Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          0+nFMdCLym7Rsl6HvblfjhZQUqbxHP0qWYbL35iKgYc=
Subject key identifier:   84:BD:09:77:D2:23:9F:8C:25:24:8B:B7:1A:25:17:80:90:FC:06:DB
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       4CE56B56D106788AADBDD3204DC2A3B26BE0C6F7
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 09 Jun 2025 19:15:40 +0000
ROA not before:           Mon 09 Jun 2025 19:10:40 +0000
ROA not after:            Mon 08 Jun 2026 19:15:40 +0000
asID:                     266433
IP address blocks:        131.108.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 22:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:6b:56:d1:06:78:8a:ad:bd:d3:20:4d:c2:a3:b2:6b:e0:c6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jun  9 19:10:40 2025 GMT
            Not After : Jun  8 19:15:40 2026 GMT
        Subject: CN=84BD0977D2239F8C25248BB71A25178090FC06DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:ca:59:09:e5:6c:cf:4d:ae:cd:c2:9f:c9:
                    47:96:4f:66:4c:65:35:c6:36:d4:91:5b:0b:86:35:
                    f9:64:7b:00:4d:06:9e:f8:ab:ad:ae:64:01:74:5d:
                    0c:27:52:2d:5a:b3:a5:88:f9:d8:1f:2b:90:36:5e:
                    88:b6:ce:2c:4b:98:d6:17:ef:49:00:60:89:f6:71:
                    30:d9:7f:c3:fe:1d:bd:eb:16:9b:2d:07:cd:7c:5a:
                    87:1b:f6:0f:44:be:40:eb:a2:4e:4a:39:fb:f4:a1:
                    32:b1:de:3d:5d:ce:1c:33:ec:1e:e1:ec:1f:e8:97:
                    99:6f:08:bf:6c:a2:cf:bd:53:73:e8:12:43:b6:a7:
                    99:08:b1:5e:9d:32:c9:16:6b:02:d9:1d:b8:2b:ad:
                    65:d4:c1:b3:d9:9d:05:95:fd:86:4e:41:e8:5f:22:
                    3a:96:77:92:ca:89:69:b9:fa:ce:96:30:d7:2f:21:
                    f5:2d:87:b3:65:14:c2:e6:93:99:55:64:43:8e:6d:
                    45:13:9d:dd:c4:d7:4a:f0:31:02:f3:71:29:bb:8a:
                    74:df:fd:71:e7:1a:a5:ba:da:e9:12:26:eb:44:d9:
                    85:ef:4a:72:d0:a2:25:a6:2b:c1:60:af:7a:fa:7a:
                    4b:41:eb:06:21:82:df:a3:b2:32:c8:c2:ed:b8:f7:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BD:09:77:D2:23:9F:8C:25:24:8B:B7:1A:25:17:80:90:FC:06:DB
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:56:1d:24:99:71:08:14:76:a4:5c:a7:dc:a7:84:ba:b9:0c:
         d0:d0:43:c3:a0:03:38:a6:70:a8:8b:5b:ca:f3:ae:ac:3b:56:
         54:d8:8a:c5:c4:3c:c3:c9:12:bd:9d:48:59:7c:44:54:06:99:
         99:88:65:ed:72:b9:4f:6e:05:cf:1b:c2:4b:c7:8e:15:7f:f4:
         51:7f:a3:0f:00:dc:e6:08:7f:c8:ec:aa:4e:92:00:b9:95:00:
         38:4f:13:a8:7c:c4:a0:ba:f3:ce:a0:16:a9:0a:c1:74:f1:c0:
         64:47:62:75:64:5d:30:1b:30:39:99:69:6c:90:bb:b0:fb:08:
         87:c9:10:b7:74:00:08:ae:d6:3c:d2:d0:f5:f9:7f:ee:12:c2:
         04:0c:48:9b:40:84:3a:b8:8c:c6:12:50:1a:66:a4:a0:1d:7e:
         51:bd:da:18:11:d4:e6:f2:9e:98:32:54:2a:bd:0b:df:6a:96:
         ce:7c:35:f5:a0:76:02:ec:61:38:64:80:f6:06:40:32:24:a1:
         af:55:9f:45:b0:10:51:35:30:2d:ff:65:85:9a:4e:c7:a2:40:
         e3:ef:a3:fe:ad:ed:fe:95:58:b4:e7:e3:f2:2f:a8:bf:67:01:
         20:be:3a:c8:73:05:05:a9:a3:b3:96:31:fa:bf:fd:fe:8c:27:
         ee:98:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 09:11:54 2025 by rpki-client