Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235312e302f32342d3332203d3e203631363638.roa
File:                     3133312e3130302e3235312e302f32342d3332203d3e203631363638.roa (raw, json)
Hash identifier:          Xri4SWgxAnbQbuFvhWZJ4JLsrapYzeYiUolsSh0BRs8=
Subject key identifier:   52:E8:84:5A:1B:16:22:51:FA:CA:37:BB:BF:DF:AB:14:B4:2D:F6:88
Certificate issuer:       /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial:       0D47BE671C82C3EE89A4DA89108B00190F3C1008
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235312e302f32342d3332203d3e203631363638.roa
Signing time:             Wed 30 Apr 2025 20:05:46 +0000
ROA not before:           Wed 30 Apr 2025 20:00:46 +0000
ROA not after:            Wed 29 Apr 2026 20:05:46 +0000
asID:                     61668
IP address blocks:        131.100.251.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
                          rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:47:be:67:1c:82:c3:ee:89:a4:da:89:10:8b:00:19:0f:3c:10:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
        Validity
            Not Before: Apr 30 20:00:46 2025 GMT
            Not After : Apr 29 20:05:46 2026 GMT
        Subject: CN=52E8845A1B162251FACA37BBBFDFAB14B42DF688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:a8:d0:6a:af:1f:6c:07:5f:7c:92:08:e7:
                    6d:dc:ba:97:2a:a6:60:ae:e7:6b:16:76:c0:ef:5d:
                    74:b1:fd:3c:12:65:7c:2e:f0:ec:38:a7:52:69:04:
                    0a:26:8a:f0:06:87:ed:8e:21:b2:cd:e5:27:11:92:
                    42:5d:fe:97:9c:18:97:17:cb:cb:c2:8e:db:7b:70:
                    58:27:f8:98:b2:54:3f:9f:2c:ad:4b:0f:6e:db:41:
                    78:8a:c3:03:55:92:6d:e7:5c:1d:75:94:35:c0:65:
                    fa:ec:11:53:7e:c4:c6:b3:aa:47:25:ba:26:8b:86:
                    e0:bb:1e:3a:47:45:01:6c:78:22:99:a2:dd:bc:c6:
                    ba:0f:7d:9a:e3:e4:97:f6:dc:b8:3d:b9:60:0a:c6:
                    49:11:fa:13:c2:99:18:e0:ac:98:53:25:d3:8d:af:
                    81:0e:65:ff:44:79:8b:eb:eb:8e:87:9a:87:ab:9c:
                    f8:8a:f0:c9:47:87:76:6e:5b:0b:56:aa:f4:ac:b7:
                    c2:e3:f7:dc:5a:d1:45:90:cb:5f:66:cb:bb:c8:2b:
                    54:d4:21:3a:9c:1f:de:32:4d:4b:42:29:7f:25:45:
                    1d:d1:2d:ee:f1:9a:7f:6a:79:2e:ac:74:9b:13:59:
                    45:27:32:22:36:f5:98:0a:d3:d4:8e:06:60:07:cf:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:84:5A:1B:16:22:51:FA:CA:37:BB:BF:DF:AB:14:B4:2D:F6:88
            X509v3 Authority Key Identifier:
                keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235312e302f32342d3332203d3e203631363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:84:60:65:2e:5d:1c:6f:5d:01:eb:32:10:b9:1e:b3:03:f6:
         2f:fd:c5:d7:04:a5:00:a8:3b:9c:61:7e:4f:24:85:66:b9:cd:
         b0:1f:8f:35:4e:24:81:66:34:b4:7a:04:3b:88:ae:89:09:09:
         b4:01:c3:5c:8b:19:58:57:a5:22:5e:62:f5:d6:3f:4b:bd:d2:
         de:2d:33:ec:cb:78:80:3b:dc:9b:da:4a:ac:fa:46:5d:90:d0:
         51:55:22:f3:27:df:1c:b3:a4:fd:86:c8:d3:59:28:3b:94:f7:
         ca:2e:a8:7b:59:85:a3:36:ac:59:52:72:5c:53:7e:ad:b8:3f:
         75:aa:ba:c3:82:24:d8:8d:f9:15:7d:ff:0d:14:c0:f4:e1:98:
         23:d1:d6:75:37:ca:6b:dc:25:50:66:e4:db:ad:01:8e:84:b6:
         85:d3:30:d2:b2:93:19:3f:7b:42:56:64:83:67:e4:e0:6c:45:
         0f:23:a2:86:f5:9a:26:42:7a:2e:c5:ca:11:1a:8a:7d:e3:46:
         6b:db:83:d8:e5:0a:c8:2b:60:9a:e5:2f:57:5c:61:a9:c0:3a:
         5e:81:98:68:34:9b:5d:fa:b8:dd:07:d9:b5:b1:12:90:c5:81:
         15:fa:84:3d:8b:79:e5:42:11:aa:a9:d7:a3:c4:63:86:62:cd:
         e2:95:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:17:01 2025 by rpki-client