Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32332d3332203d3e203631363638.roa
File:                     3133312e3130302e3234382e302f32332d3332203d3e203631363638.roa (raw, json)
Hash identifier:          Bz13qJiaADa1iKUgUiUPymNH+uNsZ7Sww4NOUyTt6AM=
Subject key identifier:   B0:C1:31:6F:5A:3B:B8:70:9B:07:73:8C:AA:01:99:03:DC:79:63:7C
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       475A866A2F69B36E83CA886977A3C72BA6AE497D
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32332d3332203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:07:26 +0000
ROA not before:           Wed 30 Apr 2025 20:02:26 +0000
ROA not after:            Wed 29 Apr 2026 20:07:26 +0000
asID:                     61668
IP address blocks:        131.100.248.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5a:86:6a:2f:69:b3:6e:83:ca:88:69:77:a3:c7:2b:a6:ae:49:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 20:02:26 2025 GMT
            Not After : Apr 29 20:07:26 2026 GMT
        Subject: CN=B0C1316F5A3BB8709B07738CAA019903DC79637C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:90:3a:23:3a:ab:f8:69:f3:27:9d:17:cf:
                    6f:17:33:06:67:44:33:38:e5:05:6d:1e:53:9c:44:
                    ba:b7:99:2d:f3:f9:87:a3:37:48:90:e7:3a:08:38:
                    70:bb:97:3f:c4:8b:3c:c6:df:04:74:c7:0f:41:3a:
                    bd:d7:4e:19:f2:6e:82:b8:38:90:86:97:5f:13:91:
                    4b:44:54:ab:ed:7c:a7:1e:8a:00:0d:51:7b:87:01:
                    47:32:49:db:ba:b8:67:f1:78:0d:b2:d4:04:e0:12:
                    ef:af:5c:79:cb:f9:67:9e:b3:e6:5f:74:77:bb:1a:
                    08:b4:5a:f6:db:fe:cf:87:88:ae:1e:9f:d8:b5:a8:
                    73:21:60:2d:92:f1:f4:49:f3:a7:cd:ca:e7:b8:35:
                    da:a2:c4:16:6b:65:f4:a1:d1:0a:26:d4:4c:43:f7:
                    58:5f:5a:4e:a8:0b:92:54:65:f2:cf:d8:cb:e6:2d:
                    b0:c9:c1:0b:98:74:60:76:a2:ff:b6:8b:71:3a:b1:
                    4e:69:95:c9:34:24:4a:bf:a7:32:ad:7f:bf:8b:fc:
                    75:5b:71:dc:65:fd:29:fa:e5:04:06:e3:4c:56:1d:
                    66:d3:99:85:7e:f9:56:c2:33:7d:34:ef:36:92:b7:
                    cd:db:d5:12:16:53:bc:eb:be:c2:04:85:6e:87:df:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C1:31:6F:5A:3B:B8:70:9B:07:73:8C:AA:01:99:03:DC:79:63:7C
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3234382e302f32332d3332203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:90:8a:45:61:ce:c2:d2:de:7e:16:9b:a4:9f:8d:6d:bc:e5:
         d5:ab:e6:77:68:69:4b:c5:ff:81:e6:f7:10:35:29:79:7c:3f:
         ee:43:a8:ef:bd:0b:2a:2e:54:37:24:1a:21:64:a0:21:8a:ed:
         bf:3b:91:8d:2a:13:3a:1b:83:2b:1d:b3:39:fb:b1:48:db:09:
         2e:f4:fc:b9:4f:50:30:c4:35:92:90:87:aa:63:db:1e:08:ee:
         5d:ba:66:93:86:52:db:f7:00:0d:86:02:c8:c1:57:99:fb:dc:
         01:73:11:45:98:ef:88:10:01:19:8d:03:ad:9c:08:28:ca:16:
         38:34:d6:2f:31:e0:be:4c:b1:aa:b6:2b:da:94:31:4b:d1:ee:
         93:0d:1d:31:de:ef:dd:dc:bb:33:ab:76:e8:0d:f3:68:0c:26:
         a7:18:b4:a3:92:47:f3:1b:18:aa:34:3d:7a:42:2c:f0:70:3e:
         08:43:da:82:db:5c:cc:78:1a:08:ea:a8:f9:62:fc:da:a4:2c:
         0a:77:1a:20:a7:26:f5:b6:ba:fd:ef:30:7e:9d:38:b9:28:08:
         7b:0c:09:77:26:1a:f8:89:79:20:c5:55:39:88:ad:fa:ba:24:
         89:24:8c:f0:c8:82:e3:c1:33:24:11:01:52:c8:eb:15:3d:57:
         6b:5c:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:20:54 2025 by rpki-client