Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32342d3234203d3e20323730383936.roa
File:                     3133312e3130302e362e302f32342d3234203d3e20323730383936.roa (raw, json)
Hash identifier:          5zlD7EVptP27gVTF2W2Ridb5kLPu5e7s3pn7mh6L4aw=
Subject key identifier:   18:75:24:C4:AD:A8:67:0A:98:28:3C:34:F2:36:D1:B4:B8:9B:FE:71
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       5383FD720005474DC6D74479CDEAA1F25360FA9D
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32342d3234203d3e20323730383936.roa
Signing time:             Wed 16 Apr 2025 12:18:33 +0000
ROA not before:           Wed 16 Apr 2025 12:13:33 +0000
ROA not after:            Wed 15 Apr 2026 12:18:33 +0000
asID:                     270896
IP address blocks:        131.100.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:fd:72:00:05:47:4d:c6:d7:44:79:cd:ea:a1:f2:53:60:fa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: Apr 16 12:13:33 2025 GMT
            Not After : Apr 15 12:18:33 2026 GMT
        Subject: CN=187524C4ADA8670A98283C34F236D1B4B89BFE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:75:a9:95:ba:20:07:6a:2a:4d:f6:be:b6:ac:
                    14:ff:a2:20:fd:12:ab:5c:da:65:85:9f:73:dd:a9:
                    9c:45:de:3a:0c:99:6e:85:e4:03:86:61:4f:7d:d0:
                    57:a4:8e:73:bb:ea:1b:8e:f6:7b:4a:7f:a9:19:1a:
                    96:ce:be:05:8a:a3:8f:08:50:cc:eb:cb:71:4f:37:
                    61:b6:72:ea:a3:a6:97:2e:63:93:56:84:85:5e:b6:
                    ba:40:af:4c:c3:fd:5a:b7:ae:b4:27:dd:4b:f9:64:
                    47:a5:4f:57:c6:53:7b:5f:5d:09:d9:de:92:6a:51:
                    1d:e1:71:11:af:f9:60:3e:d0:f0:04:40:ca:e9:e8:
                    95:20:90:0e:72:32:a0:ef:45:d9:20:b2:04:aa:24:
                    9d:57:0a:52:1d:d8:d1:13:e6:0e:75:1c:08:12:6d:
                    a4:8f:9f:d0:8f:6f:74:dd:41:23:d4:71:fb:a1:a6:
                    8d:95:65:e7:4c:37:a1:5c:3d:24:1d:e4:85:9c:cb:
                    5c:40:d0:7f:b2:03:e4:c9:d2:15:b1:a2:d9:b2:c6:
                    53:c1:a8:75:09:0e:1e:63:b7:33:58:e3:7d:96:39:
                    3c:96:61:13:48:21:f3:c7:4f:fd:c9:4c:9a:f5:5d:
                    47:6e:f5:9f:f5:c0:0e:5e:e5:3e:71:38:4e:7a:fc:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:24:C4:AD:A8:67:0A:98:28:3C:34:F2:36:D1:B4:B8:9B:FE:71
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32342d3234203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:10:4f:a7:f2:e4:90:92:31:4d:0f:5f:d3:44:f3:84:10:
         10:a0:66:87:a2:9e:3e:54:90:2d:6c:90:b0:01:90:df:d2:66:
         4a:de:23:3c:72:f7:95:e5:cb:89:4f:b2:b6:be:a8:48:6c:a0:
         e7:11:44:84:25:98:14:c9:15:7a:67:49:40:1f:42:f6:a8:9d:
         48:f3:95:e9:2e:f8:8b:8d:66:8d:7b:da:f7:27:57:8a:46:90:
         86:e7:18:d4:bc:b0:a0:c9:f4:1b:7a:8d:eb:f0:9b:d1:6d:bc:
         38:09:79:a4:36:92:b6:f5:d5:9f:1f:49:6b:07:c7:dd:c7:fb:
         88:0a:a4:fb:9a:34:3d:f6:b5:8a:0a:48:a3:7c:90:7b:92:1a:
         bb:4a:bc:57:68:49:95:39:e4:de:4e:03:4c:74:2a:62:5d:a9:
         a1:16:34:24:91:69:89:04:f5:16:bc:6c:a8:51:e6:2e:cf:a9:
         e5:37:e6:db:35:34:b5:c9:a8:fe:e1:c9:1e:22:4d:36:df:dd:
         7f:33:6f:ca:97:62:aa:ec:98:47:43:b2:7c:86:7d:03:c2:64:
         1c:d3:20:b9:c5:7e:b2:d1:88:7a:33:61:2e:77:29:82:e6:cf:
         ac:f0:1e:ff:03:ee:cb:0b:a1:05:d2:c7:98:f2:0b:40:43:b7:
         81:53:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:36:00 2025 by rpki-client