Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/3133312e302e342e302f32322d3234203d3e203631383535.roa
File:                     3133312e302e342e302f32322d3234203d3e203631383535.roa (raw, json)
Hash identifier:          f0mXzeuwJosMTstEjXet6TkeIjIAsQO0QVHHWEpOpks=
Subject key identifier:   80:98:32:3C:E1:2E:1D:B7:7F:D3:AF:1F:0E:29:2E:50:BC:0F:DB:13
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       5F49ECAFF6184EE3806A77C7EFC6E1C4ADB82C08
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/3133312e302e342e302f32322d3234203d3e203631383535.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     61855
IP address blocks:        131.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:ec:af:f6:18:4e:e3:80:6a:77:c7:ef:c6:e1:c4:ad:b8:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:2f:4d:01:42:74:45:53:a2:13:c4:60:4d:
                    4c:a2:f8:79:14:99:c0:69:94:db:ef:e5:ea:0e:3b:
                    21:14:2d:73:c4:1f:6d:0b:d2:36:66:99:74:dc:08:
                    8b:54:9a:7a:19:4a:38:7f:8c:ab:d8:ca:13:15:8f:
                    ff:ac:08:06:17:a4:d0:96:2e:9e:03:00:00:1c:25:
                    f0:bb:81:85:6d:4c:e1:9e:7b:4a:01:f0:07:c2:3c:
                    b7:b1:4e:b8:f8:bd:7e:a1:c8:f1:e0:ba:b4:4c:32:
                    2b:ad:9a:5a:7a:af:3c:ac:4f:20:65:db:a0:64:0f:
                    e5:28:99:4e:a8:1d:5f:7a:1c:27:94:47:e1:bc:8f:
                    ca:dd:20:74:44:d9:f3:f1:ce:c7:58:f2:4b:36:e2:
                    78:a8:42:24:21:be:c8:ce:58:b6:09:6c:8e:9b:ff:
                    a8:2d:89:11:8e:4f:ef:6c:a3:72:c2:5a:50:17:ac:
                    dc:d3:72:f1:79:a1:3f:89:18:09:88:d7:08:db:bf:
                    f4:20:11:19:b0:56:8b:71:67:2e:7a:9a:33:f7:b4:
                    50:af:b6:1a:3f:bb:c4:e7:10:65:eb:44:df:ed:81:
                    26:65:76:43:f9:c5:d9:c5:a5:72:c4:17:9c:6a:f3:
                    59:f9:0d:87:17:b8:13:e8:ea:65:38:20:b6:c9:30:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:32:3C:E1:2E:1D:B7:7F:D3:AF:1F:0E:29:2E:50:BC:0F:DB:13
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/3133312e302e342e302f32322d3234203d3e203631383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:e3:22:70:72:94:c1:65:da:c9:dc:2f:c4:73:31:52:4d:e5:
         b0:08:f0:b3:90:dc:62:23:b2:b8:10:b7:ee:87:6d:93:8f:92:
         24:6b:d5:02:da:76:4b:41:51:63:5f:99:0c:2b:50:18:b2:2c:
         22:30:a6:c9:04:7c:5f:33:01:08:13:95:26:04:0b:2a:bb:dc:
         7d:25:fe:7e:59:d5:54:ee:76:8c:5d:c6:83:bc:05:8a:ab:98:
         13:fe:88:6d:8f:23:18:d9:74:e9:50:6c:26:20:26:16:83:a8:
         e4:b8:c2:67:d9:07:5a:f7:c8:a5:9d:3f:a8:7e:4a:e6:ca:ed:
         cc:5e:79:8c:d5:f4:ff:db:f6:a0:5a:3c:e7:fe:ec:27:cd:37:
         c4:47:1f:87:f1:43:eb:e3:34:9f:8d:ef:5e:09:16:97:44:a0:
         ca:31:59:bf:f3:68:87:11:2f:2a:eb:b9:6a:d5:e0:19:8d:ad:
         b5:60:2d:b8:38:f3:5e:67:c6:e7:35:35:f9:68:6d:a7:12:bc:
         57:1e:f3:6d:47:97:24:ca:28:f3:f9:5b:e0:e4:cb:d8:60:27:
         6f:d5:a8:2e:74:7d:ff:66:5d:f4:6d:3b:a7:fe:0c:a5:24:0d:
         80:80:61:8c:db:3d:77:4a:96:ad:f3:38:81:37:bf:6f:7e:f2:
         e2:1c:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:52:20 2025 by rpki-client