Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          xgzYP9h4k+MU5MA1ta1Nh12nJ7NavmluOS/dpOQboFs=
Subject key identifier:   4B:8F:A6:96:30:D1:A2:11:CC:50:94:73:F7:31:B2:50:F1:C2:B4:C4
Certificate issuer:       /CN=BD50BD2086E482CF8522C43B160CF72E7053F3E8
Certificate serial:       4DBCCC50A6D2D88E83FB0B9D77346B9868C23481
Authority key identifier: BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
Signing time:             Tue 07 Jan 2025 15:10:02 +0000
ROA not before:           Tue 07 Jan 2025 15:05:02 +0000
ROA not after:            Tue 06 Jan 2026 15:10:02 +0000
asID:                     265943
IP address blocks:        131.196.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bc:cc:50:a6:d2:d8:8e:83:fb:0b:9d:77:34:6b:98:68:c2:34:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD50BD2086E482CF8522C43B160CF72E7053F3E8
        Validity
            Not Before: Jan  7 15:05:02 2025 GMT
            Not After : Jan  6 15:10:02 2026 GMT
        Subject: CN=4B8FA69630D1A211CC509473F731B250F1C2B4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:5e:27:24:6d:15:77:7d:53:77:e5:38:06:
                    21:2b:d0:b0:60:cd:6a:ee:42:64:e0:87:0a:c3:95:
                    98:b8:18:57:5e:c7:82:fe:b0:84:7e:76:2e:17:e4:
                    e7:a7:30:f5:30:c2:0e:3e:f2:d0:2e:7c:76:1a:87:
                    e8:1e:18:e8:ef:ad:9e:13:03:7b:b1:3b:bc:34:a2:
                    2f:53:4b:ce:6d:62:18:bc:98:14:26:ce:01:54:50:
                    69:a3:3e:bc:7a:93:6e:cc:5f:2a:d4:6f:04:fb:01:
                    50:d9:57:95:a2:59:e9:aa:04:8a:81:46:96:81:a2:
                    1e:0d:16:eb:13:4a:a8:e2:7a:cc:c0:57:9f:ad:28:
                    16:62:f3:85:45:d6:a7:96:2e:15:9d:e5:71:e7:95:
                    38:52:14:29:ac:11:c3:77:ab:06:6a:ec:21:2c:d5:
                    55:42:15:82:5d:01:f2:15:00:52:3f:80:55:5e:1a:
                    18:8b:52:04:8b:e4:e4:e0:a4:c8:cb:87:2a:2f:d5:
                    e6:a4:f5:d0:bf:fd:52:04:14:93:a5:27:c7:85:9d:
                    65:0b:11:ee:8f:b5:12:5f:99:89:fc:2b:f1:7f:d2:
                    34:19:70:1d:47:3d:9c:1c:fc:25:ba:f2:d3:f9:16:
                    d9:20:b8:ff:cf:c1:cf:4c:c9:71:4f:af:68:b3:4e:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8F:A6:96:30:D1:A2:11:CC:50:94:73:F7:31:B2:50:F1:C2:B4:C4
            X509v3 Authority Key Identifier:
                keyid:BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:49:15:35:7a:15:7a:dd:70:9b:53:66:2e:00:d3:e6:0c:0f:
         aa:3c:4e:d5:f0:b0:68:ad:50:5a:ef:46:23:e4:f4:53:67:cb:
         73:a5:66:3e:7c:11:1c:92:ca:6c:ea:37:e0:57:b0:f4:f2:b4:
         5b:c9:5d:de:74:d0:2a:dc:56:62:42:70:f2:bf:a4:01:0c:7f:
         39:15:2b:e9:45:54:ab:8e:8d:11:12:8e:4d:72:bd:4b:ac:01:
         83:38:4d:5e:a7:8d:e2:69:e8:84:0d:ac:fa:50:b1:e1:12:0e:
         ad:d6:27:79:62:2a:91:f2:d5:3d:d8:50:34:63:e4:c9:ab:c2:
         c1:1f:54:c5:fe:5b:7c:a0:c9:0b:57:a6:47:99:d6:dd:4c:b1:
         e1:2b:53:63:c5:39:5f:27:df:f5:9b:04:dd:c1:ef:f8:07:90:
         22:17:f9:b5:72:47:0a:60:90:21:ba:ae:27:a5:9d:ac:00:23:
         d9:18:6b:8f:b0:f5:18:5f:94:21:67:3e:53:2d:3e:b8:e7:f1:
         19:ed:6a:3d:04:e0:e6:46:bb:c7:e5:20:30:20:11:2b:96:78:
         90:63:69:da:c8:d1:46:2a:4c:5e:eb:3a:07:d6:70:e3:49:cd:
         90:20:61:df:ec:fa:88:cd:3a:65:eb:12:8d:59:56:4d:b9:c5:
         e6:18:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:38 2025 by rpki-client