Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (raw, json)
Hash identifier:          /R73T9eppG8oCG54grltjR7sZRXblO5QIukv6RP+wHE=
Subject key identifier:   92:5C:BA:F8:76:C6:6A:6D:99:E8:0F:13:16:CB:25:9C:32:15:6B:AB
Certificate issuer:       /CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
Certificate serial:       0CD7504F867C6929791C1CF9D9BA693A98618550
Authority key identifier: A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa
Signing time:             Wed 16 Apr 2025 18:38:40 +0000
ROA not before:           Wed 16 Apr 2025 18:33:40 +0000
ROA not after:            Wed 15 Apr 2026 18:38:40 +0000
asID:                     61756
IP address blocks:        131.100.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d7:50:4f:86:7c:69:29:79:1c:1c:f9:d9:ba:69:3a:98:61:85:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
        Validity
            Not Before: Apr 16 18:33:40 2025 GMT
            Not After : Apr 15 18:38:40 2026 GMT
        Subject: CN=925CBAF876C66A6D99E80F1316CB259C32156BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:2b:ab:4e:d7:a5:a0:05:01:72:db:8b:86:
                    85:ca:6d:b8:d0:0c:c5:8a:2d:6d:4b:05:d6:cc:92:
                    d0:d7:2c:1d:4a:d2:69:4c:81:ad:0d:9f:d7:ef:07:
                    6f:97:6d:3b:37:58:6c:af:de:16:13:37:a6:f1:36:
                    f9:e8:ca:2c:6b:b3:7b:ec:00:2f:fc:8d:77:e1:e6:
                    db:b9:fd:5b:b6:7d:30:af:eb:7f:97:ef:b0:fd:c2:
                    87:e7:42:30:01:c7:cd:2f:57:40:da:01:0c:2c:bb:
                    b4:3e:52:43:48:ad:99:35:a2:77:5a:42:c9:d7:28:
                    36:6e:af:87:37:86:9a:ab:f6:4d:1c:e1:d5:e8:0b:
                    4f:d7:d3:e0:fd:e4:49:88:11:33:d0:66:b8:6b:ee:
                    25:49:fa:ae:18:a2:b0:cb:ed:79:37:16:69:71:31:
                    13:58:71:0e:be:7f:28:c4:97:32:83:2e:e6:eb:41:
                    dd:66:6a:38:74:ed:72:b0:d8:d1:91:71:a7:c7:37:
                    de:c4:25:5e:5e:e4:22:04:93:1e:bc:6e:7d:fe:73:
                    bc:89:ba:ec:c9:c2:48:90:59:d2:ee:78:2f:32:75:
                    28:c7:28:e7:78:73:1d:a7:11:91:ce:ab:b2:0b:0e:
                    c4:fd:80:b6:0d:3d:96:ec:1c:62:bd:19:70:9b:40:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:BA:F8:76:C6:6A:6D:99:E8:0F:13:16:CB:25:9C:32:15:6B:AB
            X509v3 Authority Key Identifier:
                keyid:A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32332d3233203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:ce:10:c5:9d:fe:a9:97:3f:cb:5d:fe:f0:dd:93:4e:c6:
         70:02:e6:c9:05:fa:c7:0c:11:6a:3e:48:e5:7d:91:76:80:06:
         56:3a:a7:fc:22:a5:ee:46:0e:39:50:da:b2:50:09:7c:84:34:
         a2:b7:f0:d6:eb:4a:4f:7e:15:9c:6c:c2:40:70:6b:fd:9e:a4:
         7e:72:f8:c0:d3:c1:1a:92:32:48:85:cf:ff:12:05:6f:33:a7:
         bf:e9:b0:be:d8:e9:a3:e0:5b:2f:e3:f2:aa:43:37:66:09:77:
         13:63:04:6c:b1:1a:18:92:7b:87:64:b2:0b:45:b9:6c:a1:7c:
         af:8c:e8:25:e0:85:e4:09:2a:53:25:b3:de:76:fa:78:74:a5:
         6b:02:41:e1:92:58:b3:f4:55:97:32:17:60:07:dc:09:45:e1:
         88:92:d5:f0:ca:12:56:42:85:3e:fc:06:11:0f:d5:76:02:c0:
         02:60:76:98:72:da:a7:3b:7d:cf:bf:f4:64:bb:66:7b:ea:7a:
         37:99:bd:a4:7c:d3:db:09:10:ff:14:ef:3f:c9:c2:f6:9b:11:
         32:28:7b:6d:c1:38:ec:38:6d:60:60:d0:d1:21:26:2b:21:be:
         ce:02:63:c5:b3:46:7a:30:d5:b1:bb:70:b7:c8:5b:e2:aa:05:
         e5:41:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:54 2025 by rpki-client