Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa (raw, json)
Hash identifier:          DJyjKdYWbLKKi3vIOSmRAp8TEcSk23RHhGQVIVj7qWs=
Subject key identifier:   05:36:77:8D:0F:75:EC:75:2A:FD:EA:EB:76:27:CF:DB:ED:CB:B7:65
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       2088E710F88CFD567B8D51C849E1053F99CE7F4D
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:01 +0000
ROA not before:           Fri 07 Mar 2025 14:36:01 +0000
ROA not after:            Fri 06 Mar 2026 14:41:01 +0000
asID:                     52758
IP address blocks:        201.131.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:88:e7:10:f8:8c:fd:56:7b:8d:51:c8:49:e1:05:3f:99:ce:7f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:01 2025 GMT
            Not After : Mar  6 14:41:01 2026 GMT
        Subject: CN=0536778D0F75EC752AFDEAEB7627CFDBEDCBB765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:0b:54:9b:c4:60:35:d4:0d:49:78:f7:96:
                    c5:93:b6:dc:1a:29:84:35:2e:f7:ee:55:a6:c4:ed:
                    69:4a:99:9f:3c:2b:50:59:a4:69:cc:5e:db:f0:2e:
                    70:e6:5d:f3:dc:4c:df:92:10:30:61:94:0d:7e:5a:
                    03:a1:ef:7d:bd:59:12:09:5f:ae:ba:70:df:be:3e:
                    2b:2a:ee:4a:9d:4a:38:db:35:ea:d7:23:26:f9:9b:
                    9f:aa:7d:05:6f:7c:90:0a:75:10:41:24:43:34:0b:
                    81:16:b7:a1:7f:61:23:3d:47:58:ff:cd:76:5d:43:
                    c1:5f:50:9d:d3:67:f5:81:6b:cf:57:46:8a:4d:4e:
                    30:fd:6b:5b:a8:fd:03:c8:52:4e:3c:5f:bf:1a:91:
                    9e:4e:7d:40:f8:63:9e:14:a9:31:d0:47:56:e1:70:
                    cc:be:f1:42:06:dd:d4:2b:b0:1c:1b:77:b2:73:c3:
                    b2:d2:15:2f:b5:74:7e:6d:8c:75:eb:be:ee:3d:e2:
                    de:ca:18:b9:de:2a:71:ef:45:76:df:f8:0e:11:97:
                    ca:0d:98:3f:fd:b6:5e:5f:08:00:94:04:25:b2:be:
                    62:2a:7f:7f:cf:95:e1:02:30:1f:2a:96:28:cd:d2:
                    ec:d8:10:70:bf:ab:1a:03:15:eb:c7:77:75:b0:f3:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:36:77:8D:0F:75:EC:75:2A:FD:EA:EB:76:27:CF:DB:ED:CB:B7:65
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:74:7e:f4:06:ae:96:98:71:17:fb:91:fb:5c:4a:22:7b:
         59:e9:b9:ee:1a:72:ca:d4:45:de:56:ce:3f:40:4e:ee:c4:91:
         2f:64:e1:e5:b4:95:ec:82:7b:0f:dd:f7:b5:35:66:79:bb:fd:
         60:13:04:e0:b2:9d:af:ec:55:1f:2c:5b:42:78:1b:2b:dd:b1:
         c4:3b:4f:69:b0:e5:4f:29:8a:f7:34:a0:82:dc:48:22:52:9f:
         21:6e:53:d6:ff:01:0b:c5:ba:5f:51:b1:9b:53:8e:42:60:4a:
         18:fe:24:ed:f0:48:95:4b:b4:49:8e:73:f7:6d:f2:b4:cc:86:
         d6:fa:e6:dd:69:76:be:e7:fe:34:72:82:54:7f:92:1e:11:a9:
         f7:b4:2d:a9:7e:87:5e:b6:4f:c4:94:af:8b:ba:2a:18:35:34:
         af:c2:d1:45:31:61:27:48:31:f7:f0:15:cf:b0:30:ec:d1:65:
         de:76:f2:08:04:12:35:b0:34:8f:8c:43:e2:f4:61:1f:06:b6:
         93:a0:72:aa:57:50:a9:ca:c8:fe:f2:1a:26:5d:5c:5d:9b:10:
         21:d2:08:21:98:e9:34:93:76:18:21:83:8d:ab:00:f8:47:19:
         0c:62:34:33:51:cd:7b:ea:01:21:40:14:b7:10:2a:4d:82:f1:
         95:01:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:14:00 2025 by rpki-client