Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa
File:                     3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa (raw, json)
Hash identifier:          8KeY5Gq3yZKw+IrAyQ4nBcjKExan/7utIpZ5Fql/6O8=
Subject key identifier:   95:F9:09:70:8E:C2:CC:9C:53:BD:19:5A:65:88:89:9A:6C:A7:B5:B8
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       2E57F6BB8A5C72E12627C1CB755C0050785C4933
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa
Signing time:             Wed 07 May 2025 19:31:22 +0000
ROA not before:           Wed 07 May 2025 19:26:22 +0000
ROA not after:            Wed 06 May 2026 19:31:22 +0000
asID:                     264414
IP address blocks:        131.221.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
                          rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 01:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:f6:bb:8a:5c:72:e1:26:27:c1:cb:75:5c:00:50:78:5c:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: May  7 19:26:22 2025 GMT
            Not After : May  6 19:31:22 2026 GMT
        Subject: CN=95F909708EC2CC9C53BD195A6588899A6CA7B5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:39:a0:be:2a:83:71:e2:e3:23:f3:7d:fc:
                    99:91:3b:63:bb:1a:50:6e:80:80:05:4f:62:c0:cf:
                    00:ed:e4:90:90:91:6a:df:16:ec:93:a2:13:51:56:
                    bb:51:3d:f6:fe:6a:fb:34:75:22:66:c8:91:9f:b0:
                    75:77:81:ec:4d:41:e3:11:bc:34:71:c5:06:c8:11:
                    0f:85:3a:29:99:b2:10:52:54:dc:5c:59:9f:c9:1a:
                    d9:cc:a6:f7:15:df:ba:ae:dc:39:28:f9:4f:01:d1:
                    9e:89:6b:9d:b3:ad:29:11:e4:c6:30:46:d7:eb:47:
                    12:1f:5d:80:47:ba:f0:7f:19:91:51:eb:a9:17:6d:
                    e3:2d:b8:c4:14:78:67:8e:ed:ed:cb:68:33:f7:45:
                    1c:54:a3:d0:ff:b3:97:da:2c:23:0c:d9:3e:fe:19:
                    46:b0:69:3b:95:24:3f:08:f3:22:4a:c0:22:b8:29:
                    0b:56:09:e0:43:74:46:a9:7b:c4:0a:6f:ae:35:93:
                    e0:9a:62:47:2e:e4:ef:32:5d:8d:a8:b6:ec:4e:79:
                    0d:54:d6:04:b3:71:df:da:23:87:f8:36:59:67:1c:
                    05:a2:27:40:72:5b:44:63:3c:c5:dc:7a:57:8f:d4:
                    16:52:b8:ef:05:6b:81:ad:70:af:4e:d3:5a:69:b1:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F9:09:70:8E:C2:CC:9C:53:BD:19:5A:65:88:89:9A:6C:A7:B5:B8
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:c0:3f:53:6a:ff:17:94:7f:ab:d4:37:84:db:d3:a1:a1:
         3b:54:c2:e3:19:1f:dd:12:8a:07:2e:4e:09:c9:a6:8c:1c:d8:
         50:66:47:13:ac:94:62:92:2b:88:9d:9d:7d:ca:4e:04:b6:62:
         80:b9:0f:e6:34:41:38:dd:48:3d:48:ff:18:2e:a9:c1:cd:72:
         a0:72:47:35:c6:a2:59:8b:d1:f2:c6:39:9f:84:aa:36:95:61:
         c9:5f:da:32:c9:03:f4:49:ec:eb:c7:81:87:1d:5b:c0:61:9e:
         24:61:90:40:12:6b:e2:6d:d5:e9:38:ae:ef:5a:4a:6d:6c:d7:
         4b:cc:1c:2f:a9:ed:7b:63:08:c1:55:28:9d:5c:5a:1c:84:5e:
         d1:3c:1b:5f:a5:0c:e2:fd:7c:1e:54:d7:da:97:fb:9f:39:ee:
         94:39:fa:09:16:4d:e5:ea:68:30:1f:c8:7c:e0:6b:ff:ac:85:
         50:47:28:65:07:7b:44:b5:f4:c4:8f:a5:a1:e2:b3:b0:81:44:
         61:cb:44:61:1f:b0:be:cb:57:b3:51:33:fe:9f:3e:0c:ff:e1:
         b1:7f:33:e7:25:a6:5d:fb:df:d6:c3:b3:9a:bb:73:a8:ec:bb:
         6a:3d:25:98:be:c5:1c:80:c2:10:5f:b7:50:41:fc:9a:73:71:
         e1:e3:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:20 2025 by rpki-client