Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
File:                     3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          uU+/csjT2NVQbIjnMFhPC8+dLWEEVAp/0FwA71AGAfg=
Subject key identifier:   CF:8B:D6:6F:D1:8E:EA:6A:81:25:82:97:12:A6:4F:A6:C3:81:99:1B
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       0F5F10D5B8EA72DA3966A4296B013C9E59CA9BFE
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 15 May 2025 13:09:10 +0000
ROA not before:           Thu 15 May 2025 13:04:10 +0000
ROA not after:            Thu 14 May 2026 13:09:10 +0000
asID:                     271253
IP address blocks:        131.255.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 23:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5f:10:d5:b8:ea:72:da:39:66:a4:29:6b:01:3c:9e:59:ca:9b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: May 15 13:04:10 2025 GMT
            Not After : May 14 13:09:10 2026 GMT
        Subject: CN=CF8BD66FD18EEA6A8125829712A64FA6C381991B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:51:fd:85:40:3f:37:39:8d:2c:16:d9:d3:
                    7d:28:a2:45:12:66:05:06:44:f7:50:5c:13:e6:7c:
                    ce:bd:05:7f:db:b7:c8:f4:0b:a6:f6:df:29:83:c1:
                    75:a7:7d:fb:75:0e:f5:17:ed:f8:57:4e:34:75:28:
                    f8:43:58:d6:b9:cc:e2:d0:05:01:6f:a6:6a:c9:62:
                    8d:7c:e0:93:25:d7:98:93:97:6e:9e:44:d7:2b:a0:
                    9f:21:d4:a9:52:50:10:e1:34:b9:48:55:b9:b1:a0:
                    80:88:c2:2b:57:63:d2:82:a8:e0:fa:61:f4:33:9b:
                    cc:9c:ad:6b:dd:1f:85:0f:6b:be:e0:0a:f4:c1:f6:
                    22:26:94:34:e7:95:ac:1f:84:9b:ce:3e:71:6f:6e:
                    c8:97:80:43:8d:ff:42:72:d7:c6:91:49:8c:bd:a6:
                    7d:fb:1a:5f:f2:69:1f:95:c3:a1:3c:d1:f8:c4:7e:
                    7c:a1:bf:a7:52:0e:23:9d:61:16:e2:bd:ef:7b:d1:
                    ea:14:74:86:f7:b4:d2:0e:9c:9c:73:fc:64:62:ab:
                    e5:33:26:9e:1e:d7:31:cb:99:5d:3a:65:72:13:9b:
                    64:7d:2d:e9:51:9b:93:fe:f8:82:6f:1c:40:69:12:
                    1c:81:81:45:3a:50:a7:2e:be:cb:ce:31:7d:d0:d9:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:D6:6F:D1:8E:EA:6A:81:25:82:97:12:A6:4F:A6:C3:81:99:1B
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:c5:5a:c3:c0:43:ce:9a:29:fa:7d:74:1b:0c:02:50:82:
         00:82:63:25:df:cf:17:22:17:2b:46:9a:aa:8f:0e:11:f8:b5:
         8f:ef:0c:7b:1b:10:85:b7:11:53:ad:35:97:de:b7:10:10:fe:
         64:0f:b6:24:ed:00:9b:1d:a5:10:20:61:4a:53:db:18:fa:26:
         fb:8f:04:f6:ce:af:45:df:73:72:ee:3c:1c:7c:49:c3:7d:13:
         75:fb:36:98:65:b6:f4:49:5e:31:c2:7e:f5:7a:0b:2b:e0:57:
         e9:84:4d:0a:74:6e:ca:77:53:12:17:8e:06:1f:e4:3b:c1:69:
         e4:9d:a8:f2:d0:2a:07:6f:12:f5:06:2c:fb:ad:30:3d:b9:02:
         f0:f2:39:97:48:dc:e1:b6:35:87:ab:a3:8a:25:da:8b:bf:55:
         56:43:d9:23:2a:ce:25:97:bf:92:dd:8d:fd:0b:09:fc:7c:88:
         23:e3:05:9a:d7:36:e9:3f:a6:00:04:49:20:80:1e:7b:a5:8b:
         b2:c8:ef:57:a5:cc:f7:2c:5c:b8:44:84:cc:b3:9c:91:5d:d6:
         34:1b:90:69:48:50:9d:ed:e5:57:08:40:7b:87:0f:9d:82:b0:
         8b:41:b5:3f:8c:cf:aa:b3:a7:33:05:72:dc:4f:15:63:75:43:
         3f:f6:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:48 2025 by rpki-client