Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134302e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          spAyhkGjuBNP2zEIUTDLtN/IEf7CJVmrsLGKeK3QbZM=
Subject key identifier:   50:E9:C5:09:0C:F7:D1:0A:89:C3:8A:3C:D1:C9:70:93:8F:E0:28:23
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       1A9E707FB91A074093B6626EE87E41E6EB7920AE
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 31 Jul 2025 19:00:47 +0000
ROA not before:           Thu 31 Jul 2025 18:55:47 +0000
ROA not after:            Thu 30 Jul 2026 19:00:47 +0000
asID:                     61885
IP address blocks:        131.0.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9e:70:7f:b9:1a:07:40:93:b6:62:6e:e8:7e:41:e6:eb:79:20:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jul 31 18:55:47 2025 GMT
            Not After : Jul 30 19:00:47 2026 GMT
        Subject: CN=50E9C5090CF7D10A89C38A3CD1C970938FE02823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:cb:dd:a4:a6:27:d4:f4:7e:f4:bc:c8:14:
                    44:03:fc:20:25:fd:6c:58:24:f1:97:c2:d4:2d:84:
                    0f:e0:ea:5b:0d:19:5b:97:9f:cd:44:59:f2:52:92:
                    49:fb:cf:a4:7f:fd:9e:e8:8a:fb:13:e9:66:2a:7a:
                    28:0b:12:25:07:39:a9:d4:84:d6:ca:3c:28:04:ea:
                    a2:fa:5e:fc:a5:73:d7:b9:ae:57:9f:f5:8f:6f:ee:
                    fd:4f:41:7f:7b:4d:9c:50:42:54:ca:64:ad:50:f0:
                    d6:0d:d5:53:81:cc:ce:0b:9c:9a:2c:a5:49:3f:ad:
                    b2:9f:aa:00:75:5f:fb:06:37:d9:ef:8f:6e:ae:ee:
                    bf:87:00:e9:a0:11:63:43:7c:b7:c1:38:30:5d:77:
                    d2:e6:5a:63:aa:67:94:8e:3b:03:46:5b:b0:c0:24:
                    19:bc:7d:4f:d5:21:a9:8e:c4:8a:c6:12:22:03:37:
                    54:21:b3:c4:17:80:14:e5:7a:a4:75:44:3e:ad:d2:
                    02:6b:f0:e1:e5:08:fb:02:f8:43:83:37:6f:e2:0f:
                    f8:a6:c6:68:39:fe:f2:51:62:2f:b1:1d:aa:cd:84:
                    ad:ae:05:6f:ed:9b:73:80:07:cd:92:49:fd:c8:eb:
                    d2:af:53:01:eb:f1:bc:95:ca:8f:b2:eb:31:95:b3:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:C5:09:0C:F7:D1:0A:89:C3:8A:3C:D1:C9:70:93:8F:E0:28:23
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:cd:c3:c8:1a:a9:c5:9f:ab:d7:4b:86:7e:71:52:b3:4f:ed:
         e6:43:ad:40:0d:d1:2c:2c:2d:94:75:a8:96:e9:eb:c9:32:fe:
         d4:3b:6b:94:5d:a7:79:93:0e:a3:64:9b:0f:f3:63:21:bf:b4:
         95:ca:47:08:3e:39:72:e6:e8:b4:83:26:ee:d0:15:dc:33:8e:
         f9:97:31:9b:df:76:de:38:98:35:93:0f:23:8f:55:7c:fd:82:
         cf:97:ef:aa:ae:3c:aa:34:cc:4e:89:fe:b9:93:58:a6:aa:97:
         d2:6f:e3:21:9f:70:a2:6c:95:0f:37:00:a8:2b:e9:e2:4e:9a:
         8e:9c:41:38:d8:3b:5d:93:94:a2:27:73:3c:d0:32:29:71:9f:
         2c:d8:d8:bc:4e:fc:ba:cf:12:91:93:a2:1a:78:34:62:40:f1:
         e1:56:7f:75:94:dd:a0:21:77:48:61:98:42:3f:de:5f:a4:e9:
         3d:cd:0c:24:4e:56:02:39:b6:61:3e:f4:07:ce:29:46:ab:83:
         f3:9c:33:6a:05:1f:80:56:df:a8:84:2b:d6:a3:ee:8a:b1:84:
         d1:84:17:6f:b9:b4:49:1b:4e:5e:d7:28:f7:ea:7f:c4:f1:7a:
         a8:7e:d3:73:85:df:64:22:f5:88:14:5d:1f:04:a4:68:2a:be:
         f8:26:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:52 2025 by rpki-client