Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234312e302f32342d3234203d3e203532373538.roa
File:                     3230312e3133312e3234312e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          +M09AOFW+xBcAEBg1pLDQb4kum92aj5zXmhOjGHhddE=
Subject key identifier:   52:FD:E8:F6:34:72:3F:00:CB:5E:AB:CA:B1:BB:95:4A:1B:3E:C9:CE
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       69D6B4D8CD06BE6A4DADCD487A0268F8A0A46920
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234312e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 27 Dec 2024 18:05:10 +0000
ROA not before:           Fri 27 Dec 2024 18:00:10 +0000
ROA not after:            Fri 26 Dec 2025 18:05:10 +0000
asID:                     52758
IP address blocks:        201.131.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d6:b4:d8:cd:06:be:6a:4d:ad:cd:48:7a:02:68:f8:a0:a4:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Dec 27 18:00:10 2024 GMT
            Not After : Dec 26 18:05:10 2025 GMT
        Subject: CN=52FDE8F634723F00CB5EABCAB1BB954A1B3EC9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:e2:7b:1f:13:01:11:5e:e3:c8:ca:18:e3:
                    9a:2c:ca:97:a2:b4:27:1f:51:cc:52:7d:88:d8:4d:
                    3a:3d:e9:00:60:63:b6:e9:d4:81:d0:0d:5c:1b:93:
                    a7:dd:fd:91:b7:6d:de:63:54:34:71:46:00:d2:1f:
                    78:85:90:6a:f7:4f:44:ad:9f:9d:db:46:ca:3b:28:
                    55:ca:9d:ae:0f:9c:d3:1c:1d:da:7c:1a:de:cf:c0:
                    b6:26:f0:03:a0:e7:2b:6e:f0:f1:c3:09:2c:fe:18:
                    68:8c:d2:18:39:04:ba:55:2d:3e:3b:bf:83:27:ea:
                    1b:49:9d:a4:cb:8b:79:3a:ae:f6:03:2c:6a:b6:9f:
                    47:56:07:71:d1:8c:3d:13:8e:cb:8b:cf:61:2b:9e:
                    12:da:b5:fd:1b:93:fc:32:0d:26:c3:88:c1:0e:04:
                    36:f6:bb:22:03:fa:33:94:1f:1f:a5:b5:38:96:59:
                    fc:24:5c:1b:5b:c2:d4:b8:cb:03:a5:cb:23:96:b0:
                    0d:1e:ab:f6:c7:92:da:af:6e:4a:da:09:60:6d:12:
                    0b:ec:2b:53:15:a3:e6:f0:b4:49:a3:eb:ab:13:e9:
                    59:ac:7a:8e:30:25:90:36:85:8d:bf:ad:f0:a7:55:
                    db:bf:9a:65:a8:23:f4:a4:c0:08:77:2b:b4:f8:cb:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:E8:F6:34:72:3F:00:CB:5E:AB:CA:B1:BB:95:4A:1B:3E:C9:CE
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234312e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:89:28:68:44:20:59:89:d6:f0:75:c0:01:ec:0e:cc:fd:
         3e:67:11:6d:94:b6:c1:d5:70:4f:70:94:de:56:41:71:0d:4c:
         91:ca:bb:67:dd:46:7d:ee:d4:6b:02:dd:d0:7d:1e:6b:46:04:
         37:4e:e4:64:4f:91:59:27:dd:d1:8b:f0:9d:8e:f2:1e:a7:5d:
         30:6f:c9:2a:61:da:73:89:1f:b4:e0:1e:d7:8a:dc:c2:2d:ef:
         c5:15:2b:55:6b:71:2f:ec:d0:23:fb:10:17:42:62:f8:e2:8d:
         a7:a5:1e:f5:bc:16:c7:ec:bf:ab:2c:a0:76:7d:93:4d:c7:ff:
         b7:9c:51:d7:63:91:41:b1:b7:70:d2:cb:2c:bf:26:69:af:a7:
         04:3f:45:64:91:0f:2f:14:04:e2:ab:ec:e4:ac:0d:61:d3:e0:
         71:23:a4:46:6b:b2:89:ac:98:27:86:43:2d:e0:ba:4e:9b:89:
         66:ff:61:59:bf:02:81:b6:d8:10:94:bd:06:2b:05:d9:53:73:
         1e:57:54:16:a9:80:5f:28:06:da:3f:2b:63:31:eb:8e:90:69:
         09:f4:3a:67:df:32:c7:1f:fe:2a:f7:de:27:13:a2:f8:10:a3:
         8e:d1:4b:69:2d:da:05:1e:14:35:6c:c3:df:0f:59:3b:89:e8:
         e7:f6:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:14:06 2025 by rpki-client