Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134322e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134322e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          FAhC/DsyPmRASXFbQ5wrESgSjR2bWWo3CPFzHQ4QYnY=
Subject key identifier:   EE:D5:9B:FA:37:1D:0B:9F:56:B8:66:C3:A7:0C:C7:0B:FE:AD:59:45
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       391888A1693E9C00D31684AA11E770923841B9B0
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134322e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 31 Jul 2025 19:00:47 +0000
ROA not before:           Thu 31 Jul 2025 18:55:47 +0000
ROA not after:            Thu 30 Jul 2026 19:00:47 +0000
asID:                     61885
IP address blocks:        131.0.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:18:88:a1:69:3e:9c:00:d3:16:84:aa:11:e7:70:92:38:41:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jul 31 18:55:47 2025 GMT
            Not After : Jul 30 19:00:47 2026 GMT
        Subject: CN=EED59BFA371D0B9F56B866C3A70CC70BFEAD5945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:e3:c6:40:b3:06:26:b3:9e:28:cc:e1:7b:
                    e0:ca:b2:cc:ea:53:0a:e7:f6:59:fe:d0:3e:ca:ff:
                    b7:2b:d6:63:32:53:52:53:1b:91:33:23:0f:ac:6b:
                    ef:75:c6:bf:95:41:60:6b:c7:01:aa:73:f1:95:a0:
                    a0:b0:bb:53:b3:5c:cf:f4:38:3b:9e:06:0f:b9:60:
                    44:d8:cb:75:f4:bf:bc:a3:38:29:59:5a:52:2e:18:
                    95:d8:41:80:5d:16:e5:88:31:cb:c8:28:fd:d7:e0:
                    8d:07:a7:6f:bd:a3:92:ff:bd:88:eb:7b:2e:fa:f5:
                    c1:9f:e9:5e:d9:ce:b6:21:ee:b4:c2:b4:ef:72:8c:
                    c8:e2:b6:cd:a3:2b:eb:16:d0:63:de:44:a4:46:25:
                    a6:96:cf:c0:08:4d:67:c6:df:cd:72:9f:26:6e:23:
                    1f:d9:97:f2:49:ee:27:9f:ba:e9:4c:fa:66:38:de:
                    e2:c9:1b:1f:cb:38:8e:00:1a:02:ff:28:0d:1f:ee:
                    13:ac:04:40:70:d8:69:52:33:55:bc:e4:cf:28:be:
                    80:af:d0:e9:6a:f0:56:63:23:b1:6d:a2:21:56:5b:
                    30:fc:a1:4d:38:49:78:bd:d1:d7:08:13:28:d2:5c:
                    03:77:df:58:99:49:e0:fc:12:0c:6c:9d:f4:3c:42:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:9B:FA:37:1D:0B:9F:56:B8:66:C3:A7:0C:C7:0B:FE:AD:59:45
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134322e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:58:2c:2f:dd:cc:11:af:c7:c7:ba:69:b6:9e:6d:c1:aa:ec:
         d4:21:3a:77:aa:13:5f:f4:5e:61:45:06:91:3b:d5:e5:0a:93:
         4b:8d:bd:53:a1:c5:09:7e:6b:0d:d7:21:a0:d9:7f:5f:9b:d4:
         5a:9d:f3:6e:61:f9:af:3e:ae:62:f3:8d:5d:c3:37:83:5e:70:
         4f:ec:a8:6f:9f:15:a3:a5:91:f2:03:e1:d4:e9:df:b0:63:6d:
         5c:03:f0:f1:10:62:c1:94:6a:c7:02:3f:5d:51:18:9e:75:af:
         67:09:19:8b:b7:f9:4a:87:fe:92:e6:8b:0c:0f:a8:eb:40:99:
         4c:97:d8:a8:fa:21:ef:75:63:4d:ae:2d:3a:0f:21:45:f8:10:
         71:4b:2a:b3:d1:0a:ab:ba:4f:7a:23:ef:2c:52:b9:73:50:90:
         db:1c:c7:b0:67:f7:af:d8:74:c8:b3:50:d5:68:b3:f4:e0:89:
         79:df:94:7e:d9:6a:d9:0e:b2:13:1d:13:97:9f:f4:d0:e7:58:
         bd:6e:b7:44:5d:92:3c:ea:b3:fc:6a:e0:d5:66:ed:bc:23:47:
         01:3f:5e:f5:eb:3e:11:1c:c8:b1:4e:9c:71:2c:f9:e0:4a:26:
         44:e4:0f:d0:b4:cd:4e:84:d6:0d:86:98:8c:81:ae:56:d6:40:
         1c:9a:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:56 2025 by rpki-client