Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32322d3332203d3e203631373337.roa
File:                     3133312e37322e3138302e302f32322d3332203d3e203631373337.roa (raw, json)
Hash identifier:          uAMdtVL40b9ds6awCiCsmPZthB3stigLIOnewfJ/Lc8=
Subject key identifier:   21:8F:83:50:60:81:96:DF:63:B8:36:9C:73:23:92:72:BD:FE:86:96
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       55488879FEA79884CB34D2CD5F70881EA6A3F5E4
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32322d3332203d3e203631373337.roa
Signing time:             Tue 08 Apr 2025 19:04:21 +0000
ROA not before:           Tue 08 Apr 2025 18:59:21 +0000
ROA not after:            Tue 07 Apr 2026 19:04:21 +0000
asID:                     61737
IP address blocks:        131.72.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:48:88:79:fe:a7:98:84:cb:34:d2:cd:5f:70:88:1e:a6:a3:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Apr  8 18:59:21 2025 GMT
            Not After : Apr  7 19:04:21 2026 GMT
        Subject: CN=218F8350608196DF63B8369C73239272BDFE8696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:43:1a:f0:fe:33:0c:70:59:72:a0:43:f3:
                    0a:7b:1b:53:db:a3:b7:0e:4b:46:a9:a9:d1:26:30:
                    93:02:c3:0d:ac:d5:1f:7c:e5:fd:e0:ce:9f:12:5c:
                    fe:51:d3:cd:51:16:c6:0d:39:0b:5b:a7:76:63:90:
                    d0:8f:12:10:54:ad:ea:a2:73:5d:a6:61:97:1a:7b:
                    f2:2a:c4:f3:5f:49:1c:3b:c1:55:a8:05:7f:11:09:
                    fa:cb:84:aa:3c:6d:61:0a:ae:89:34:6a:9f:5e:de:
                    34:a2:04:1a:a7:19:ab:43:84:25:1f:a9:9f:b0:db:
                    c0:fd:3e:15:4e:ef:9f:48:46:81:78:95:ba:66:ea:
                    96:a2:da:40:19:18:ed:58:d0:a5:0e:1c:25:69:db:
                    02:c2:91:44:ec:11:f1:06:95:b7:82:ee:81:7a:74:
                    79:06:21:8f:42:f4:73:75:55:32:7f:82:50:94:72:
                    03:22:f8:08:8a:6b:05:81:71:10:57:ad:35:2d:21:
                    87:9e:aa:bc:91:58:a6:f8:db:de:46:c1:d0:70:fb:
                    ae:d4:46:87:19:15:5e:8b:b7:33:7a:65:14:9c:69:
                    bb:30:e3:37:e5:17:1a:84:45:54:c7:dc:5b:35:dd:
                    1e:d3:4d:f2:1c:ba:71:7c:f8:6f:ef:b7:6b:c4:f9:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:83:50:60:81:96:DF:63:B8:36:9C:73:23:92:72:BD:FE:86:96
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32322d3332203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:e2:ac:f1:0a:75:6d:13:15:e8:68:d7:0c:1f:65:15:85:
         0d:64:e9:51:43:a9:36:b2:fa:47:da:34:ba:6e:9d:ff:93:f3:
         f3:75:77:17:85:78:af:69:ba:9a:1c:d6:39:4d:d2:95:1b:d6:
         93:9b:66:a3:36:7e:d3:00:ba:0d:fe:e8:2a:4c:9e:ce:97:81:
         63:57:c1:e3:d5:83:43:ac:d5:1b:18:0d:61:eb:7f:0d:55:26:
         c2:fc:62:f1:2f:f2:a8:b6:c1:c3:28:9f:5e:3b:7b:18:37:9a:
         db:bc:71:7a:93:ec:19:6a:78:6e:85:9b:fa:da:4d:19:64:d6:
         44:71:ed:91:08:27:7a:e5:41:d0:b8:a2:e1:0a:72:13:65:fa:
         25:b6:ed:80:54:41:d0:2c:21:3d:fa:7a:84:f1:2d:7c:18:7f:
         9e:cc:71:b9:c5:39:8d:0a:9e:7c:ff:55:a1:4d:e7:f2:24:0b:
         f6:88:3b:e9:90:3a:3d:e8:d4:58:0f:f7:e4:ef:5d:68:9b:68:
         19:d7:af:a9:d5:8e:54:10:6b:96:f7:ec:64:56:24:d6:62:d9:
         3f:1a:bf:66:40:a4:d4:f6:be:35:3c:2f:9c:c7:49:ef:e8:5b:
         72:29:38:6c:de:2f:df:de:4f:5f:f7:8d:ef:8f:9d:94:bd:24:
         1b:6c:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:37:06 2025 by rpki-client