Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
File:                     3133312e3139362e342e302f32322d3332203d3e20323635383930.roa (raw, json)
Hash identifier:          Py5mI5u1K2w7G+TkR6KDVHUmgz6dxGcXcVJ7IUaJs4g=
Subject key identifier:   B8:DE:E3:92:16:90:05:E4:16:E4:F9:FD:B0:71:DB:87:31:55:B1:18
Certificate issuer:       /CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85
Certificate serial:       2B302FC61DCB68825B8EC0EA278C87F06A100ED1
Authority key identifier: D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
Signing time:             Sun 22 Jun 2025 15:12:47 +0000
ROA not before:           Sun 22 Jun 2025 15:07:47 +0000
ROA not after:            Sun 21 Jun 2026 15:12:47 +0000
asID:                     265890
IP address blocks:        131.196.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl
                          rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Jul 2025 21:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:2f:c6:1d:cb:68:82:5b:8e:c0:ea:27:8c:87:f0:6a:10:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85
        Validity
            Not Before: Jun 22 15:07:47 2025 GMT
            Not After : Jun 21 15:12:47 2026 GMT
        Subject: CN=B8DEE392169005E416E4F9FDB071DB873155B118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:0e:7e:cb:a8:84:48:54:09:07:bc:be:58:
                    53:e6:00:42:9c:0c:ab:7c:38:7e:8f:8d:67:9c:3e:
                    ab:07:e3:1e:49:bf:39:1e:0e:1e:d2:7f:68:58:56:
                    3d:e7:6f:b9:7f:4a:b1:f9:12:7d:5f:ac:66:81:a9:
                    56:e0:ff:50:1d:e4:fb:f1:25:a1:ce:c8:3a:ec:c9:
                    7e:3c:90:c5:ed:8b:46:20:2e:da:12:c5:cc:1e:ad:
                    b1:64:ee:88:b5:9c:c6:4b:eb:fa:d8:2b:c1:37:0e:
                    4d:fa:23:12:5d:a4:c6:70:83:b4:98:e7:b6:88:22:
                    9f:fc:8a:67:6a:3d:b8:4b:e3:fd:86:69:8a:c9:bc:
                    69:4d:cc:4e:e8:8d:08:23:e1:3a:b5:8d:47:fc:c2:
                    04:a0:f8:e2:d4:1a:74:54:86:fb:5c:45:bb:9f:45:
                    80:10:c2:e1:8e:22:1e:e8:d7:49:3a:8e:b9:76:ca:
                    27:95:aa:96:d1:bd:c3:20:e3:9d:f7:4a:ec:d0:55:
                    72:7f:30:03:e5:c4:cd:6f:ff:9f:b2:0f:20:74:3d:
                    1e:3c:78:bb:f2:71:f9:5b:17:18:5b:e8:b9:d5:8e:
                    05:0e:99:6a:01:60:5a:e3:55:36:93:ba:f4:f9:eb:
                    4c:3d:47:3b:07:ba:82:d6:5c:49:73:82:c9:52:84:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:E3:92:16:90:05:E4:16:E4:F9:FD:B0:71:DB:87:31:55:B1:18
            X509v3 Authority Key Identifier:
                keyid:D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:cb:0a:64:f0:03:fd:ef:47:ee:e9:56:11:f7:14:16:4a:
         e1:5e:8f:b1:51:87:db:93:2d:d1:0f:85:e4:cd:26:af:df:f5:
         e5:40:1b:24:26:95:cc:ca:ac:39:1d:02:48:fb:30:88:ce:23:
         81:09:2d:77:21:7d:01:34:ba:7f:c9:7d:2d:c6:d5:08:d0:cd:
         d6:8c:06:5d:97:d7:29:ee:ce:74:51:71:01:23:a6:f9:16:8d:
         32:6d:c6:eb:1e:f1:68:99:13:a6:b1:04:6a:d4:5a:9d:ea:a0:
         9e:7f:a5:43:52:40:91:3f:9f:6b:d8:ca:d2:34:a1:03:f3:a7:
         6c:24:54:91:9a:0c:80:86:8e:58:10:32:b0:60:72:51:30:5b:
         2a:1f:70:62:79:b2:0f:0c:1a:9f:c3:4c:ff:73:33:ca:9f:68:
         c9:3e:52:e8:85:90:ea:d6:53:94:60:1e:58:3b:d7:0e:5d:b2:
         71:55:30:05:38:e6:a1:9a:8e:9f:71:4a:27:16:60:e8:34:67:
         d6:0f:9b:cf:c5:38:95:12:59:34:0b:b0:55:74:9d:56:3a:69:
         65:d9:ba:cd:2a:82:a1:c1:3b:fb:a6:f2:82:6d:19:7a:fb:e1:
         43:1d:bf:32:77:57:7a:16:9f:61:a5:cb:4a:d5:12:a3:e6:3d:
         38:0c:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 12:31:11 2025 by rpki-client