Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa
File:                     3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          JyTM3xTLdsTe5v0MBuLaZ+cvITqsoMfTTPhXDQOnasY=
Subject key identifier:   81:BF:E8:7B:AA:65:C9:49:88:E4:84:82:E9:D5:EB:BC:C4:2A:A3:E7
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       638EDFB6D7D487D9652E7A878579BDEEC2714F4F
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:15:28 +0000
ROA not before:           Tue 27 May 2025 19:10:28 +0000
ROA not after:            Tue 26 May 2026 19:15:28 +0000
asID:                     264485
IP address blocks:        131.255.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8e:df:b6:d7:d4:87:d9:65:2e:7a:87:85:79:bd:ee:c2:71:4f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:10:28 2025 GMT
            Not After : May 26 19:15:28 2026 GMT
        Subject: CN=81BFE87BAA65C94988E48482E9D5EBBCC42AA3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:36:46:7a:1a:62:84:1a:8f:83:1e:8d:2c:
                    ad:66:71:3c:4c:91:2a:db:c2:a2:b3:cd:f3:20:72:
                    9d:04:e8:e0:4c:30:2b:84:d5:6f:0c:da:13:4c:c2:
                    52:aa:ab:c8:66:77:63:70:de:5a:00:62:71:75:37:
                    9e:1c:f0:af:dd:fb:48:ba:c7:12:34:b9:e0:5b:4c:
                    5e:5d:d8:d0:db:57:3a:96:60:08:c6:75:68:f3:d5:
                    89:70:c1:ac:07:ec:05:a1:c1:68:ce:dc:4c:ac:af:
                    8b:c3:28:f4:6f:ea:aa:76:4a:af:73:72:d3:3d:3e:
                    c6:27:5e:19:07:ee:3e:5d:27:86:5b:bf:5f:22:94:
                    69:33:73:17:23:c8:f7:b9:6e:81:d0:37:52:9e:cb:
                    20:61:53:24:6d:ed:c9:91:19:d8:e1:a5:83:b2:f5:
                    27:aa:3d:10:8a:2d:13:5c:44:0a:63:fd:06:a1:6a:
                    1d:9b:65:fa:dd:d8:d4:ee:d1:bd:0b:80:40:73:fd:
                    aa:1d:04:d5:3c:be:23:0f:16:b8:5e:fc:d1:98:a4:
                    dc:0d:d8:a5:89:c0:a4:e8:48:d9:a6:52:0e:f2:d6:
                    05:9f:8f:84:8b:a6:b0:a9:54:dd:2c:f8:de:b9:93:
                    c6:6f:0d:b4:1b:50:02:c0:be:99:94:bf:cf:97:43:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:E8:7B:AA:65:C9:49:88:E4:84:82:E9:D5:EB:BC:C4:2A:A3:E7
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134342e302f32322d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:0e:11:3f:bd:39:41:ca:e7:64:fd:85:c3:95:0f:af:cf:49:
         34:76:a2:95:a3:00:1f:22:28:29:3f:96:ae:c0:ad:eb:9f:f1:
         36:e1:06:08:fb:8d:a4:d6:46:2a:35:74:ae:cd:b3:b0:32:bb:
         4a:00:8d:17:47:26:e3:16:a9:85:ce:3b:09:b2:09:59:8a:49:
         b7:fd:05:86:d4:65:d7:7f:38:96:2c:c3:de:f1:26:f9:b3:4b:
         4b:d8:87:56:3d:9e:14:9a:02:ce:64:31:34:07:cd:ef:52:81:
         e0:16:08:b4:33:71:80:5d:ab:ad:26:8e:30:74:57:f9:48:fc:
         d6:05:7d:5b:0a:81:18:91:be:31:0c:d0:ec:4f:fb:18:92:e5:
         db:fa:54:26:8f:df:06:7e:50:03:15:64:7a:a6:e1:b4:31:f0:
         f6:c3:2d:d0:46:99:bb:aa:a6:82:d4:6e:ac:b0:e8:1f:f2:d0:
         e0:9d:d1:d9:a6:cf:73:7d:73:3e:4b:bb:f0:e4:af:54:f1:7c:
         68:bf:eb:31:3a:d6:74:f5:cc:7c:d5:fe:7d:a8:ac:15:00:5f:
         7e:74:9e:ba:a8:cf:c2:48:aa:26:ff:2e:a1:60:96:a3:cd:b5:
         79:9b:2e:59:89:9b:72:ab:ed:83:3d:ea:da:71:52:95:78:04:
         b3:d5:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:20:07 2025 by rpki-client