Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3234203d3e20323733333039.roa
File:                     3133312e302e3230382e302f32322d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          0E0YK9hdrI7UGfbCubS5S4HpmuNBOX3asolMDCMTxkk=
Subject key identifier:   70:1A:A9:46:23:43:5A:BA:F7:02:81:37:DB:6C:A9:E6:A1:00:13:F9
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       070A8DA6990259ADA6D0DCEFE1D1B5ADF60B200F
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3234203d3e20323733333039.roa
Signing time:             Mon 16 Jun 2025 19:46:00 +0000
ROA not before:           Mon 16 Jun 2025 19:41:00 +0000
ROA not after:            Mon 15 Jun 2026 19:46:00 +0000
asID:                     273309
IP address blocks:        131.0.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0a:8d:a6:99:02:59:ad:a6:d0:dc:ef:e1:d1:b5:ad:f6:0b:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun 16 19:41:00 2025 GMT
            Not After : Jun 15 19:46:00 2026 GMT
        Subject: CN=701AA94623435ABAF7028137DB6CA9E6A10013F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:2c:11:56:37:12:9e:2f:a3:5a:41:94:77:
                    5b:af:4e:70:57:0f:bd:92:e9:32:ec:3c:7c:c8:08:
                    96:e5:23:e4:fd:bc:37:36:bb:96:42:08:50:41:71:
                    23:83:e3:15:52:1d:69:69:33:11:82:a4:58:dd:b9:
                    5c:f3:ae:05:f9:7f:6a:41:34:6c:7f:1c:0a:c5:16:
                    27:26:f4:61:2a:74:5f:6d:7e:d7:48:6e:43:e9:05:
                    ff:ef:ba:67:8c:ec:d3:9d:b9:5a:03:d1:f6:20:fb:
                    2d:eb:d7:f6:88:86:df:a3:22:0a:19:d9:df:8b:69:
                    ca:83:8a:6e:39:85:1c:8a:d0:3e:79:24:ad:6e:ac:
                    44:36:95:1f:3c:70:96:74:01:09:87:81:8b:9e:98:
                    b4:d3:f8:6e:2d:1d:26:bb:5a:63:c4:74:38:07:b1:
                    0a:51:9b:bc:33:66:8c:7c:a6:88:be:a1:cb:69:9c:
                    4e:91:ba:be:a5:85:50:38:16:26:af:06:13:67:b6:
                    ca:b0:50:d1:70:65:ff:6c:9a:24:ea:99:28:46:ab:
                    a6:0c:4a:4b:88:d2:13:10:7d:c4:8e:22:cf:1e:6d:
                    38:7f:14:4a:07:71:99:a3:d0:36:69:9d:a1:fc:ee:
                    ce:7e:b7:6d:24:29:64:2b:06:17:4e:0f:50:84:eb:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:A9:46:23:43:5A:BA:F7:02:81:37:DB:6C:A9:E6:A1:00:13:F9
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:e1:37:db:63:31:09:82:71:e1:7d:6b:db:2c:07:9b:86:
         32:86:cc:eb:c7:df:24:47:e6:10:b2:43:a9:23:0d:c6:73:50:
         a8:39:71:1d:23:48:0b:7d:2a:0e:b1:c2:50:d0:63:4d:a8:35:
         dd:98:29:9a:cf:c6:e5:05:74:cc:d6:f0:60:48:94:14:99:24:
         f5:3f:3e:07:53:ff:ab:b2:b8:50:af:a0:30:7f:b6:e8:fd:d2:
         49:8b:29:77:9e:0e:f6:93:58:8b:9e:70:06:90:69:53:01:7c:
         bc:e9:24:17:20:04:bb:ee:49:d8:b9:ab:4f:69:bf:d5:94:a7:
         f0:21:b5:09:aa:09:5f:6d:45:0e:9a:52:72:fa:77:ab:2e:2c:
         aa:72:53:d7:6c:2b:f1:4d:02:ea:45:e9:d9:c7:a3:e4:7b:28:
         73:41:cc:1f:49:5a:ac:46:41:73:cc:c7:b1:d6:27:0d:99:37:
         0f:9e:d5:21:35:24:7d:e2:bd:ed:d2:6a:a0:bf:80:40:00:44:
         55:77:67:1d:87:a9:cd:6a:be:f1:80:7b:e9:78:d1:b8:aa:33:
         af:f1:aa:24:d1:c7:f7:9f:ab:ad:42:4a:2e:00:91:01:d1:99:
         1f:d9:5e:3b:6c:b4:a2:7b:ad:93:db:1b:9c:ad:11:d3:ac:65:
         cd:f7:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:21:36 2025 by rpki-client