Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          PwvDJfbjftoGLI8o9KH+ApY4e36hS54rKvKXsZCAQvE=
Subject key identifier:   62:75:5B:C8:9C:93:11:78:42:99:67:25:C2:C0:C1:32:05:B1:54:93
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       58E4B2E8661053C30FC7C8FE00FB05546F916C25
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:36:40 +0000
ROA not before:           Thu 26 Jun 2025 00:31:40 +0000
ROA not after:            Thu 25 Jun 2026 00:36:40 +0000
asID:                     265919
IP address blocks:        131.196.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e4:b2:e8:66:10:53:c3:0f:c7:c8:fe:00:fb:05:54:6f:91:6c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:31:40 2025 GMT
            Not After : Jun 25 00:36:40 2026 GMT
        Subject: CN=62755BC89C93117842996725C2C0C13205B15493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:2c:9b:bd:7a:e5:63:9e:9a:cb:0a:a5:67:
                    a6:02:fb:e1:90:40:8e:7b:dc:e1:d9:3d:8b:aa:51:
                    f0:fa:4f:fd:4e:3b:05:3f:39:9e:1f:2d:01:cc:d5:
                    ca:d5:dc:66:06:8b:33:01:62:0d:fc:73:30:b6:32:
                    b0:74:7f:95:6f:0b:2a:e0:9f:2b:35:56:32:13:9c:
                    73:50:d1:17:e9:63:30:50:72:61:78:f5:a0:d5:7c:
                    a8:50:e7:50:3d:d6:e8:2d:d4:02:cd:a4:83:fc:6e:
                    b4:d2:c2:cc:05:51:9e:b4:0e:c4:9c:ee:36:73:22:
                    25:75:dc:ad:91:b9:4e:c8:b8:d7:01:4e:1e:69:4d:
                    08:33:9c:7e:1a:cf:67:2b:52:27:e0:d1:45:a7:09:
                    a0:93:06:f7:90:6d:04:9f:78:02:43:1c:56:0c:d6:
                    62:11:f0:f3:96:bd:bd:2c:e8:42:54:e7:e4:36:37:
                    ef:04:9b:69:66:61:6a:81:e8:c5:d7:7c:aa:f4:3a:
                    ed:a8:52:5d:a9:f0:f1:98:2a:b6:0c:29:06:cc:49:
                    80:bd:fe:f5:2a:1e:bd:6e:6e:6d:63:7b:fc:02:f0:
                    39:13:86:b1:20:84:96:cd:91:59:08:6d:87:73:de:
                    9f:06:1b:bc:d2:93:3e:b9:db:0a:e5:5b:4a:7f:21:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:75:5B:C8:9C:93:11:78:42:99:67:25:C2:C0:C1:32:05:B1:54:93
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:93:3c:e9:d7:d5:ec:c1:c1:ff:4e:e5:d7:2a:c7:f1:42:
         d7:72:b0:dc:fd:ca:05:1a:a8:bc:ee:be:f0:05:87:c9:42:91:
         32:ce:d2:09:e8:3e:3d:69:fe:c6:86:40:c6:9a:89:f6:80:87:
         d9:79:8e:47:1b:c4:98:d1:37:d1:25:3f:4e:76:a3:a0:94:78:
         2e:58:c8:c0:f3:bf:02:b2:e6:8c:75:74:87:2a:6f:bb:66:6f:
         bf:ba:a8:4b:4c:14:b2:d5:49:4a:ad:07:54:d6:71:23:ff:66:
         3b:f5:34:3f:d6:43:12:ac:a5:04:cf:f8:d7:f4:ff:45:b8:3b:
         d2:d8:14:4b:13:9c:3f:f2:69:17:43:03:2e:89:2f:e0:34:2e:
         5a:bf:9d:d8:5d:a3:94:1f:33:83:11:43:41:cf:8e:9a:9a:83:
         de:48:13:8b:a1:86:b7:df:9b:98:88:40:11:6b:0b:03:87:ba:
         97:fa:ee:44:9a:38:aa:4b:60:c6:de:ff:60:eb:95:16:01:26:
         db:01:da:78:87:1b:39:48:5a:2b:8e:a0:12:3a:8e:e2:3e:f8:
         95:6d:08:7e:aa:c6:99:80:5b:46:0f:a0:59:02:15:88:1b:97:
         1f:3c:af:6a:22:6d:86:ab:53:ed:85:00:8f:63:96:1c:b4:14:
         14:d7:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:30:30 2025 by rpki-client