Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e203238333237.roa
File:                     3133312e302e32302e302f32322d3332203d3e203238333237.roa (raw, json)
Hash identifier:          s2/kAKjnFX6aRyyXodEUttWXr6XdHhQ5QyULnEcQnAU=
Subject key identifier:   2C:F5:12:23:DF:42:DF:9C:E4:95:2F:60:54:98:52:39:5B:00:B1:DF
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       1EF79AF019BF233C33E7435ABFF05D05DB28DC1C
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e203238333237.roa
Signing time:             Mon 14 Jul 2025 21:56:14 +0000
ROA not before:           Mon 14 Jul 2025 21:51:14 +0000
ROA not after:            Mon 13 Jul 2026 21:56:14 +0000
asID:                     28327
IP address blocks:        131.0.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f7:9a:f0:19:bf:23:3c:33:e7:43:5a:bf:f0:5d:05:db:28:dc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Jul 14 21:51:14 2025 GMT
            Not After : Jul 13 21:56:14 2026 GMT
        Subject: CN=2CF51223DF42DF9CE4952F60549852395B00B1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:f5:61:b6:4c:0f:ad:31:df:e9:a4:13:6d:
                    12:df:91:f6:a3:15:6e:aa:37:97:d4:a5:83:72:2c:
                    43:d1:48:5c:da:5b:46:f6:3f:18:ff:d2:d5:4d:4d:
                    85:5b:5c:dd:17:c6:93:9e:d5:fd:8d:14:d7:2d:0e:
                    2f:5e:ee:e1:a7:be:a8:8a:46:08:09:10:b1:f7:82:
                    f8:7d:b2:ab:12:33:41:f4:41:e3:be:44:d5:8e:71:
                    6c:52:7c:bb:ed:92:2d:8c:90:0a:4a:1d:5d:c7:9c:
                    33:b5:9e:b3:a1:04:53:27:e8:6b:fd:22:51:d1:66:
                    bb:e0:fa:e6:d4:96:e4:20:29:f2:29:ef:20:49:17:
                    35:17:28:97:a1:2d:13:d3:8c:d7:e4:dd:41:04:ab:
                    8c:2f:9e:e8:41:38:d9:1d:79:98:32:05:e7:7f:ee:
                    a9:a3:a3:36:d3:02:2f:68:f8:30:3a:af:f0:5b:38:
                    fd:e0:40:33:8a:2a:f5:f5:69:d1:c9:3c:c4:aa:eb:
                    e9:21:1a:2d:64:46:b8:76:fb:23:02:52:5a:8a:32:
                    97:f9:4c:5b:95:f4:8f:da:e3:b0:7b:ef:74:14:37:
                    b9:01:20:de:3c:aa:f7:b4:aa:56:42:08:2b:d8:30:
                    30:70:fe:ce:a5:e8:af:6d:2e:e7:14:39:78:f3:2a:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:12:23:DF:42:DF:9C:E4:95:2F:60:54:98:52:39:5B:00:B1:DF
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e203238333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:ee:12:25:0b:c2:d5:a3:56:2d:fc:91:c9:75:e5:a2:89:
         76:8a:6a:ed:64:3b:59:b7:3b:fa:87:c0:a5:d9:c9:9e:3f:80:
         0d:29:ae:4c:b8:1f:7f:9c:c3:83:b9:17:48:50:57:f1:17:10:
         56:29:8a:91:a5:c3:7a:97:ab:df:90:b7:db:75:47:83:37:b6:
         65:77:45:45:4b:da:23:66:aa:98:89:30:55:8d:54:b3:0b:aa:
         19:d1:e3:a9:1d:2a:25:33:16:dc:55:8a:90:44:c9:fb:83:09:
         4d:de:5b:65:a5:a5:3c:dd:f0:bf:fa:dd:d6:0c:63:9c:93:d4:
         be:a3:89:65:af:ba:ca:8c:15:03:bf:2a:8a:4a:a6:78:ba:82:
         5e:ce:05:22:5d:20:29:86:7d:0b:56:ff:16:14:79:f7:7c:2c:
         a2:be:5a:c1:33:dd:6f:0c:23:93:46:ed:b6:26:f3:0b:d0:fe:
         cc:25:c9:e9:36:ba:0f:fc:1d:cd:03:cc:17:c5:82:68:57:6d:
         a2:e3:3f:5a:03:ca:a2:7f:89:f6:59:30:35:eb:f3:0c:37:23:
         6a:7b:77:40:5c:c8:37:01:eb:1b:42:fe:72:e5:fe:b8:90:8a:
         d6:93:04:81:38:a4:97:31:5c:d2:b2:40:ea:81:a5:42:d6:1e:
         1f:81:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:58 2025 by rpki-client