Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa
File:                     3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          6JMe7KDo8un7dKz+j7gx0Y7jJrBnCXdm9rkrC6rmfts=
Subject key identifier:   E4:23:CD:16:1D:65:CF:8A:01:FE:79:16:EB:AC:CD:B2:EB:85:5D:9A
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       13A5FBB4DE35ED98B873F211C1B2C2B4F75D953D
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa
Signing time:             Mon 21 Apr 2025 17:49:43 +0000
ROA not before:           Mon 21 Apr 2025 17:44:43 +0000
ROA not after:            Mon 20 Apr 2026 17:49:43 +0000
asID:                     262355
IP address blocks:        131.161.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a5:fb:b4:de:35:ed:98:b8:73:f2:11:c1:b2:c2:b4:f7:5d:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Apr 21 17:44:43 2025 GMT
            Not After : Apr 20 17:49:43 2026 GMT
        Subject: CN=E423CD161D65CF8A01FE7916EBACCDB2EB855D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:71:3b:33:e6:11:45:8f:18:c9:c6:d6:f8:7a:
                    99:ba:72:25:80:49:5a:02:6e:26:85:12:d6:81:72:
                    cc:49:5b:30:b6:53:93:6c:e5:73:0e:7f:64:72:b7:
                    dc:c3:cc:f5:f4:05:49:09:53:0f:33:04:ca:c8:c3:
                    e3:ab:9a:34:a0:3a:91:a6:e2:e6:0f:ae:99:3b:4d:
                    2e:83:e9:a9:33:67:53:2a:e4:a1:f2:4f:4b:c8:da:
                    97:49:ef:b7:49:82:6b:91:9a:c8:87:ee:39:54:86:
                    ee:0f:dc:d8:1f:c9:f3:6b:2c:a0:bf:3a:ea:c5:06:
                    15:e5:d4:c9:1f:cd:4f:c5:6a:26:ec:f9:34:0e:bc:
                    e9:fd:51:35:a3:56:62:e6:f9:47:74:6c:04:6b:7d:
                    6e:b8:47:45:de:5e:e2:a6:c2:88:9f:b3:99:ab:fb:
                    2f:5b:e1:b3:a1:0a:c1:43:5a:e9:1f:1f:4b:a6:c0:
                    3c:6d:71:38:a7:1a:f2:7a:80:5c:e9:c2:89:fc:8b:
                    57:d2:40:14:ec:b5:53:8c:27:b5:d9:c1:64:a5:9d:
                    b6:70:b7:3e:d9:7c:66:1e:a5:6b:fe:4e:a8:23:7b:
                    9e:f7:b0:f5:0c:dd:e9:6d:b5:0e:29:79:9d:c4:ae:
                    6e:c4:bd:05:9d:f2:1b:29:1b:55:6d:c8:11:a3:e1:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:23:CD:16:1D:65:CF:8A:01:FE:79:16:EB:AC:CD:B2:EB:85:5D:9A
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:72:72:27:b3:be:0b:69:02:6a:bb:17:4d:f8:3e:94:5c:da:
         88:77:18:7f:06:31:2d:fb:d3:44:9c:10:1c:da:01:ee:80:1a:
         91:d4:81:3b:ef:29:c3:17:ff:0c:c1:72:e3:69:0c:87:e8:ba:
         34:f2:c7:b7:26:65:86:b1:dd:d0:0c:3c:08:9e:c1:eb:59:2d:
         c4:8e:bd:bd:2e:a1:90:90:d5:8d:7d:2a:50:b5:2b:cb:fa:05:
         a4:20:51:25:d9:00:10:50:8e:95:2b:67:37:20:f0:2b:9d:e0:
         2c:0f:ef:34:a7:5a:3c:76:31:c5:50:46:97:9c:fe:99:d9:46:
         73:13:0f:ea:08:1d:8d:65:28:56:dc:be:6a:fe:87:4b:58:fe:
         85:b8:af:46:eb:63:85:1b:50:e1:5e:75:3a:60:be:89:8e:e1:
         2e:f3:86:13:11:f6:b6:6a:55:65:c6:aa:e5:af:ef:88:c4:a1:
         87:bd:77:8c:f9:81:11:6b:d7:12:f5:9b:4c:0a:d7:07:94:25:
         f9:c8:e9:d7:7d:6b:96:d8:1c:92:c5:45:13:a3:8c:61:f3:29:
         38:0a:3d:11:c7:68:b7:fd:78:bc:72:f0:c2:af:d1:f1:9a:04:
         c2:e1:f8:94:1b:7f:53:fd:6e:cf:71:78:05:ba:02:4f:19:8b:
         58:dd:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:53 2025 by rpki-client