Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32332d3233203d3e203631373337.roa
File:                     3133312e37322e3138322e302f32332d3233203d3e203631373337.roa (raw, json)
Hash identifier:          kGHCLSX6Aua9D2p8dup5w1AF1ez3KtvNdEWHbQeJENY=
Subject key identifier:   89:38:88:0D:50:4E:BE:7A:A2:42:49:2D:C4:87:9B:C4:5A:DC:18:82
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       6EDB48ED441E31C30B9BC24E0E518B2E52AB89D5
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32332d3233203d3e203631373337.roa
Signing time:             Fri 14 Feb 2025 00:08:58 +0000
ROA not before:           Fri 14 Feb 2025 00:03:58 +0000
ROA not after:            Fri 13 Feb 2026 00:08:58 +0000
asID:                     61737
IP address blocks:        131.72.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 21:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:48:ed:44:1e:31:c3:0b:9b:c2:4e:0e:51:8b:2e:52:ab:89:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Feb 14 00:03:58 2025 GMT
            Not After : Feb 13 00:08:58 2026 GMT
        Subject: CN=8938880D504EBE7AA242492DC4879BC45ADC1882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:6a:fb:f6:a3:de:a2:0a:5c:db:32:d8:89:
                    45:7c:5a:95:3c:2a:9b:2d:0e:62:12:84:15:3e:75:
                    02:13:94:ae:9e:7f:a7:de:01:b9:5b:42:f2:c7:57:
                    79:b1:95:d5:d7:52:3b:cc:9b:a3:38:75:bf:57:15:
                    fe:cb:57:fc:a0:40:69:02:89:ce:e5:57:13:7d:7e:
                    14:13:ce:c9:c5:e1:8b:bc:e4:af:8e:3e:89:3e:45:
                    2a:6c:64:e4:f5:f5:12:98:28:4d:e3:45:96:ba:6b:
                    29:b7:a5:19:5a:a0:bf:d3:39:3b:ff:14:c7:b3:5b:
                    c2:ea:a9:d8:2a:dd:6c:be:2b:20:f1:68:92:3f:42:
                    94:1f:8d:11:0d:10:f6:af:94:3a:1c:ae:a9:1e:db:
                    0e:cd:d6:7f:eb:f4:c8:9e:e6:52:01:bd:f9:52:ca:
                    c4:21:11:f4:8c:22:4b:e5:e9:a2:dd:b3:cd:8e:45:
                    fa:8c:a2:19:5e:7b:d1:5f:a1:17:d7:1b:a8:c5:90:
                    13:a6:93:b5:8d:9e:c2:2c:e9:c9:81:63:3d:e2:46:
                    80:2f:f6:d8:ef:5e:f2:89:d1:db:a3:00:cc:b3:ec:
                    92:f4:dd:28:54:8a:48:ad:58:b6:96:7a:db:0d:a9:
                    a1:5a:b6:18:82:af:f4:20:28:57:b4:f1:5d:cf:63:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:88:0D:50:4E:BE:7A:A2:42:49:2D:C4:87:9B:C4:5A:DC:18:82
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32332d3233203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:87:19:45:2a:6e:05:96:79:67:c5:22:47:c5:b7:8e:f8:
         51:c3:57:d3:02:00:8a:e1:7d:f1:c0:d0:8e:a1:9c:18:05:b0:
         a1:b5:18:36:45:d4:f5:fb:88:cb:6f:c3:ef:62:e4:19:f2:fd:
         08:12:c7:1f:53:ec:b5:41:7f:55:4b:01:3b:a2:15:64:89:29:
         8d:92:78:1e:75:15:0a:ad:22:d6:34:56:bd:d2:42:29:02:19:
         0e:93:b2:88:16:c0:7d:e6:01:4e:82:5c:1e:21:d9:42:52:8b:
         20:a8:d7:b3:c4:1b:9d:b3:f2:09:f4:fc:c4:c6:1f:68:d5:cb:
         71:aa:f3:63:ef:5a:37:90:1f:0f:a6:89:f6:d2:a7:54:0d:d4:
         62:86:37:c9:91:68:2f:49:de:0d:a9:52:12:41:70:d7:e8:34:
         06:84:64:8c:2a:b8:fc:bb:d1:0b:09:b2:2d:9f:54:85:71:f3:
         25:2d:95:f7:8a:c3:33:8a:6b:98:30:bd:e4:c3:46:15:d4:0c:
         f1:fc:86:00:44:fa:be:8b:3c:49:cb:34:d2:44:42:4f:49:27:
         f8:b6:cc:54:6a:c7:e1:50:55:f0:6a:c3:a5:22:74:30:fd:43:
         6e:49:8c:52:64:38:66:cd:8c:e2:7b:36:7e:5a:d5:2b:f0:ea:
         c1:57:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:33 2025 by rpki-client