Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230322e302f32342d3234203d3e20323635393930.roa
File:                     3133312e3139362e3230322e302f32342d3234203d3e20323635393930.roa (raw, json)
Hash identifier:          ZHpoHAIO9ARH5T0sknFloX36Is5+ji0GIMw5NpMln/Y=
Subject key identifier:   BE:A4:CB:A0:77:83:03:FB:5B:78:49:08:E6:0E:86:AC:07:2C:C6:8F
Certificate issuer:       /CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
Certificate serial:       427697F176F5DB0CA79E3D897A26B038DE626BB0
Authority key identifier: B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230322e302f32342d3234203d3e20323635393930.roa
Signing time:             Tue 10 Jun 2025 19:52:06 +0000
ROA not before:           Tue 10 Jun 2025 19:47:06 +0000
ROA not after:            Tue 09 Jun 2026 19:52:06 +0000
asID:                     265990
IP address blocks:        131.196.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl
                          rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:76:97:f1:76:f5:db:0c:a7:9e:3d:89:7a:26:b0:38:de:62:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
        Validity
            Not Before: Jun 10 19:47:06 2025 GMT
            Not After : Jun  9 19:52:06 2026 GMT
        Subject: CN=BEA4CBA0778303FB5B784908E60E86AC072CC68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:41:41:8a:ee:2c:59:c8:9c:c8:f4:6e:79:
                    1a:3d:c9:1e:0e:20:33:ac:3e:5f:80:07:b0:72:50:
                    d3:30:33:62:09:0b:c9:a4:8d:ab:1e:20:9a:1a:fe:
                    7c:1f:1c:b5:73:ac:9e:3e:f2:fa:3f:e7:9a:ea:5a:
                    c6:8d:d5:9b:ec:cf:55:c5:14:09:36:47:06:c7:9c:
                    0c:9e:a5:3f:1f:15:4d:5a:6d:0a:82:53:ce:af:1c:
                    55:d6:30:6d:be:45:68:8f:ed:91:4a:27:42:4a:0f:
                    3e:16:8c:25:a3:d7:27:8d:0f:4a:45:c1:98:c8:89:
                    f8:9f:57:ac:3c:08:9b:22:66:bd:1f:62:2c:94:62:
                    78:87:08:1f:c3:9c:17:19:74:cf:f4:04:0b:8f:ca:
                    98:64:f5:73:11:c4:2e:60:92:c1:d6:28:97:1e:4b:
                    a4:7e:b2:87:9e:48:65:49:96:a4:ff:92:0c:45:52:
                    71:af:c2:ee:2e:37:fa:f0:6e:88:61:0c:a2:d4:97:
                    6f:53:58:af:a8:43:b8:41:5f:f4:e5:3a:4a:de:a4:
                    7b:1b:a9:86:e2:72:48:33:6d:96:ed:90:79:74:9d:
                    cd:09:db:1c:24:2a:52:d4:a5:76:da:bb:c1:f0:4e:
                    f6:02:b9:c5:a7:73:d6:c0:a9:e2:02:37:c4:66:fa:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:CB:A0:77:83:03:FB:5B:78:49:08:E6:0E:86:AC:07:2C:C6:8F
            X509v3 Authority Key Identifier:
                keyid:B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230322e302f32342d3234203d3e20323635393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:65:15:3b:01:60:48:08:4b:f8:db:fc:41:62:57:9b:90:
         88:59:e8:71:9a:65:bd:db:f6:f2:97:c7:f7:6e:33:e3:68:fa:
         7a:74:02:1e:06:b5:69:43:a0:40:d3:92:9e:c5:0f:92:ef:16:
         bd:7b:6f:b1:fa:fb:d7:42:74:96:d7:b2:ee:bf:1c:f1:fa:30:
         64:d3:9f:2c:83:f1:ae:53:d4:6e:92:be:77:73:c1:ed:57:75:
         f6:9a:b6:ba:a1:af:dd:1b:6e:4d:28:ab:d4:b3:bc:b7:5b:d2:
         34:cd:5f:49:d1:41:97:1e:99:e9:b6:7f:d9:97:e9:07:6d:be:
         ea:41:53:be:34:88:d7:b9:54:5f:67:06:30:28:fa:88:7d:05:
         85:a4:62:10:c6:da:7c:ca:86:04:34:c6:7c:5b:68:b6:3c:99:
         a1:5e:bd:42:9e:49:f3:91:93:c2:58:c4:19:4a:88:02:a5:8c:
         ea:d4:3c:51:13:e4:ec:17:36:57:c7:ed:12:15:77:f2:99:66:
         4d:ba:b3:14:e3:34:5e:d9:ff:d2:e4:39:5b:1b:da:27:17:bf:
         69:01:b5:51:af:43:6c:a0:d6:0a:85:9b:27:de:df:96:98:d5:
         88:86:e8:72:95:e2:b1:13:05:59:a9:56:c7:db:31:4f:39:72:
         7e:b0:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:32:32 2025 by rpki-client