Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32332d3233203d3e20323730373737.roa
File:                     3133312e3136312e3131362e302f32332d3233203d3e20323730373737.roa (raw, json)
Hash identifier:          Hlm5JjdE/loUC2UT7RIKhEGSlC679JkAoz/5JP2Y0bQ=
Subject key identifier:   A4:CE:7D:10:50:3F:E6:AE:95:E0:C9:CD:2E:0B:60:EE:09:62:AE:25
Certificate issuer:       /CN=202D680D4DF230713D515261F90FC214E69FBA3E
Certificate serial:       179CC0A60A557159A0A312F619B2CA598293A62F
Authority key identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32332d3233203d3e20323730373737.roa
Signing time:             Mon 12 May 2025 18:23:05 +0000
ROA not before:           Mon 12 May 2025 18:18:05 +0000
ROA not after:            Mon 11 May 2026 18:23:05 +0000
asID:                     270777
IP address blocks:        131.161.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:c0:a6:0a:55:71:59:a0:a3:12:f6:19:b2:ca:59:82:93:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202D680D4DF230713D515261F90FC214E69FBA3E
        Validity
            Not Before: May 12 18:18:05 2025 GMT
            Not After : May 11 18:23:05 2026 GMT
        Subject: CN=A4CE7D10503FE6AE95E0C9CD2E0B60EE0962AE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:0b:f9:75:8e:24:03:3a:e7:91:3e:95:0f:
                    c5:9f:a5:23:0f:4c:89:51:ff:bd:79:91:92:71:1f:
                    10:6b:ab:a8:83:6d:58:cd:ef:4c:1e:68:41:dd:16:
                    65:78:63:96:7d:3d:6d:dd:c2:f0:0e:2c:14:e0:67:
                    38:53:fc:79:4e:ca:bc:78:6b:7a:0f:d6:13:a0:17:
                    bb:60:ff:4f:f3:85:5b:ad:ad:81:c0:86:42:fe:da:
                    c7:d7:a7:52:4b:6d:f4:d9:b1:9b:68:5b:09:5d:76:
                    32:e3:6f:6a:5d:d2:88:dd:a7:36:ce:f7:73:f7:dc:
                    b2:85:b1:39:0b:de:ff:6c:17:13:14:c5:3c:8e:19:
                    dd:0c:61:09:57:7f:b9:20:4e:30:05:07:44:30:41:
                    ac:ee:67:8d:5c:84:b6:49:fa:88:fc:20:a9:e3:af:
                    e7:3f:84:c7:88:dd:e6:3b:f5:2e:22:12:60:f9:06:
                    72:29:8a:11:6c:72:70:11:58:db:1c:fc:45:10:46:
                    b5:61:23:75:f3:33:96:dc:bd:5b:27:e5:df:89:a3:
                    65:70:b7:02:a9:2d:98:ec:39:1e:c0:be:4e:88:66:
                    a6:5b:e9:47:6a:35:a2:76:d5:5e:f0:27:1d:29:fa:
                    3d:e2:e4:19:15:53:30:1e:a4:68:9a:85:61:88:99:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CE:7D:10:50:3F:E6:AE:95:E0:C9:CD:2E:0B:60:EE:09:62:AE:25
            X509v3 Authority Key Identifier:
                keyid:20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32332d3233203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:62:e1:bc:fd:ec:4d:b1:1f:9c:99:ec:a5:0f:3a:cc:bc:d1:
         78:49:f9:b7:51:cf:dd:fe:eb:68:e3:6f:2e:bd:ee:3b:de:dd:
         02:19:02:32:cd:bd:02:f2:39:50:8d:aa:99:20:93:bc:09:fd:
         f6:9e:67:75:ba:e2:70:7f:35:1c:2b:f4:7e:fe:fc:48:c1:3f:
         d9:d1:e4:1d:94:75:3b:c6:89:eb:32:a1:0c:bd:dc:96:0d:46:
         cb:0a:e3:fc:70:5d:8b:d6:6d:c8:09:51:e8:d9:18:6e:0b:28:
         c9:05:05:4f:f2:28:48:09:a4:e8:25:c1:35:f4:8e:94:14:2c:
         dd:ff:17:c4:d0:ef:2b:16:08:b6:72:0a:22:77:7d:a3:2c:72:
         1a:77:d7:02:2b:4b:5c:27:40:f1:ff:e8:3d:54:98:2f:6c:e4:
         1c:8d:60:6b:eb:95:45:8e:58:60:89:0c:db:c8:37:5c:76:f5:
         8d:61:7d:11:85:bb:14:be:ca:34:35:08:ed:89:a4:6c:6e:12:
         48:70:c9:d4:7e:23:0d:a3:e7:12:08:5b:7b:79:4e:55:7c:14:
         84:70:ca:9c:db:50:3b:ee:bc:00:d7:8e:f4:ea:57:27:e2:a4:
         d7:63:37:93:3f:69:f8:53:a6:63:88:aa:66:d7:6e:72:f8:3a:
         e6:75:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:51:44 2025 by rpki-client