Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3234203d3e20323635393930.roa
File:                     3133312e3139362e3230302e302f32322d3234203d3e20323635393930.roa (raw, json)
Hash identifier:          TNU45i7hbZeppmLclfmrtEKccMognPJi84XGb4L6Skg=
Subject key identifier:   EC:BE:C6:21:08:D5:11:0B:AD:AB:67:01:93:D2:DA:3A:30:A8:18:51
Certificate issuer:       /CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
Certificate serial:       68DE73DF50948A62B13BB980CAAE207B4F1C5297
Authority key identifier: B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3234203d3e20323635393930.roa
Signing time:             Thu 12 Jun 2025 13:04:30 +0000
ROA not before:           Thu 12 Jun 2025 12:59:30 +0000
ROA not after:            Thu 11 Jun 2026 13:04:30 +0000
asID:                     265990
IP address blocks:        131.196.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl
                          rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:de:73:df:50:94:8a:62:b1:3b:b9:80:ca:ae:20:7b:4f:1c:52:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
        Validity
            Not Before: Jun 12 12:59:30 2025 GMT
            Not After : Jun 11 13:04:30 2026 GMT
        Subject: CN=ECBEC62108D5110BADAB670193D2DA3A30A81851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:fc:99:34:0e:f2:7c:2f:95:5f:05:8e:80:
                    ef:dc:d7:db:ec:2d:d7:ae:fd:36:d7:a8:73:8f:fd:
                    ed:6a:1c:3c:6b:3e:97:35:06:fb:5d:ad:c2:97:d6:
                    30:55:bc:6e:a3:e4:04:6d:56:d9:31:34:01:25:88:
                    09:ad:72:38:ce:09:d0:05:46:a6:8d:28:57:44:b7:
                    24:01:35:73:65:21:07:00:97:80:d8:06:fb:53:9c:
                    4f:c7:f0:43:55:bb:cb:77:05:cf:f1:f2:3b:9c:b8:
                    bf:45:6f:29:2e:40:29:00:83:96:f6:45:f4:22:d5:
                    7a:59:0a:86:97:55:f5:17:cb:7d:38:45:5d:5a:d3:
                    32:e4:2f:c0:5a:39:5b:04:45:ff:19:c7:c7:57:58:
                    50:45:d7:bc:a2:e6:42:1e:0c:0d:43:52:df:73:78:
                    97:a7:82:fe:32:c3:bd:df:3d:41:4b:60:d6:e4:21:
                    e3:44:72:b1:23:85:fb:da:40:17:f0:a2:ac:35:02:
                    7e:fc:00:4a:30:df:7c:97:c6:b3:af:9e:55:10:96:
                    62:17:34:7e:a0:05:32:a6:65:a6:30:51:06:c0:4c:
                    9f:c7:96:7c:a9:b2:ee:4a:13:08:78:99:23:af:57:
                    00:9e:da:dd:83:b7:e7:04:da:11:3e:ae:be:a8:13:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BE:C6:21:08:D5:11:0B:AD:AB:67:01:93:D2:DA:3A:30:A8:18:51
            X509v3 Authority Key Identifier:
                keyid:B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3234203d3e20323635393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:87:7f:c4:31:19:51:88:10:0b:6a:e7:1f:68:b1:db:d4:
         6b:29:a1:c6:45:30:53:17:82:b9:0f:aa:2b:41:62:0d:3f:36:
         4a:b6:3a:19:df:b7:35:78:1a:99:7c:16:b2:e7:c0:d3:7a:c8:
         04:40:4e:10:47:c3:7a:36:20:ca:65:64:88:d6:5a:b8:02:2a:
         16:fc:b0:7d:9c:50:4f:a2:53:b9:48:ae:f4:ba:e8:16:02:b9:
         02:37:ad:78:55:68:f2:a1:1f:e3:96:92:63:97:24:d4:60:da:
         95:5d:f4:9b:e6:06:57:92:c7:0f:6e:c3:8a:52:1b:36:86:ed:
         5f:ad:4a:66:7b:54:0b:de:70:53:13:27:16:1d:5c:2c:4e:ab:
         0e:c5:86:f0:39:43:b1:ea:b6:53:28:1f:1b:a3:51:35:62:1f:
         6d:bb:8a:2d:0d:7c:f6:ce:f6:91:d8:12:77:3c:d4:32:26:75:
         f0:1e:28:2e:4a:87:60:1d:da:81:b0:22:ac:72:70:38:1a:f1:
         51:b9:93:c0:f0:6f:0d:2d:1b:97:e8:42:a4:31:82:84:65:f2:
         0b:29:a8:b6:70:2f:7a:b2:e1:17:87:ed:fb:b9:23:51:4d:4f:
         e4:ac:2d:85:ad:2d:1c:fc:c0:0c:27:96:f4:9d:5b:0c:45:46:
         98:11:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:46:22 2025 by rpki-client