Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa (raw, json)
Hash identifier:          PNb0CnrXZwQ/V1UeKp8pB3BmlC+9t4Xkx2duWuHFieE=
Subject key identifier:   03:B3:92:70:51:BF:F2:A3:39:A6:3C:8A:02:25:ED:33:98:B3:17:E6
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       1EBA332B76C89BEE9F4015A570F19138C15C6AB6
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:56:57 +0000
ROA not before:           Fri 01 Aug 2025 19:51:57 +0000
ROA not after:            Fri 31 Jul 2026 19:56:57 +0000
asID:                     61657
IP address blocks:        131.100.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:33:2b:76:c8:9b:ee:9f:40:15:a5:70:f1:91:38:c1:5c:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:51:57 2025 GMT
            Not After : Jul 31 19:56:57 2026 GMT
        Subject: CN=03B3927051BFF2A339A63C8A0225ED3398B317E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:6c:4f:50:1c:9e:f0:91:2b:71:c7:3f:b8:
                    45:22:06:35:ac:81:07:12:e9:ef:82:d3:e5:e6:15:
                    07:2b:ef:37:33:6c:5c:fa:ad:4f:f1:f1:b0:fd:89:
                    3f:8d:94:e7:4c:6d:93:f7:25:24:5f:09:2d:61:ad:
                    fe:7d:20:ad:2e:67:88:c2:2b:95:c9:12:a7:a7:fb:
                    29:b1:2a:3a:27:5e:13:d2:09:30:d7:d9:46:60:9f:
                    62:2c:3c:51:b8:62:43:ea:97:5b:83:be:28:05:a1:
                    55:bf:dc:9c:98:94:d0:35:9c:aa:9f:f2:45:ca:48:
                    0c:1d:74:6e:25:90:40:1a:ee:f7:0b:18:54:fd:a0:
                    3c:ee:02:e4:a8:4f:3e:f9:f1:27:22:58:80:67:ec:
                    e8:89:d0:ab:ff:7a:d9:dc:07:fe:3b:44:73:9b:c5:
                    fa:80:f6:c8:79:ea:a8:73:cc:6b:4d:13:2e:78:f6:
                    ca:fa:23:c6:19:96:77:58:23:8f:22:2f:88:64:6b:
                    c5:b1:60:af:37:b9:60:db:d6:77:5e:9b:51:61:9b:
                    7f:0d:37:36:29:9a:b5:88:5a:54:a2:b2:4b:8e:7c:
                    16:af:59:69:95:56:e4:fc:31:3e:ff:e2:31:1a:7e:
                    59:c2:94:b0:7e:8f:e7:c2:dc:cb:50:39:3a:21:34:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B3:92:70:51:BF:F2:A3:39:A6:3C:8A:02:25:ED:33:98:B3:17:E6
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e7:bd:02:80:ee:81:ca:b8:44:45:dd:20:de:05:7e:e5:3a:a4:
         f1:e8:5b:91:f2:17:e9:95:e6:9c:ea:07:44:d9:b1:e4:bb:b0:
         77:b4:f2:42:31:57:64:e7:01:6a:62:0e:65:1c:f9:22:2e:b7:
         b5:51:c9:7b:d7:9c:03:b0:9f:27:1d:37:cb:f1:a5:06:83:e2:
         6e:c2:37:42:63:cb:06:69:de:05:fa:bb:67:36:46:28:44:d0:
         a1:05:42:88:82:b9:5f:22:a7:d8:ba:b3:7d:d0:d4:b7:87:1a:
         19:55:3f:82:08:88:4e:1d:8b:da:e7:78:40:40:77:2f:ef:1f:
         2f:d7:cb:2a:4c:a3:2f:13:20:07:4a:54:26:67:7d:cd:c1:17:
         30:8d:58:bc:3c:0f:6f:b6:77:63:eb:5a:23:41:2e:17:ec:16:
         4a:b9:28:d2:46:57:70:8e:fb:08:98:6e:a8:7c:1f:41:dd:96:
         3b:5c:9f:c3:c9:6d:34:03:69:c6:77:da:24:3d:e5:a7:44:8a:
         8b:0a:5f:a6:e9:95:ce:7f:32:f0:a7:c8:25:d3:97:f9:21:4c:
         97:9f:ed:75:bb:e9:af:01:ca:42:56:eb:27:1f:05:90:b0:16:
         00:af:62:85:a1:5f:68:b7:47:90:98:a2:d8:a7:84:6f:9f:b9:
         bb:d8:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:25 2025 by rpki-client