Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3133312e3130302e382e302f32322d3332203d3e203533303635.roa
File:                     3133312e3130302e382e302f32322d3332203d3e203533303635.roa (raw, json)
Hash identifier:          3FVMkK1WJrAWyPyaLowXKXAlc3pedliOEEBaxZ9aOvo=
Subject key identifier:   4B:3B:76:5C:37:45:9B:4F:83:A0:C5:6E:93:72:1F:71:21:7E:52:C5
Certificate issuer:       /CN=4C774192AB5886D743BDEAE813B49508256649E8
Certificate serial:       031B178505E6CCBD5C668503311DBE60FC06F541
Authority key identifier: 4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3133312e3130302e382e302f32322d3332203d3e203533303635.roa
Signing time:             Wed 01 Oct 2025 20:27:14 +0000
ROA not before:           Wed 01 Oct 2025 20:22:14 +0000
ROA not after:            Wed 30 Sep 2026 20:27:14 +0000
asID:                     53065
IP address blocks:        131.100.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl
                          rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1b:17:85:05:e6:cc:bd:5c:66:85:03:31:1d:be:60:fc:06:f5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C774192AB5886D743BDEAE813B49508256649E8
        Validity
            Not Before: Oct  1 20:22:14 2025 GMT
            Not After : Sep 30 20:27:14 2026 GMT
        Subject: CN=4B3B765C37459B4F83A0C56E93721F71217E52C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:36:46:3d:2e:58:35:2e:84:14:fa:17:1c:
                    04:35:44:ba:4c:20:1d:05:70:7e:8c:40:34:0d:0a:
                    82:9d:f6:94:c9:76:99:b5:3b:d2:3e:d1:19:10:a9:
                    30:ea:57:6b:bf:1c:79:96:3c:0b:04:6a:e2:7f:cb:
                    b3:17:26:eb:c7:c5:43:b2:65:7a:08:f6:49:7e:9e:
                    bb:8d:23:f5:5d:bb:34:57:37:6a:8f:20:0a:fc:ea:
                    6a:48:99:63:a4:9c:e7:6f:1e:9f:15:94:03:fe:f1:
                    d1:8c:94:b2:39:b6:81:3f:45:aa:a6:ab:2b:07:60:
                    9f:eb:79:84:95:7b:37:c6:53:0d:ed:de:7f:90:3e:
                    6c:e6:1c:04:96:80:3a:8f:9e:80:ba:92:c2:e3:a2:
                    f8:7d:58:79:53:68:0c:8b:2a:75:74:a4:db:55:e4:
                    c5:57:b9:dd:f5:e6:a4:53:f2:5a:2b:af:98:5e:bb:
                    ae:fe:30:ec:56:8e:1d:50:63:64:6a:74:42:1f:91:
                    04:05:d4:83:8e:eb:4c:83:4e:2d:6b:e3:71:f0:8c:
                    00:19:82:b9:22:3e:17:31:2b:65:89:7c:78:12:e5:
                    01:cb:83:4b:12:22:d9:2a:e7:5c:bb:70:c1:8c:ca:
                    f7:76:b1:d8:60:58:f0:41:e8:9f:56:89:0f:56:8d:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:76:5C:37:45:9B:4F:83:A0:C5:6E:93:72:1F:71:21:7E:52:C5
            X509v3 Authority Key Identifier:
                keyid:4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3133312e3130302e382e302f32322d3332203d3e203533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:81:62:88:ec:c2:d3:62:af:92:36:e7:1c:b7:85:f4:4d:23:
         84:5c:e9:91:19:ab:52:e4:96:cf:75:15:02:23:a2:d8:c7:52:
         ca:02:35:b3:f0:ad:cd:fb:a2:2f:86:38:b1:cc:e7:b9:4c:bf:
         03:3c:bc:2e:52:28:30:48:10:ed:ad:47:26:56:ae:33:0b:05:
         ed:53:d9:50:b0:36:9a:49:b5:ae:83:73:e9:8e:18:32:34:f5:
         25:e5:9e:a9:9e:60:b6:6b:96:2f:f1:6c:a6:d4:0c:80:1f:2e:
         bd:e9:69:30:39:70:38:55:75:69:17:eb:fe:87:4a:8c:9d:2c:
         28:5c:9e:f6:26:3d:86:ce:17:fb:8e:0d:33:f0:22:02:e1:19:
         1e:c2:5c:36:33:e3:61:c1:d1:f9:de:a7:0c:26:fb:75:e7:37:
         b4:bf:05:61:04:0e:05:39:2f:78:60:94:fd:dc:8b:09:9e:56:
         ec:0e:86:b4:b6:b4:39:85:0e:a0:3d:fb:10:7f:60:df:fc:b6:
         aa:b1:1e:83:52:02:90:c3:e1:87:48:81:c7:2f:9f:54:32:ce:
         aa:4a:33:ba:3e:90:6d:a4:98:95:36:52:0a:5e:fd:97:52:5a:
         4a:a9:94:79:6b:0e:ad:66:f9:08:0d:24:a6:34:e4:2f:0c:86:
         55:7e:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:46 2025 by rpki-client