Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa
File:                     3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa (raw, json)
Hash identifier:          aUhcrNfNzUX3Q3qixMyLCaS8pf54EETSWQQNsfzTm6s=
Subject key identifier:   29:41:71:64:41:16:30:A7:64:C7:F6:34:2D:97:0D:20:DA:56:F1:47
Certificate issuer:       /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
Certificate serial:       4996D6AB5C781A14D98AB4F8617009578EEC3920
Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa
Signing time:             Mon 21 Jul 2025 22:08:04 +0000
ROA not before:           Mon 21 Jul 2025 22:03:04 +0000
ROA not after:            Mon 20 Jul 2026 22:08:04 +0000
asID:                     264353
IP address blocks:        131.108.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl
                          rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:d6:ab:5c:78:1a:14:d9:8a:b4:f8:61:70:09:57:8e:ec:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
        Validity
            Not Before: Jul 21 22:03:04 2025 GMT
            Not After : Jul 20 22:08:04 2026 GMT
        Subject: CN=29417164411630A764C7F6342D970D20DA56F147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:1a:18:16:74:a7:cd:f5:58:e0:22:e2:f4:
                    b4:61:d6:8c:5c:95:ca:f4:8d:ba:76:74:82:53:bb:
                    42:c1:ce:31:fc:9c:c7:33:c3:88:bc:fe:d4:fd:9d:
                    49:57:18:60:8f:ab:59:b5:e6:ad:5a:b7:99:90:dd:
                    bf:aa:78:62:85:a7:6d:c0:97:a3:82:7b:e1:ce:10:
                    11:fa:c6:40:6c:9a:70:62:1f:26:62:25:e1:de:a7:
                    8f:0f:17:da:18:82:fa:6a:46:12:8a:98:f8:5c:e9:
                    b3:a6:e4:bb:8d:c0:c1:67:1a:2d:1d:f9:67:ef:8a:
                    7e:02:fd:fd:cd:9c:94:32:8a:fd:8c:b6:c4:fc:7d:
                    78:2a:6f:93:8a:1d:99:a0:f8:6b:4d:c0:b4:0c:ad:
                    7d:c2:2a:b3:1c:3f:82:8d:a0:21:45:61:fb:e9:6b:
                    e5:4e:67:ba:bf:e1:c5:ef:13:4f:62:7f:4f:6f:dc:
                    b2:7a:94:44:e2:96:ef:45:58:de:11:49:ce:61:9c:
                    a5:51:e6:77:60:20:9e:ed:ee:10:d9:91:e6:44:4f:
                    ac:ca:94:cb:35:f7:32:86:60:e1:1b:e9:91:2c:f6:
                    39:f3:0f:2f:b7:a5:24:3e:a5:0a:0a:a0:2d:84:9f:
                    bd:0f:80:98:a3:d2:80:f9:c6:e8:21:08:d4:79:30:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:71:64:41:16:30:A7:64:C7:F6:34:2D:97:0D:20:DA:56:F1:47
            X509v3 Authority Key Identifier:
                keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:77:bb:d7:cf:d6:2f:e6:12:b8:a7:08:e1:68:02:63:6e:
         42:17:6f:95:10:71:1e:b0:72:18:2c:19:11:ac:4f:c2:0e:37:
         3b:15:9e:8e:b4:04:e3:ad:9f:de:af:4c:ed:d5:cc:86:c5:9a:
         80:bb:e8:10:93:c7:0d:2d:48:74:41:12:9d:03:28:72:94:57:
         44:a0:31:91:59:95:9f:8f:7c:23:36:2b:31:a0:50:44:c8:c6:
         05:a2:0a:53:f1:35:c9:70:78:8c:57:82:dd:3b:35:0b:7f:b6:
         b2:44:d7:18:99:0a:ec:96:81:21:b6:c2:8d:c8:e0:5e:a0:d1:
         36:c5:d0:5b:d0:29:15:f9:ed:cd:53:a4:2f:8f:d8:19:db:7d:
         e8:67:2b:11:78:76:f9:9b:a5:ed:0b:f3:a8:48:a5:e2:30:32:
         cc:5d:d0:2b:5f:4c:81:a7:41:d0:05:c1:40:57:40:35:f7:ce:
         56:9b:06:7b:81:88:f1:a3:48:92:0c:5e:e8:42:14:7e:32:34:
         ec:64:06:39:b7:62:07:e3:3a:26:a8:0f:69:ba:34:5c:e3:2e:
         7c:0d:d9:2b:ce:1a:72:13:bb:7c:57:18:58:01:b2:ad:07:ae:
         06:44:56:89:bf:1f:19:1c:ce:21:3f:03:d6:60:f1:9e:61:46:
         8e:e9:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:16 2025 by rpki-client