Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133312e302e39362e302f32322d3234203d3e20323633363439.roa
File:                     3133312e302e39362e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          7c+1ROc/Y+Yf8uPhdqZcOvlXB3Dzk54PlG7e1sFb28g=
Subject key identifier:   0E:C1:19:39:C5:A5:4E:88:CD:82:3A:EA:63:30:E9:8E:6D:2F:FC:07
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       51798496DAF41CD90DEBBAE327088BD79039EECF
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133312e302e39362e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 05 Mar 2025 21:04:32 +0000
ROA not before:           Wed 05 Mar 2025 20:59:32 +0000
ROA not after:            Wed 04 Mar 2026 21:04:32 +0000
asID:                     263649
IP address blocks:        131.0.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:79:84:96:da:f4:1c:d9:0d:eb:ba:e3:27:08:8b:d7:90:39:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Mar  5 20:59:32 2025 GMT
            Not After : Mar  4 21:04:32 2026 GMT
        Subject: CN=0EC11939C5A54E88CD823AEA6330E98E6D2FFC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:70:ed:c0:31:96:37:51:87:3b:c8:39:4d:
                    86:69:1c:af:56:c4:81:c1:31:4e:83:0f:57:37:61:
                    80:be:d7:eb:03:6a:d9:bb:ed:90:a4:e4:50:15:6d:
                    4c:38:1d:eb:90:88:c0:ea:2b:31:50:93:1a:96:27:
                    73:21:55:b8:c4:d5:0e:95:da:0e:4f:8f:cc:2e:dc:
                    22:49:15:22:10:2f:88:10:be:a9:d5:3a:d2:3b:11:
                    90:87:10:68:db:a7:f2:f2:92:1c:8f:b2:32:94:88:
                    9a:a4:b5:c5:ef:da:83:be:93:81:6d:6d:3e:69:71:
                    81:0f:df:3c:50:fc:96:be:be:53:12:0c:ee:85:28:
                    bc:b9:bb:47:9a:9f:25:f8:93:fa:85:d5:56:ef:4e:
                    ce:6b:60:19:90:a0:e8:d2:19:9f:13:73:3e:cf:05:
                    33:7f:16:93:02:99:81:75:e4:dc:eb:31:d1:e3:43:
                    6f:a2:c8:7e:e0:09:cd:bc:6d:b3:49:05:d3:15:ff:
                    6c:a6:7b:3c:f8:25:d4:0d:47:09:c8:01:bd:2d:d1:
                    b0:8a:a7:41:bf:48:b9:65:8f:07:3f:fa:30:2e:34:
                    30:12:fa:73:82:f7:44:02:49:29:2d:77:1f:27:8f:
                    a1:63:35:30:b2:45:6f:e1:2c:1c:f4:32:88:c8:16:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C1:19:39:C5:A5:4E:88:CD:82:3A:EA:63:30:E9:8E:6D:2F:FC:07
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133312e302e39362e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:48:be:89:96:b3:40:5a:c8:82:3c:43:4b:c5:cb:ca:82:
         f1:fc:50:e7:db:e6:c2:cd:7a:68:1b:8c:36:ce:50:5a:d3:33:
         c7:12:1f:92:cc:de:18:ba:dc:4d:10:ec:d9:2f:a1:25:73:48:
         5b:b0:5c:78:df:d4:32:b0:00:83:2a:c0:76:6c:0b:dc:74:83:
         8c:21:5f:d9:44:61:d8:af:c8:62:57:56:e4:3f:77:99:ac:a3:
         77:5d:9f:08:07:a1:38:d4:27:4c:78:a1:35:c6:b9:1d:7b:07:
         77:d5:a5:9b:5c:2f:88:15:23:4b:8c:e0:37:09:51:84:ea:52:
         cc:1f:45:04:77:89:e8:40:c2:f0:3c:37:1a:92:46:26:10:3c:
         bb:c1:b4:a2:32:7b:34:c0:b5:08:06:c5:be:78:bb:cc:05:82:
         c5:19:5a:a1:6e:42:2d:97:2c:57:a2:73:f2:dc:90:84:1f:f5:
         58:4b:95:e0:51:c9:7d:b1:ff:f5:bd:86:46:a6:86:28:44:9e:
         9d:dc:f7:6b:1d:3f:ec:14:63:3d:b6:1f:c0:e3:05:a8:13:10:
         27:bd:25:10:aa:a9:48:7a:06:0b:51:54:e8:33:f6:98:ce:dc:
         ae:7b:89:ef:20:a9:d0:3b:0a:4c:55:d3:4f:09:48:fd:4c:8a:
         99:83:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:11 2025 by rpki-client