Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          NIvEWhttvJTa1X3Z6OZbxqpfl3QyblXd/CxQ/fJCVAk=
Subject key identifier:   61:65:36:64:64:30:00:4D:AE:10:2A:74:31:72:2F:DA:2D:00:1C:15
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       39724B54D82A1FF40915F2BCA78E783FC7E5350D
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:00 +0000
ROA not before:           Fri 07 Mar 2025 14:36:00 +0000
ROA not after:            Fri 06 Mar 2026 14:41:00 +0000
asID:                     52758
IP address blocks:        201.131.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:4b:54:d8:2a:1f:f4:09:15:f2:bc:a7:8e:78:3f:c7:e5:35:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:00 2025 GMT
            Not After : Mar  6 14:41:00 2026 GMT
        Subject: CN=616536646430004DAE102A7431722FDA2D001C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:7f:43:62:49:23:3d:8a:bd:f7:6d:67:d8:
                    8b:c1:2c:4b:27:ee:98:b0:b0:e1:d1:65:f9:cd:3c:
                    63:70:89:27:c1:99:81:a5:5e:b4:e6:45:e2:2f:f9:
                    fc:46:e9:8d:e8:61:9b:ad:30:86:97:08:81:0f:64:
                    5c:cc:84:ad:6d:c1:9b:de:00:40:bf:c2:7f:04:5e:
                    2e:99:b4:bb:63:c9:8c:10:ae:17:b9:cb:2f:1d:71:
                    18:1b:d6:d5:39:b9:31:4a:1b:64:e0:3c:51:20:ef:
                    d5:b3:7f:6a:88:70:29:2e:36:31:37:e5:70:e1:1b:
                    df:7a:e5:c9:23:46:5f:e4:2c:00:99:e8:54:df:65:
                    56:05:c1:66:9f:d1:70:57:b8:85:7d:d5:4a:53:8d:
                    3a:bc:dc:80:f3:90:5b:38:2e:20:34:78:0d:1f:cb:
                    08:bd:be:cf:07:14:bc:c7:7a:e7:98:f2:e3:7d:d9:
                    31:6f:b5:56:04:3c:bd:32:47:62:d2:69:ab:d1:ec:
                    22:46:d5:a2:92:59:fb:32:a2:64:44:7a:74:97:fd:
                    64:6f:3c:a8:c0:31:6f:be:e4:63:5e:f4:34:94:27:
                    ec:cb:6c:2a:ce:f9:95:8f:81:c9:38:4e:9a:25:4c:
                    ca:db:44:1e:5b:72:a4:04:76:d4:fe:77:20:b5:1b:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:36:64:64:30:00:4D:AE:10:2A:74:31:72:2F:DA:2D:00:1C:15
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:92:fb:46:cf:18:f6:ca:72:f1:15:72:fd:74:f7:e5:11:ae:
         49:8b:56:37:d0:e2:09:cf:fe:68:19:36:fd:9c:63:34:4f:c0:
         69:d7:62:04:90:15:09:c9:70:ba:5b:74:fe:ef:20:24:45:ce:
         6c:df:c4:27:64:bb:6e:3a:5f:19:8e:df:64:a9:c6:92:2c:82:
         27:99:78:a3:a6:c5:c8:90:54:19:31:d9:b3:22:a9:ed:f1:60:
         b8:04:4c:1e:d3:d8:76:7c:31:9a:9e:c3:f7:46:5f:2b:b6:0b:
         96:87:da:2e:69:3c:7d:ec:fe:e9:a4:50:3c:d3:9a:06:b2:c0:
         eb:15:b3:0e:33:eb:fd:ae:0c:59:3f:c8:34:05:63:6f:80:d1:
         d2:bf:b0:5f:f8:28:da:49:34:d9:62:42:34:df:73:05:13:1f:
         c5:53:c3:a8:48:51:04:db:30:5f:d2:e3:c4:c1:38:8b:ef:74:
         b7:75:7a:77:72:9a:5a:da:44:00:d8:b0:82:d7:b5:e8:c3:46:
         fa:80:11:2a:d7:94:46:23:20:84:28:82:44:43:b1:60:29:a7:
         61:90:5a:28:3d:20:de:50:2a:74:84:c8:eb:11:be:2d:7a:e9:
         4f:fd:fb:bb:66:c4:63:6a:69:09:dc:0e:98:95:7b:e0:71:b4:
         a1:96:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:16:42 2025 by rpki-client