Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130392e302f32342d3234203d3e20323634313631.roa
File:                     3133312e3139362e3130392e302f32342d3234203d3e20323634313631.roa (raw, json)
Hash identifier:          p/PVDYT8IXkTp7D+DRKsPSm4J5boNUubJSaGEUWaX7o=
Subject key identifier:   08:EB:4B:82:6B:8E:92:E7:30:E5:A1:06:E2:B7:BC:BB:FC:46:6E:20
Certificate issuer:       /CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
Certificate serial:       47D78845E38B5C710663F615E3E5D8DE12259AFB
Authority key identifier: 7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130392e302f32342d3234203d3e20323634313631.roa
Signing time:             Fri 04 Jul 2025 21:59:17 +0000
ROA not before:           Fri 04 Jul 2025 21:54:17 +0000
ROA not after:            Fri 03 Jul 2026 21:59:17 +0000
asID:                     264161
IP address blocks:        131.196.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl
                          rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d7:88:45:e3:8b:5c:71:06:63:f6:15:e3:e5:d8:de:12:25:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
        Validity
            Not Before: Jul  4 21:54:17 2025 GMT
            Not After : Jul  3 21:59:17 2026 GMT
        Subject: CN=08EB4B826B8E92E730E5A106E2B7BCBBFC466E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:20:dd:61:26:eb:8c:f8:75:d8:db:3b:be:
                    15:c8:b0:f5:bf:9a:d2:96:be:be:48:d4:19:7d:ec:
                    76:a4:60:e4:a9:c4:ee:d2:20:e5:0a:62:14:a1:6a:
                    a4:63:54:99:28:69:c1:60:af:06:19:a3:13:f1:d9:
                    fe:eb:51:54:51:89:54:15:9d:46:98:b6:2a:2c:7f:
                    0c:bd:47:68:42:ab:6c:82:1b:69:e5:c3:58:46:d0:
                    e1:93:d5:64:f0:e4:30:eb:77:49:b6:e7:a0:4e:39:
                    63:a1:07:56:a0:a0:d0:3f:5d:c7:67:e8:13:77:52:
                    dd:34:6d:ce:83:9e:d7:75:80:c0:90:de:fb:48:ee:
                    56:41:6c:1e:d4:b7:07:a8:72:90:ea:29:02:a9:c9:
                    96:41:db:c6:2c:23:7d:07:8c:82:ef:dd:14:40:83:
                    a4:ce:d6:53:4f:b4:b3:d2:e7:e0:d0:1c:1f:88:96:
                    38:d8:da:3c:58:cd:f7:1f:c2:1a:cb:0e:a4:e6:2b:
                    27:d2:15:21:b6:51:62:7e:0c:0c:8a:3a:58:37:56:
                    90:28:8a:21:8a:77:be:81:3a:d3:88:59:7b:ec:0f:
                    24:c8:2f:58:40:36:a3:9f:4a:1c:65:b6:e2:b5:ae:
                    be:a6:20:1f:a3:52:8a:17:c2:58:e9:f1:ab:67:76:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:4B:82:6B:8E:92:E7:30:E5:A1:06:E2:B7:BC:BB:FC:46:6E:20
            X509v3 Authority Key Identifier:
                keyid:7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/3133312e3139362e3130392e302f32342d3234203d3e20323634313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:33:9b:49:3f:2c:2b:79:f1:3f:45:64:aa:1c:4b:64:64:99:
         0a:2c:d9:4b:64:ef:7c:f5:8a:fe:80:e2:e0:30:98:00:55:cb:
         fb:07:fa:5c:19:2d:17:12:6e:8f:23:06:8d:47:ff:d9:9b:90:
         8e:c5:65:4b:ba:22:e3:96:a0:28:51:ae:4d:9a:70:da:75:f2:
         98:ab:08:0f:0a:8e:25:50:9d:d5:e2:92:58:99:c0:fe:6d:db:
         5b:dc:8b:ca:79:3d:1a:8c:62:21:a6:e6:fb:42:10:7d:a2:55:
         5d:62:31:ae:21:4c:91:c7:22:95:fd:57:b2:95:0b:c3:4a:7d:
         d7:f3:60:96:d7:71:22:89:e6:9d:9c:e4:14:ac:67:4f:c5:30:
         88:ef:1b:44:f8:3b:e4:86:1c:1c:c4:d1:1f:ea:c0:9f:c2:84:
         81:92:64:86:96:ee:02:c6:16:11:b8:6d:ac:b3:61:08:27:dd:
         78:5b:8a:ee:fa:b0:1f:af:e7:47:52:d0:ce:69:5a:2f:ed:c8:
         4c:36:81:7d:30:d2:b7:70:ff:62:f4:85:a0:d6:83:71:67:de:
         cb:26:7c:63:df:87:92:26:9a:3e:f3:71:b9:89:83:3a:96:c9:
         df:e4:a1:75:f1:3d:d8:90:59:70:b0:fc:f2:9e:67:de:1c:9a:
         e3:a6:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:02 2025 by rpki-client