Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
File:                     3133312e302e3230302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          rzHtbnMn1VOgLVP2wfDhsQmfAgSKmdgrHpTQ6p1OTAI=
Subject key identifier:   2E:F8:89:91:63:8F:F3:2F:83:2A:78:8D:58:EC:4F:7C:37:09:A9:AA
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       1F8686B8AF653A4ED9BF2672D150F05382ABF859
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:18 +0000
ROA not before:           Fri 15 Aug 2025 20:26:18 +0000
ROA not after:            Fri 14 Aug 2026 20:31:18 +0000
asID:                     28649
IP address blocks:        131.0.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:86:86:b8:af:65:3a:4e:d9:bf:26:72:d1:50:f0:53:82:ab:f8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:18 2025 GMT
            Not After : Aug 14 20:31:18 2026 GMT
        Subject: CN=2EF88991638FF32F832A788D58EC4F7C3709A9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:2f:35:6f:8c:20:82:0d:58:8c:78:85:51:
                    29:91:11:4e:b7:35:6f:9d:90:6a:66:f1:26:45:f8:
                    87:5a:80:9f:83:ea:50:ce:53:60:36:22:ea:5c:c6:
                    2f:ef:09:a6:e6:b0:2d:1a:cd:d4:f2:25:9b:1f:45:
                    a3:57:a0:6e:f2:78:a6:c6:a8:de:b4:81:bf:03:d7:
                    51:37:ea:f5:13:0f:48:1d:61:81:eb:8e:86:9d:3a:
                    a9:72:e6:c2:03:46:1d:4d:73:ee:f7:b3:f7:e4:62:
                    7a:09:ec:c0:cd:d6:75:51:18:9c:64:d0:a9:a8:74:
                    28:df:d3:5e:02:0d:e1:37:3e:ab:d8:a7:5e:0b:e8:
                    1d:0b:08:7e:e5:c4:ef:dc:b1:08:45:0a:5a:7e:8b:
                    ed:55:53:11:b8:14:35:e1:0f:85:84:0b:a9:37:2a:
                    a9:bf:38:a0:0d:12:fe:6c:7b:4b:c1:10:20:ba:82:
                    cc:d3:7b:00:51:da:54:f5:97:05:46:9d:92:d7:ea:
                    b3:90:aa:7c:d9:7c:01:00:ab:18:d3:9f:b4:a8:5f:
                    e9:d1:47:93:44:7a:01:b5:c1:44:c2:34:5e:db:22:
                    96:36:ab:c6:ff:6c:e9:29:a2:a1:21:e7:b5:39:cb:
                    6e:b6:ac:11:ef:00:d4:a0:7d:9a:26:36:94:ab:5a:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F8:89:91:63:8F:F3:2F:83:2A:78:8D:58:EC:4F:7C:37:09:A9:AA
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:8d:f7:39:8c:7f:ba:e0:2f:ec:d4:76:2c:68:56:fb:fb:
         ae:4a:7a:7f:11:90:1a:46:0b:35:26:ea:fd:80:ba:21:6d:fc:
         77:70:f6:9c:d9:7a:03:0a:77:5f:ca:a7:b7:e0:62:f4:f3:9a:
         1a:3c:5c:58:7d:4c:ef:16:b0:b2:96:c8:25:89:2a:f2:97:62:
         81:08:b7:ad:93:28:67:c2:b3:b8:c5:81:fb:8f:26:bb:04:bf:
         35:eb:d8:b2:30:6c:b2:c3:7c:7b:44:6d:ae:af:99:42:ef:6c:
         9b:c5:71:01:90:9a:d7:be:58:75:27:43:7b:60:22:97:40:d2:
         88:57:91:f9:08:c0:44:73:58:8d:a6:94:7c:08:32:ed:d6:5f:
         94:c6:fb:32:36:11:8b:1a:d5:5d:6d:bc:0b:71:a2:c6:fe:fd:
         4a:8c:75:28:39:df:84:99:b3:0d:af:5a:a1:bd:09:d0:b3:19:
         eb:b5:c4:bf:4c:7c:e6:d5:d6:b1:9d:d2:ff:fd:7b:40:db:6e:
         02:54:f5:25:cb:3c:a4:0d:55:64:1b:35:1f:8a:d1:5e:77:73:
         57:be:d2:84:15:30:b5:95:9d:68:43:70:87:0f:7c:73:a7:a3:
         77:b8:75:dd:48:72:20:a8:90:13:00:1e:bd:af:53:72:79:15:
         63:14:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:45 2025 by rpki-client