Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa
File:                     3133312e302e36342e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier:          hpYbZLjxwUBaGEXJA1EANokNGa9/vXAOk0GpYs9QKAs=
Subject key identifier:   5C:D6:EC:59:7E:F1:40:AB:44:4A:3A:2E:DF:CB:DE:50:6C:C6:C4:32
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       340AC50AAB0E865233BB8EDC34D44ED0B99EB795
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa
Signing time:             Tue 17 Jun 2025 22:04:34 +0000
ROA not before:           Tue 17 Jun 2025 21:59:34 +0000
ROA not after:            Tue 16 Jun 2026 22:04:34 +0000
asID:                     53078
IP address blocks:        131.0.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 09:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0a:c5:0a:ab:0e:86:52:33:bb:8e:dc:34:d4:4e:d0:b9:9e:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: Jun 17 21:59:34 2025 GMT
            Not After : Jun 16 22:04:34 2026 GMT
        Subject: CN=5CD6EC597EF140AB444A3A2EDFCBDE506CC6C432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:77:80:91:92:a4:91:71:87:ba:83:3c:3e:
                    32:69:2c:57:45:5c:b2:36:6f:04:4b:12:11:d1:0d:
                    39:27:60:7a:19:35:89:e4:76:86:12:5d:17:ba:2f:
                    c8:55:b7:61:53:1e:35:25:a3:ed:7d:32:2e:c7:82:
                    79:ee:17:77:46:04:fc:95:f0:44:9c:5b:e5:f9:90:
                    b5:1b:ca:a9:05:62:4b:45:36:a0:84:6b:62:87:31:
                    70:1b:6b:1a:00:7b:29:38:18:c9:68:14:b7:9f:c6:
                    01:9b:fe:11:cb:9c:5b:7d:17:57:ab:40:e7:35:66:
                    e2:d1:fa:4a:d9:db:4c:60:3d:1b:5e:b7:af:7d:7e:
                    b7:1d:47:ed:07:24:ed:89:64:81:2b:e6:7c:d3:a5:
                    d3:4e:ce:af:d7:3a:40:c3:43:6c:d6:1a:af:dc:6b:
                    eb:8b:c8:1d:c0:37:4e:77:25:32:35:09:ce:b2:33:
                    0b:be:cd:7f:2f:f7:89:fc:a0:a5:4b:94:1d:6f:43:
                    63:5a:53:8d:08:8e:38:59:6b:ba:d0:22:08:5c:66:
                    ae:bc:1e:74:0f:f0:24:82:c8:18:9a:89:35:7c:58:
                    74:40:7e:d2:1f:6b:37:38:c0:b7:21:2a:ca:e8:02:
                    2c:0b:02:9a:d9:64:ce:b8:53:9f:72:0f:cf:97:a0:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:EC:59:7E:F1:40:AB:44:4A:3A:2E:DF:CB:DE:50:6C:C6:C4:32
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ca:b3:c2:4c:f8:e7:e7:a8:d5:36:f6:1b:3f:61:26:1b:61:
         9c:ed:d6:ce:4a:c2:bb:e7:c3:c6:ef:56:e8:50:a9:d0:b9:2f:
         de:50:d4:69:24:a1:18:cc:b0:51:1b:d2:1c:ee:1b:e7:0b:2f:
         86:7d:df:3e:32:b6:a8:53:23:52:06:0b:40:09:62:c8:98:c1:
         b4:ac:3f:f9:37:5f:53:14:6d:74:59:36:8b:31:32:23:65:38:
         05:40:4b:04:f0:62:3c:72:21:46:a9:0b:ae:bb:dc:c1:40:8c:
         47:82:b5:52:6a:53:7e:c7:cd:64:fb:ba:ca:79:97:61:38:58:
         5d:3d:43:bc:29:09:71:5f:0f:0e:4a:b0:ae:03:33:01:36:b1:
         a0:bc:5c:9e:f8:81:92:92:f5:75:b0:b7:b3:b1:e8:08:11:03:
         ef:eb:0b:f0:d7:68:a3:78:10:aa:84:82:ee:84:1c:6c:55:c2:
         d8:44:dd:87:a4:08:61:73:24:5d:05:b8:74:68:a1:d6:0a:8c:
         6f:c1:75:ef:33:0d:1f:6b:21:dc:80:ae:cb:70:0d:77:7c:db:
         52:05:ab:1e:05:ad:f7:75:7a:eb:a8:2a:5a:e2:53:d0:5d:6b:
         29:b6:aa:4b:78:42:91:0d:45:cd:5c:b1:55:d9:66:28:4b:0d:
         ec:c7:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:37:07 2025 by rpki-client