2025 by rpki-client