Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa
File:                     3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa (raw, json)
Hash identifier:          +qTJGe03JHIv8u09ImKt0m6rTCGBA1pWbc7PfD9sACc=
Subject key identifier:   4E:24:EA:1C:E9:7F:4C:BC:DE:47:EE:21:BF:11:62:2E:1A:A7:94:73
Certificate issuer:       /CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
Certificate serial:       48FAD5413CFC099AD8FA52B48E53CD7BE9DA778A
Authority key identifier: 49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa
Signing time:             Tue 01 Jul 2025 15:36:45 +0000
ROA not before:           Tue 01 Jul 2025 15:31:45 +0000
ROA not after:            Tue 30 Jun 2026 15:36:45 +0000
asID:                     264503
IP address blocks:        131.255.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl
                          rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fa:d5:41:3c:fc:09:9a:d8:fa:52:b4:8e:53:cd:7b:e9:da:77:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
        Validity
            Not Before: Jul  1 15:31:45 2025 GMT
            Not After : Jun 30 15:36:45 2026 GMT
        Subject: CN=4E24EA1CE97F4CBCDE47EE21BF11622E1AA79473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:81:14:e1:8f:c7:52:f7:b7:72:95:df:2e:
                    0f:99:65:d6:b2:d3:ce:04:ca:f4:2e:d0:88:94:6e:
                    85:03:bb:ef:7f:b3:68:23:1a:9f:b4:ac:30:ab:29:
                    d8:ed:5d:b7:6c:5c:74:86:7c:6b:36:13:f8:5a:44:
                    e1:7b:6f:e2:ec:93:14:ce:62:00:9d:f6:01:c9:b0:
                    60:0c:02:75:7f:c8:5e:03:47:4a:9f:7e:e2:7a:85:
                    59:b0:79:8c:3f:c5:c0:dd:d6:ac:84:2b:7e:4e:cd:
                    e2:3c:e1:79:76:4b:7b:81:76:32:f5:a0:b0:c9:43:
                    98:50:01:2d:10:85:43:59:7e:43:ef:93:dc:83:02:
                    71:25:3b:0e:d0:69:2f:e4:c8:f6:e3:d7:36:7d:63:
                    94:a6:85:0e:e6:29:8d:ef:2e:3e:30:c5:9a:d1:ef:
                    58:c5:a5:20:51:cf:9f:e9:69:40:78:dc:ea:02:d8:
                    19:08:b9:52:ec:2f:6e:f0:c6:b1:69:7c:6c:c0:73:
                    63:42:81:89:b3:81:bd:00:8f:33:30:ad:71:91:e7:
                    2c:35:34:cb:9b:1a:ea:fd:54:a2:82:7b:cb:57:4c:
                    24:48:b2:b8:69:d8:3c:45:a7:9a:fa:df:df:08:8d:
                    73:1f:31:c2:07:f2:c3:76:1a:54:b5:10:02:17:94:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:24:EA:1C:E9:7F:4C:BC:DE:47:EE:21:BF:11:62:2E:1A:A7:94:73
            X509v3 Authority Key Identifier:
                keyid:49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b8:39:26:49:06:49:28:db:53:0c:b8:25:a6:27:f7:ad:e7:
         49:95:3f:a5:01:92:5c:da:76:7d:a3:60:c8:fa:de:53:2f:76:
         53:99:0c:8a:c3:8d:6c:d2:87:f0:9b:91:b4:55:0b:01:03:a5:
         4c:59:c0:cb:10:90:f8:93:f2:94:18:b4:b2:ac:a2:0b:e5:1c:
         7f:ae:82:6c:ba:e5:f6:4a:bc:1c:55:71:8e:15:ec:7c:97:32:
         52:3e:71:61:65:32:9d:bc:54:4c:c1:e6:a8:f8:90:cd:97:d1:
         e8:a6:24:b7:85:b8:a1:7e:da:db:4b:b1:9d:c2:b2:b6:65:19:
         3c:ca:57:f9:bf:d7:0e:d3:52:f6:7a:18:ec:15:fe:7b:0c:d6:
         2d:6e:f4:fd:da:ea:f4:1e:cc:b7:d1:a7:3b:18:af:a2:41:ff:
         c1:1e:e3:75:44:78:24:10:fd:62:14:e9:43:81:07:a7:7a:d1:
         35:66:fe:6f:b1:21:29:0f:b4:05:fa:b4:c2:6c:99:88:03:33:
         35:12:44:cd:c6:fd:c6:3c:a3:5e:00:35:95:91:1b:02:49:1d:
         30:ee:15:e0:9b:c4:cf:40:17:a9:a9:85:99:1d:24:52:bb:55:
         92:27:0e:cb:9b:60:46:45:0f:d9:ff:32:8a:e7:67:87:8a:b3:
         eb:3f:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:28:40 2025 by rpki-client