Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
File:                     3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa (raw, json)
Hash identifier:          pdrEsidNAb03moqiEXNKgGorHl4T2dsYhkxudROI0cw=
Subject key identifier:   98:0D:43:BA:52:81:D9:F2:36:D1:A6:7C:BC:AB:37:45:94:10:CF:FC
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       59DDEF896752417E6D03E303EA285385B0945937
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:57:09 +0000
ROA not before:           Fri 01 Aug 2025 19:52:09 +0000
ROA not after:            Fri 31 Jul 2026 19:57:09 +0000
asID:                     61657
IP address blocks:        131.100.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:ef:89:67:52:41:7e:6d:03:e3:03:ea:28:53:85:b0:94:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:52:09 2025 GMT
            Not After : Jul 31 19:57:09 2026 GMT
        Subject: CN=980D43BA5281D9F236D1A67CBCAB37459410CFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:93:53:e5:96:84:f5:19:16:21:6d:3a:1d:
                    b7:4d:ed:b6:b8:de:ef:1a:cd:fa:e2:4d:af:e4:b2:
                    cb:c5:b8:dd:8d:93:dc:d1:23:6b:5f:97:33:c1:3e:
                    f0:64:ab:a8:46:30:00:ff:a9:a1:d2:ee:9b:62:0c:
                    fe:e2:a7:10:83:a8:63:79:2b:29:18:22:49:1e:cb:
                    76:3b:47:91:7e:10:6e:c1:e7:29:d4:8c:fd:01:5e:
                    fa:16:c0:97:a4:51:24:a9:ed:f9:4e:25:67:c0:7c:
                    fe:bd:97:8e:a6:87:a9:88:5d:3a:b7:69:3b:8c:74:
                    c0:97:b8:85:97:24:d1:d9:7f:24:9d:35:97:55:19:
                    6c:b4:1e:a7:0c:4e:89:45:8d:5b:96:96:3a:2b:b0:
                    8b:e2:77:e1:d1:2d:2f:94:de:41:06:ef:7c:fc:ae:
                    64:ae:d3:42:65:bd:9d:5d:51:0d:7d:35:9a:c6:8c:
                    4e:02:7c:df:bf:55:f7:77:0d:18:64:9b:c9:9e:ab:
                    ae:51:9e:5c:53:5a:40:1b:27:58:67:d1:60:85:b3:
                    39:35:60:fd:55:f1:60:84:cd:6b:ae:04:81:0e:cd:
                    92:fd:42:e3:a4:a1:79:01:ad:f3:7f:95:2a:c4:70:
                    9a:d6:a9:fa:b4:7c:1c:60:07:24:ea:65:72:a7:b8:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:43:BA:52:81:D9:F2:36:D1:A6:7C:BC:AB:37:45:94:10:CF:FC
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:17:0f:50:f2:f9:68:57:87:c6:73:24:be:fe:95:ea:37:4c:
         e0:05:78:97:03:08:2b:33:70:dc:60:87:1b:02:3c:25:b7:61:
         0f:42:95:e6:50:c6:fb:78:ba:9c:d1:d8:00:12:44:86:b6:60:
         48:af:d1:5c:0c:fb:98:fa:de:84:ac:97:41:c4:48:90:f7:c1:
         b2:ff:7a:30:02:43:ce:b2:54:d2:4f:0f:62:b8:55:56:2c:01:
         42:33:09:ea:a1:98:39:e5:e6:15:2e:39:31:ce:5a:84:6a:c6:
         f2:31:cf:df:72:d3:fc:53:63:94:48:a2:c2:be:af:a8:42:4d:
         53:cb:77:71:1e:fc:05:95:63:fd:07:b2:5b:8c:35:00:29:d2:
         4e:dd:23:90:55:40:bd:ad:1d:f6:cc:38:4f:70:54:a4:1b:31:
         53:18:da:44:68:76:07:d0:d7:0b:1b:66:6d:13:df:67:c8:e0:
         9a:23:ba:2f:87:47:08:22:1a:ad:2c:e8:9b:19:26:98:32:12:
         13:08:a6:04:01:6f:f0:df:ce:34:46:27:0c:58:78:0c:e9:b1:
         38:62:33:63:13:c3:28:42:cc:e6:a4:9b:bd:6e:0f:2e:f7:8d:
         0e:a5:b7:8d:92:46:6f:1d:86:00:7c:e2:3c:1c:90:1b:13:2d:
         44:5f:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:43 2025 by rpki-client