Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20313938393439.roa
File:                     3133312e3139362e35362e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          442nRUMJ7A/9xaBrgR2FGKsa5FqOvgyAQ58r6RJ26s0=
Subject key identifier:   C7:9A:9F:68:4F:65:1B:6B:B4:CA:0C:6F:8E:F5:9E:53:9C:7B:4C:AF
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       3F451C8FBFC13761C308E3F650FBB4DC40D80AD2
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 21 Jul 2025 18:40:42 +0000
ROA not before:           Mon 21 Jul 2025 18:35:42 +0000
ROA not after:            Mon 20 Jul 2026 18:40:42 +0000
asID:                     198949
IP address blocks:        131.196.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:45:1c:8f:bf:c1:37:61:c3:08:e3:f6:50:fb:b4:dc:40:d8:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Jul 21 18:35:42 2025 GMT
            Not After : Jul 20 18:40:42 2026 GMT
        Subject: CN=C79A9F684F651B6BB4CA0C6F8EF59E539C7B4CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:b8:ac:0b:04:79:82:7e:ef:80:ab:3b:55:
                    c6:8b:0f:e6:e7:9b:d5:1b:f8:ef:c0:4d:3d:a7:0d:
                    5f:dd:5d:69:0f:65:6b:8b:73:ff:66:e2:1a:ae:fd:
                    68:ba:a8:48:3a:3e:fb:2b:56:dd:b0:dd:0e:27:1e:
                    49:80:ee:6f:81:9c:10:98:d8:80:f3:25:c3:f5:c6:
                    92:5a:09:c6:7a:d9:c1:a3:ec:60:1f:15:f8:20:01:
                    6f:37:f8:a4:a7:a3:1f:d8:7a:96:52:04:d0:c9:e1:
                    c8:f7:92:79:1c:7d:bd:0b:3e:85:5f:62:d3:ea:c8:
                    27:ef:af:38:3d:5d:64:0f:43:ab:ae:db:8e:38:c0:
                    94:e6:70:37:1a:f7:76:0a:9d:e7:75:92:d8:f2:c6:
                    4b:c7:a2:e7:82:28:0c:20:83:2c:05:63:5b:fb:0d:
                    a8:00:98:67:d7:16:0f:e2:2e:a4:6d:e4:ff:ec:6f:
                    9b:11:ea:09:34:e7:6e:df:7b:1d:84:5f:6d:02:76:
                    5a:09:2a:1f:ee:d8:4a:c1:74:30:1f:23:87:0e:a3:
                    9c:33:61:7e:2e:43:5d:c0:44:13:bc:ed:3d:cb:37:
                    9b:01:43:b0:6d:9a:e0:fd:3c:94:82:81:2e:3c:a6:
                    5d:bc:9b:4c:d5:bc:26:57:a3:b3:d5:ad:0f:bc:c0:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:9F:68:4F:65:1B:6B:B4:CA:0C:6F:8E:F5:9E:53:9C:7B:4C:AF
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:34:a2:07:67:b3:cb:09:28:ea:fa:44:9e:d2:9c:55:d4:
         7a:e2:f3:e4:71:28:82:6b:0b:88:fb:94:1e:56:d8:7f:19:db:
         cc:d1:4f:38:94:9e:07:11:8c:4b:31:16:e2:0f:67:ca:18:3d:
         57:cb:3c:c4:fd:7b:48:ea:39:98:65:32:d6:ea:1b:45:c3:27:
         88:47:3a:97:9d:79:a3:4b:7b:74:49:63:c7:91:92:4d:94:bf:
         cf:b0:94:e9:ed:90:69:26:9a:72:c9:7f:9e:66:9a:1c:2d:8f:
         ec:ae:78:ff:12:4e:46:06:e1:70:dc:1f:71:3a:52:2d:31:db:
         a8:3c:36:02:0c:75:75:e3:b2:60:48:de:11:07:36:c4:84:f1:
         22:27:01:c9:a1:cc:98:31:7c:50:57:8c:37:2b:8f:c9:d0:32:
         da:b2:4e:21:a9:26:43:c0:b3:fb:dd:cb:3e:34:a8:e8:76:2c:
         56:14:54:f6:cc:d6:6d:1f:5b:d0:6b:30:58:9d:5f:db:28:64:
         83:c2:80:5e:bf:5e:e5:a2:4f:0a:12:9e:e7:6f:5b:04:a5:ef:
         d3:79:44:b3:83:0a:8a:97:ed:3c:ae:16:8f:28:1b:a5:97:95:
         25:64:69:b3:b3:f5:d3:82:ae:fc:c6:b3:c1:42:04:b5:97:2a:
         4b:43:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:08 2025 by rpki-client