Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3232203d3e203631363638.roa
File:                     3133312e3130302e3234382e302f32322d3232203d3e203631363638.roa (raw, json)
Hash identifier:          0hZelFCcTw/5owSj4kyRA4Mv/QN8wxdmkf746uSKuqw=
Subject key identifier:   14:F2:73:1B:E1:93:3A:67:C0:79:C1:A4:6C:F1:B3:4B:6C:44:C5:7D
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       1205179DAE33601062F8BC16E36FA7F35386DC8C
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3232203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:06:47 +0000
ROA not before:           Wed 30 Apr 2025 20:01:47 +0000
ROA not after:            Wed 29 Apr 2026 20:06:47 +0000
asID:                     61668
IP address blocks:        131.100.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:05:17:9d:ae:33:60:10:62:f8:bc:16:e3:6f:a7:f3:53:86:dc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 20:01:47 2025 GMT
            Not After : Apr 29 20:06:47 2026 GMT
        Subject: CN=14F2731BE1933A67C079C1A46CF1B34B6C44C57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:dd:0d:e9:50:b0:a9:63:73:d2:23:ce:d2:
                    a6:78:f5:b2:a7:80:a2:fb:23:ec:2a:e1:e5:b4:87:
                    1b:3b:c1:eb:0e:df:33:28:c8:cc:ff:92:73:3f:e1:
                    ed:11:01:95:7e:b7:9c:ed:fa:f8:ae:31:df:27:f6:
                    41:5c:81:fa:dd:a3:87:c3:b2:61:37:37:2f:bc:4a:
                    dd:65:67:6d:1f:72:38:9b:ce:48:db:ac:50:b9:d5:
                    a9:12:f6:74:f2:fc:99:36:8d:4c:42:3c:3f:67:a9:
                    2b:97:70:8f:5e:15:b7:8c:9b:dd:5b:08:4b:35:60:
                    86:9d:90:f3:5d:f9:39:97:1f:1e:2c:a1:63:49:49:
                    97:7c:69:ac:f8:1a:cc:3d:66:5e:cf:63:ad:6d:f9:
                    7d:12:b9:96:8b:1b:97:0b:77:49:3e:e9:48:53:80:
                    e7:eb:1f:e1:17:ba:cc:5a:6d:98:38:94:6c:ef:28:
                    67:b5:77:9b:b0:12:07:ec:01:47:18:8f:9c:3f:55:
                    f9:4e:da:3a:01:56:5f:1a:ef:8d:0f:a5:c4:3c:39:
                    fb:9f:a4:30:f1:c0:6f:7d:17:03:38:4c:61:a1:1a:
                    30:c6:22:a1:b4:d0:a5:7d:d7:d5:81:68:b1:ef:56:
                    50:73:37:54:03:46:e6:49:1e:ba:ed:e0:4a:a1:68:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F2:73:1B:E1:93:3A:67:C0:79:C1:A4:6C:F1:B3:4B:6C:44:C5:7D
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32322d3232203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:57:76:a0:f4:92:eb:ec:9e:0d:5f:1f:de:bb:74:2c:84:2b:
         9c:40:9a:ce:76:52:4a:61:5e:02:ec:af:76:38:9c:29:47:2b:
         cc:e8:38:7d:57:8c:b0:25:cd:6c:c1:8d:7f:02:37:19:4c:1a:
         70:74:d6:37:c9:51:3c:1f:80:2b:4e:dd:99:b1:77:80:9a:50:
         c8:d1:d8:dc:b2:a6:ae:99:6a:20:da:8d:4e:a4:97:1d:ba:b8:
         84:5c:0b:be:52:2c:8f:70:e6:5f:39:b7:de:6d:c4:3e:ed:fe:
         32:08:18:8f:2a:a3:ed:24:df:15:0d:d2:f1:41:db:e4:0e:89:
         d0:ca:b1:b2:0c:1d:e0:3b:22:6e:67:9d:a1:4a:ae:0b:c2:df:
         ea:3c:fe:51:3a:7f:31:35:b7:9d:a5:fe:c7:37:ef:f6:ee:a0:
         b0:c3:1c:cb:ec:9e:ca:5b:5b:51:a3:1a:b2:6c:86:d9:07:05:
         67:77:0b:e2:c8:34:4e:88:e9:a1:c3:af:2f:ba:20:52:f7:2a:
         e1:df:b8:e2:da:9b:69:dc:7e:7b:c9:f0:d5:b6:90:60:41:f6:
         cf:04:6c:53:98:c3:cc:1c:eb:86:a6:25:b7:94:15:e2:87:13:
         5c:dd:3e:4a:d7:e3:d3:aa:b0:5a:4d:77:1f:7e:ff:ea:96:29:
         19:13:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:22:48 2025 by rpki-client