Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa
File:                     3133312e37322e32302e302f32322d3234203d3e203631373136.roa (raw, json)
Hash identifier:          +z9eMRdQxldQ53EoYc+PQDMhSoOlNX5oAxZiuOUjp1I=
Subject key identifier:   96:A1:17:FA:1A:BB:2E:49:2A:A3:0B:A1:F9:F2:AC:7A:0C:19:14:2A
Certificate issuer:       /CN=3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E
Certificate serial:       781B690EB29EDB0D0D8E0DB77CB8C3D664CD15D8
Authority key identifier: 38:82:AA:F6:D8:9E:CE:D0:62:4C:2F:F7:99:E2:E6:CA:05:84:DF:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa
Signing time:             Thu 20 Mar 2025 16:29:18 +0000
ROA not before:           Thu 20 Mar 2025 16:24:18 +0000
ROA not after:            Thu 19 Mar 2026 16:29:18 +0000
asID:                     61716
IP address blocks:        131.72.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.crl
                          rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1b:69:0e:b2:9e:db:0d:0d:8e:0d:b7:7c:b8:c3:d6:64:cd:15:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E
        Validity
            Not Before: Mar 20 16:24:18 2025 GMT
            Not After : Mar 19 16:29:18 2026 GMT
        Subject: CN=96A117FA1ABB2E492AA30BA1F9F2AC7A0C19142A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:4c:26:c5:0e:c2:0b:fb:4c:a0:06:48:18:
                    d4:ef:8a:b9:4e:a7:a6:a3:44:39:10:5a:3c:d5:7a:
                    6a:ac:46:61:cb:47:1f:da:47:de:e6:2d:df:56:64:
                    d4:a0:a4:fd:50:d3:b3:af:4f:1d:c3:51:ad:7d:5a:
                    07:94:b1:a6:36:6d:72:2b:02:53:28:aa:02:dd:53:
                    db:6f:52:8f:c8:6d:19:42:37:b5:c8:99:da:dd:2f:
                    20:91:bc:55:33:0f:1e:76:1e:4b:0f:d6:a1:9b:13:
                    92:3e:bd:ca:19:a6:23:0f:1f:6b:86:db:d9:4b:82:
                    5d:5a:9a:f1:fb:cd:04:be:3f:3a:d2:8c:ee:1a:ba:
                    a8:11:e8:63:60:69:f5:ea:6c:79:b4:f6:1f:12:b9:
                    9c:42:c1:bd:d4:f8:99:e2:9f:2a:9c:05:36:92:bb:
                    33:29:9e:08:52:66:0c:39:23:95:3e:ea:7a:2a:6c:
                    6e:7f:5d:ad:db:b9:9a:bc:b0:68:7d:24:dc:f8:36:
                    75:c4:c0:6c:bf:fe:37:c6:8c:08:92:36:1a:4c:2f:
                    a8:f4:55:aa:31:0b:82:6e:ba:dd:ce:a7:97:e7:a3:
                    0d:71:50:40:91:cd:ef:2c:c8:8b:03:b1:47:f4:ce:
                    45:a3:3b:2a:59:52:3d:91:c6:55:57:12:77:9c:39:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:17:FA:1A:BB:2E:49:2A:A3:0B:A1:F9:F2:AC:7A:0C:19:14:2A
            X509v3 Authority Key Identifier:
                keyid:38:82:AA:F6:D8:9E:CE:D0:62:4C:2F:F7:99:E2:E6:CA:05:84:DF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:76:0f:85:72:2e:89:3d:ee:c6:53:ed:6c:50:06:fb:03:
         ab:cb:69:b4:4a:b0:f1:7a:46:a0:a6:8e:03:1e:1e:79:70:36:
         31:9b:6c:1d:3d:2b:1b:ef:b2:70:bc:5f:39:a7:72:0f:0b:d7:
         13:f3:83:85:1a:69:a2:5b:20:97:52:36:c5:a4:db:24:1c:4e:
         8e:5b:45:b8:aa:23:6a:c9:dd:ef:72:f7:aa:ea:70:06:49:bb:
         69:98:d1:49:e9:b1:2a:00:94:df:19:74:57:5f:96:38:1a:9a:
         a8:4a:d0:ff:60:a1:f2:4f:4d:ad:77:15:f8:36:db:f9:98:48:
         a6:7c:17:84:c4:c1:96:48:f7:11:83:ee:fd:82:87:b5:cf:cd:
         b6:12:90:fc:f2:74:2a:e1:55:04:f2:a4:d1:05:b6:d6:45:93:
         b0:8e:82:a1:ed:6f:81:ba:f5:0d:b6:6d:4a:fb:67:c9:fb:86:
         83:ef:7a:18:f7:1b:69:de:7c:1e:69:68:37:5c:89:ab:e3:d4:
         8f:62:de:07:ff:b6:29:a2:f0:7d:37:29:b7:fc:61:87:ac:11:
         e3:41:37:99:0e:c0:4d:17:24:91:c0:0d:0e:24:d2:cc:bd:33:
         d3:a1:56:b4:79:33:74:b0:2b:f4:eb:69:f0:2c:42:f6:05:17:
         b5:a0:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:31:27 2025 by rpki-client