Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa
File:                     3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa (raw, json)
Hash identifier:          v0yB/D1xCYUVa+Yexj2EtBteIaVLFpISrJgkGOdulXg=
Subject key identifier:   8F:0C:6C:4C:DA:D3:7B:45:77:DB:0E:6D:E9:46:F3:50:F3:16:42:60
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       493389B4EDF5650C557FBB3649B9EA4A8A22CE28
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:05:24 +0000
ROA not before:           Wed 30 Apr 2025 20:00:24 +0000
ROA not after:            Wed 29 Apr 2026 20:05:24 +0000
asID:                     61668
IP address blocks:        131.100.250.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:33:89:b4:ed:f5:65:0c:55:7f:bb:36:49:b9:ea:4a:8a:22:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 20:00:24 2025 GMT
            Not After : Apr 29 20:05:24 2026 GMT
        Subject: CN=8F0C6C4CDAD37B4577DB0E6DE946F350F3164260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:89:f8:58:1b:83:c3:95:ef:b8:3f:17:30:
                    43:d1:8c:00:ec:a6:ed:06:a0:e5:91:cd:7d:40:da:
                    8f:5d:b3:fd:27:14:2b:06:40:c6:73:38:38:1c:3a:
                    ab:eb:e8:18:f1:4a:55:ae:cc:bc:26:7d:fd:44:8e:
                    9d:41:10:b0:6d:89:0a:5c:7c:4f:6d:b4:b8:ad:ae:
                    b4:3e:d4:2b:14:91:17:f9:43:65:7e:22:94:0f:c6:
                    9c:57:b6:75:e0:9e:b3:c1:c2:46:6f:db:29:7c:5a:
                    b1:cf:9e:b2:e2:c9:f0:50:1b:76:e8:96:8b:b6:aa:
                    31:3b:d4:90:ef:47:bf:c1:ff:3a:d5:12:fd:91:cb:
                    5d:5a:b3:c2:e6:3b:ea:3f:a2:66:df:65:62:20:e5:
                    57:04:c5:93:a2:a4:43:b7:6e:47:c2:82:8a:1d:bf:
                    dc:bc:94:f0:b6:81:1c:19:e4:da:74:83:4a:04:1a:
                    d8:74:d3:40:3a:69:41:f2:aa:01:ac:8c:89:54:61:
                    fb:b6:73:49:5a:22:8f:71:83:e7:ac:30:86:52:b4:
                    ad:19:62:53:ab:c7:d0:3c:dc:12:84:45:99:ea:93:
                    dc:a3:b8:39:c0:a1:c3:4d:02:54:dc:da:5d:c1:4b:
                    3b:b6:7e:c9:77:6f:07:67:54:e4:09:c6:d2:1f:1c:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0C:6C:4C:DA:D3:7B:45:77:DB:0E:6D:E9:46:F3:50:F3:16:42:60
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:0e:60:fb:9c:5d:df:ae:24:b0:83:cd:3d:d4:b2:b5:71:67:
         63:d4:45:53:43:f0:f3:68:78:63:4a:2c:8a:c5:40:d8:4d:5e:
         ff:77:83:9d:90:f7:9e:cb:3f:70:96:6e:d3:9f:18:a4:aa:87:
         18:bc:62:11:45:ef:ca:e1:58:a4:ee:51:e4:1d:90:61:a6:85:
         20:79:2d:c5:c8:0f:8c:39:0c:0c:9d:84:1e:ed:33:4a:69:21:
         d8:31:7a:b5:7b:61:97:3c:21:17:e6:9c:4d:33:ed:4d:43:1f:
         88:e4:50:a4:67:9c:42:5d:40:21:a7:eb:73:f9:c1:e9:ce:1b:
         a7:d6:db:e9:cb:1e:ed:95:2a:a2:7c:db:44:f5:49:82:db:b5:
         6a:36:7c:48:b8:65:4f:ed:78:99:9f:50:49:fa:c5:68:c6:90:
         1f:b5:65:ae:6c:23:10:15:c9:62:58:9d:89:19:74:6c:6a:10:
         81:0d:f1:1b:d1:48:fb:2d:69:9a:a5:44:ca:86:57:8e:2e:1b:
         20:8b:3c:bd:bf:a3:f8:97:41:b6:c2:c6:a2:44:75:ca:a3:92:
         0c:5f:5f:90:e4:0a:22:ba:00:1a:ed:bf:ee:cc:69:1e:08:95:
         67:f9:3d:1c:8e:d9:93:88:61:79:5c:a2:1e:1a:08:7b:0d:4f:
         3f:26:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:21:33 2025 by rpki-client