Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa
File:                     3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          jXXWdNIT6HYmZGncS306hCX/rvk1MZEkZf5t+KOx928=
Subject key identifier:   0C:73:08:44:E5:33:9C:8A:F9:04:1B:33:EC:F7:BD:CB:10:93:4E:ED
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       578A9213EE267D052F4443FBB0DE456FB3460B9C
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa
Signing time:             Thu 06 Mar 2025 09:19:44 +0000
ROA not before:           Thu 06 Mar 2025 09:14:44 +0000
ROA not after:            Thu 05 Mar 2026 09:19:44 +0000
asID:                     262323
IP address blocks:        131.100.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8a:92:13:ee:26:7d:05:2f:44:43:fb:b0:de:45:6f:b3:46:0b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Mar  6 09:14:44 2025 GMT
            Not After : Mar  5 09:19:44 2026 GMT
        Subject: CN=0C730844E5339C8AF9041B33ECF7BDCB10934EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3e:2a:4f:20:6a:42:81:6b:59:82:bd:07:89:
                    2e:2b:e9:e4:55:bd:b8:22:07:d8:9c:cc:8b:0a:c5:
                    aa:00:ba:e9:30:b6:5f:c6:a9:b3:05:34:c7:48:36:
                    a3:f0:4a:17:f4:2c:9a:f3:04:75:53:51:cd:7a:3c:
                    37:e4:2c:75:36:a2:6d:9b:bc:fa:30:f2:c7:2b:be:
                    a8:91:62:68:51:7f:c7:fb:3b:89:5e:ea:0d:e5:2c:
                    6c:e7:b7:c5:07:92:f0:54:47:4c:da:fa:65:42:d6:
                    c9:f4:c5:5e:4c:2b:e6:e4:4e:f3:08:0b:67:cf:78:
                    2a:12:86:88:e7:d8:03:03:64:8d:97:03:47:91:72:
                    d4:0a:d8:c7:c9:7e:ee:ba:8b:55:57:75:d7:da:8f:
                    ea:d2:d1:9b:c6:18:3a:a2:ef:df:86:76:11:4a:97:
                    1d:04:65:f8:ac:f4:82:4d:0d:db:a3:99:ff:4b:4d:
                    af:57:7d:07:b4:fd:6f:17:60:4a:f6:58:48:f1:20:
                    4d:66:c9:43:2a:59:22:6f:d2:49:90:05:f7:0f:d0:
                    ca:2b:aa:35:b1:8d:7d:73:73:4e:42:f6:fb:25:08:
                    d8:34:13:b9:70:31:01:61:84:f8:5e:c6:b9:56:4e:
                    bd:ba:73:7b:c8:b5:83:8e:11:18:f5:70:cb:fd:ee:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:73:08:44:E5:33:9C:8A:F9:04:1B:33:EC:F7:BD:CB:10:93:4E:ED
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133312e3130302e35362e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:d3:a6:c7:f8:1b:02:0b:d7:75:19:8b:f9:9a:0d:fa:bc:
         00:1a:be:ba:51:ae:06:05:b4:4f:81:13:8a:69:e8:cd:5c:93:
         56:74:ff:c6:8c:50:e2:26:43:ee:58:b3:72:e6:8f:f1:9d:80:
         2f:ff:af:45:38:f6:09:58:b4:de:a5:4c:aa:99:8d:37:f5:e2:
         6a:b8:b8:86:5f:8e:bc:44:22:27:2b:75:65:2e:d4:b5:2e:4c:
         3f:4d:59:1d:00:65:22:86:53:85:b0:f6:6c:28:a0:08:94:7a:
         05:9a:9d:9c:17:b7:3b:fc:ec:2b:10:fd:37:c4:67:75:5c:c4:
         aa:1e:e1:18:f7:c5:6c:fa:3f:80:23:45:4f:7a:38:d2:c6:ef:
         2b:10:1d:7e:4b:06:af:00:4e:34:e8:72:ea:af:c4:95:93:39:
         88:6b:2b:97:76:dd:b1:3a:b0:1d:f6:23:e9:c9:e2:dc:5a:5b:
         a8:bf:7a:2a:db:c2:6d:7b:c3:04:da:e9:64:5f:40:f7:c1:1c:
         90:03:cc:c7:d2:7e:d3:83:af:bc:39:55:9b:6f:a6:c5:2a:aa:
         ef:a6:22:f4:5b:57:06:64:e2:4c:e8:01:65:dc:ee:4e:02:9c:
         2e:6e:c7:e3:69:41:a9:4c:9d:18:82:a6:d2:ef:2b:a1:d4:0b:
         c1:fd:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:14:40 2025 by rpki-client