Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa
File:                     3133312e37322e3134342e302f32322d3234203d3e203238363730.roa (raw, json)
Hash identifier:          O0S+B65KSQywTHDZANCeTCaqRLL9ojEK560D9X4JVXY=
Subject key identifier:   7F:15:20:46:5E:E1:C3:D3:9E:1E:C6:7E:25:FA:F0:F7:02:B5:C3:0C
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       1E8A4C98A564C267E90BF91D4E46D3331AAC7F18
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa
Signing time:             Tue 01 Jul 2025 15:46:34 +0000
ROA not before:           Tue 01 Jul 2025 15:41:34 +0000
ROA not after:            Tue 30 Jun 2026 15:46:34 +0000
asID:                     28670
IP address blocks:        131.72.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:4c:98:a5:64:c2:67:e9:0b:f9:1d:4e:46:d3:33:1a:ac:7f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jul  1 15:41:34 2025 GMT
            Not After : Jun 30 15:46:34 2026 GMT
        Subject: CN=7F1520465EE1C3D39E1EC67E25FAF0F702B5C30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:8d:e4:96:6a:e0:00:c5:34:7b:5b:e7:45:
                    01:5a:53:46:32:85:43:86:f3:49:3e:de:97:74:8d:
                    3b:ab:3c:5d:d7:7c:ee:84:76:aa:aa:43:2c:c5:3a:
                    ca:c2:61:9e:4a:82:f5:87:ed:75:18:43:e9:df:79:
                    b5:2b:ae:dc:ba:c7:9e:99:be:fa:39:d0:a4:28:29:
                    ef:91:08:ca:19:d7:87:5c:aa:d0:60:fa:59:ae:90:
                    a5:06:4b:95:6c:1a:9b:10:63:74:21:ec:5e:af:8f:
                    92:da:0c:33:78:09:af:3d:29:61:23:3c:ad:6c:cc:
                    50:9d:de:c1:86:a6:69:41:9f:a2:87:f9:ab:e5:4f:
                    6e:90:2d:b0:31:91:c7:b8:23:41:07:27:a3:62:9f:
                    b9:ea:9f:59:38:92:0d:bb:0b:31:67:e0:51:d4:ba:
                    33:90:88:6d:23:07:2b:fa:ea:35:49:07:07:3d:ff:
                    b3:63:ea:6a:ef:9e:f8:6f:13:a9:fc:ef:d3:c2:43:
                    2c:7c:45:27:5b:82:5b:7b:e9:d6:c9:8c:ec:15:ac:
                    36:ec:0d:74:3c:e2:16:f5:70:e6:d5:ad:57:a0:25:
                    83:a3:da:07:14:f7:ac:bd:cc:83:ca:01:7b:ee:53:
                    2f:4b:25:59:b1:b6:43:46:9b:68:0e:1a:90:f8:5e:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:15:20:46:5E:E1:C3:D3:9E:1E:C6:7E:25:FA:F0:F7:02:B5:C3:0C
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:ad:16:9e:2b:58:45:17:5a:29:7f:d4:a0:18:bb:82:7d:
         2f:0b:8d:23:45:1b:92:12:4e:24:0d:c9:da:1c:99:c4:3c:92:
         9d:53:ed:29:4b:c8:87:f9:bf:6f:b3:09:34:30:2a:8a:58:ea:
         9d:59:b9:5d:a9:37:cb:e6:18:a3:71:0d:c0:d1:c0:9b:6e:35:
         33:85:9e:80:17:c2:a0:e8:88:33:9e:e9:7c:24:aa:4c:de:e1:
         93:8e:ba:76:5f:48:78:90:d7:3d:f9:a5:19:82:44:40:ee:66:
         59:a0:e4:93:88:f2:b7:a7:d6:78:b7:4b:fa:4f:12:23:a1:d7:
         1d:80:63:b0:98:40:f3:b8:b5:59:d0:88:2f:19:7b:ac:11:61:
         0d:e5:d4:56:5e:ce:48:ad:92:b6:bb:98:ab:7f:45:d4:99:73:
         48:06:18:52:2f:fe:7d:a5:5b:a0:23:2d:62:b6:61:9c:f2:7c:
         3c:01:5d:ca:c6:61:20:07:73:73:ea:3b:4b:23:83:70:35:10:
         5f:d2:3a:dc:ab:77:73:40:e8:7a:11:12:73:ec:64:73:03:79:
         08:d8:90:e1:a5:2b:21:be:c2:0c:13:41:05:f6:5e:3e:e8:36:
         c4:d6:a3:21:ff:d9:3a:a3:19:36:b8:e4:4a:67:6f:af:c8:1b:
         79:7d:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:47:38 2025 by rpki-client