Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133312e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133312e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          2nhjxO0wMw7an+CHivExSTZDY4jVnfxLf+mTsHrmg24=
Subject key identifier:   59:98:A9:38:4F:0A:58:AD:B5:46:1D:C0:C9:B5:3E:68:2C:9B:A8:19
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       3F59C2812251E44F009109BB263877B0856CB15F
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133312e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 07 May 2025 18:46:15 +0000
ROA not before:           Wed 07 May 2025 18:41:15 +0000
ROA not after:            Wed 06 May 2026 18:46:15 +0000
asID:                     53225
IP address blocks:        186.251.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:59:c2:81:22:51:e4:4f:00:91:09:bb:26:38:77:b0:85:6c:b1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  7 18:41:15 2025 GMT
            Not After : May  6 18:46:15 2026 GMT
        Subject: CN=5998A9384F0A58ADB5461DC0C9B53E682C9BA819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:85:75:11:df:3d:d6:e5:67:de:c4:40:ff:
                    8b:02:f5:80:b3:24:03:02:dc:28:48:f7:11:59:5d:
                    bb:43:0b:67:2a:ca:ce:a2:bb:79:d6:46:50:c3:0a:
                    14:29:92:7c:b2:0b:e7:f4:7f:e6:e6:71:65:8c:f8:
                    20:74:32:ac:bd:6d:73:06:98:60:0e:8d:a7:34:24:
                    5c:68:80:2c:ed:6a:a2:d9:79:31:3a:0c:f4:c3:91:
                    a7:11:0b:b7:9e:66:4b:51:92:31:f3:06:f1:18:dc:
                    65:3f:ca:d0:1c:11:b0:14:da:9e:13:e8:86:de:e8:
                    d9:7f:16:cf:0d:00:6e:8e:ca:7e:c2:7a:f5:39:96:
                    2b:10:4c:c0:f6:42:66:1d:57:10:ba:96:c6:ba:3e:
                    73:66:f3:12:93:d6:56:22:cf:3c:1c:31:df:e3:65:
                    a0:cd:6d:73:3e:3f:f2:c9:8b:46:63:9d:ad:d9:f7:
                    80:ac:49:ca:6a:b9:6b:19:bf:3d:b7:f8:f6:8c:65:
                    a4:b4:e4:0b:3f:41:09:ee:38:01:43:59:2f:a5:76:
                    09:91:50:76:26:17:e5:95:3d:95:27:0a:68:b0:01:
                    02:0f:5e:cd:f4:22:dc:30:f9:23:25:67:cf:b5:88:
                    a3:20:b6:77:af:c5:4e:2f:08:b8:61:5a:67:42:58:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:98:A9:38:4F:0A:58:AD:B5:46:1D:C0:C9:B5:3E:68:2C:9B:A8:19
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133312e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:ff:b8:98:e2:a2:f8:bf:a1:47:35:d5:8c:d9:0b:17:08:
         56:4e:62:df:c2:ef:08:10:4c:ae:78:4c:29:23:3d:3b:07:e9:
         b8:38:1d:cb:1a:25:c5:81:b3:14:0e:e3:83:67:52:fa:4b:a1:
         d1:0f:68:17:e1:dd:19:9b:7f:1c:07:6c:43:79:73:b5:03:29:
         f0:ab:6a:d9:dc:c4:76:5c:bb:69:96:67:30:d4:50:3e:ec:3f:
         5e:80:bf:c0:00:83:be:78:b7:d6:d0:9f:b8:b6:b2:97:d3:cf:
         3a:45:a6:d5:ad:b5:bf:9f:2b:63:a4:a5:19:3f:94:d5:5d:f4:
         74:5c:9d:e6:d2:2a:f4:42:84:6f:b1:89:25:69:29:25:93:f4:
         8e:06:cf:42:8e:42:a5:80:22:92:c0:1c:a4:fe:f4:74:02:48:
         d7:06:b4:18:c7:4b:58:5f:ac:80:9d:51:66:f1:a9:61:c8:89:
         60:02:d0:f7:4a:17:8b:f3:1a:14:1b:92:12:e6:db:92:fb:3d:
         0e:39:4c:c5:49:62:e8:48:69:12:94:99:f0:65:6c:bd:4b:ca:
         63:d9:b0:cf:94:73:a5:a5:fd:41:cd:78:98:4a:8b:f0:c7:99:
         71:51:a0:fb:5f:f0:79:14:4f:8b:0b:e2:e1:4b:04:c2:ca:2e:
         96:56:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:19:13 2025 by rpki-client