Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa
File:                     3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa (raw, json)
Hash identifier:          Z+33HVjqzXyw6GWg6a+7Vv2QcTqWiKp5v0VHm16gQXs=
Subject key identifier:   D5:A9:09:71:A3:BD:81:D9:B3:19:78:1B:79:58:C1:51:5C:45:BC:FD
Certificate issuer:       /CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
Certificate serial:       27A25BBD7C1395FAFF204052DE3FCEC828F9F0E9
Authority key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa
Signing time:             Tue 08 Jul 2025 22:28:25 +0000
ROA not before:           Tue 08 Jul 2025 22:23:25 +0000
ROA not after:            Tue 07 Jul 2026 22:28:25 +0000
asID:                     264400
IP address blocks:        131.161.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl
                          rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:5b:bd:7c:13:95:fa:ff:20:40:52:de:3f:ce:c8:28:f9:f0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
        Validity
            Not Before: Jul  8 22:23:25 2025 GMT
            Not After : Jul  7 22:28:25 2026 GMT
        Subject: CN=D5A90971A3BD81D9B319781B7958C1515C45BCFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:21:21:b9:ac:ed:c0:5b:47:30:8a:0e:db:
                    95:9c:de:83:41:44:87:d9:96:64:7d:93:b0:7e:03:
                    ee:aa:5a:96:f5:4c:6d:e5:c2:f5:71:74:9b:9a:0a:
                    d7:1f:19:a7:9a:b5:8a:5f:c3:b6:37:60:ac:0b:ce:
                    89:5b:83:15:ce:4f:75:fc:5d:62:45:17:69:29:44:
                    15:33:b9:ec:5c:69:62:5a:34:73:9a:83:1f:0d:76:
                    d4:e4:1b:3c:b8:5a:7a:b6:cd:04:69:09:78:23:2b:
                    94:1f:4d:b2:35:02:2a:72:f4:d3:b1:94:63:1b:bc:
                    10:93:f0:b9:75:54:8f:0c:8c:3f:84:06:e3:63:16:
                    32:d9:80:d6:b1:31:68:77:c8:f7:9e:c4:91:ec:08:
                    59:ea:5c:8f:b0:4f:e4:dd:06:1a:12:ad:ab:55:f6:
                    1a:a7:0b:98:66:84:a8:93:81:4d:be:63:48:f8:7e:
                    0c:76:d3:30:b3:16:2a:ee:a2:6b:63:4a:a8:d5:d3:
                    0f:eb:00:b5:a6:83:d7:5c:82:60:80:30:2f:50:47:
                    b9:24:da:38:64:60:51:03:6f:e7:88:12:26:c0:97:
                    32:89:10:ba:7f:62:fb:02:0f:c9:06:28:d4:5d:b6:
                    32:bb:1a:1b:2c:3a:66:50:3b:cf:e3:2f:75:53:5b:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A9:09:71:A3:BD:81:D9:B3:19:78:1B:79:58:C1:51:5C:45:BC:FD
            X509v3 Authority Key Identifier:
                keyid:2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:82:77:12:14:ed:3f:13:0c:65:06:cd:36:53:76:2b:84:af:
         6f:d5:2e:82:bf:8b:1d:3a:8b:d0:4e:bf:99:fa:bd:a3:eb:21:
         b1:91:5f:d9:de:63:7c:f4:5d:3a:cf:ad:bb:11:d3:d3:0f:fb:
         24:28:64:4d:36:1d:95:48:9f:2b:ba:95:60:61:06:9f:ae:2c:
         4a:1c:d4:74:7c:e7:8b:de:ad:d2:42:78:f9:59:d0:95:04:d8:
         3b:1b:12:ba:71:9c:17:e7:8d:f3:10:53:8b:41:dd:55:4e:02:
         91:ed:2d:b9:01:82:53:d1:3f:fd:cb:e0:c1:55:83:78:e7:49:
         2d:6c:3a:c6:c3:22:fb:14:3a:40:fa:a8:b5:dd:d2:dc:1a:2d:
         f1:95:41:a7:9a:f8:9e:5e:62:a0:23:5b:b7:5d:cc:6c:eb:9a:
         62:09:da:20:8a:97:f5:e0:09:44:46:ed:02:11:88:f8:90:f7:
         c6:c4:1e:5f:0d:15:9b:37:5a:4f:b1:9f:3a:df:b5:c9:82:e7:
         6c:0d:4c:d8:b2:db:65:2c:a6:5f:e2:2a:46:c9:1a:c5:01:d2:
         4c:0b:98:5f:0c:4d:be:f0:7b:10:83:5f:a5:79:1d:53:5c:03:
         37:e7:30:e8:b4:50:fe:d8:82:e7:fc:38:43:c3:9c:96:01:9a:
         69:9b:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:40 2025 by rpki-client