Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134332e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          Ax4GFW+ZgDBWbEqakOBkeW9VThd7RRswN4RG5fl4FpQ=
Subject key identifier:   36:C5:D2:2D:1F:FA:16:BF:EB:D1:0E:E4:AB:89:E0:4B:F2:C4:86:7C
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       28235ABCA41CCBEDA76C9AE20EACC5F93A00ABA7
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 31 Jul 2025 19:00:47 +0000
ROA not before:           Thu 31 Jul 2025 18:55:47 +0000
ROA not after:            Thu 30 Jul 2026 19:00:47 +0000
asID:                     61885
IP address blocks:        131.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:23:5a:bc:a4:1c:cb:ed:a7:6c:9a:e2:0e:ac:c5:f9:3a:00:ab:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jul 31 18:55:47 2025 GMT
            Not After : Jul 30 19:00:47 2026 GMT
        Subject: CN=36C5D22D1FFA16BFEBD10EE4AB89E04BF2C4867C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:1a:98:fe:14:90:37:b7:c2:68:4b:44:24:
                    d1:48:cf:66:25:c1:2b:22:ab:5f:b9:fd:d8:9d:a4:
                    51:79:78:ce:6b:f3:1d:f6:42:29:90:6a:c3:eb:6d:
                    5c:cb:59:cc:07:06:8c:17:c8:9d:38:12:70:5d:a2:
                    6c:e7:27:5f:85:7e:4f:0e:a9:1f:c8:67:41:72:67:
                    1f:82:d9:72:48:1f:14:53:9a:1d:c8:68:92:07:f7:
                    a8:a4:80:66:8d:ce:af:23:4c:39:7b:0f:2e:4d:04:
                    77:c0:55:6f:b1:11:ae:bb:69:35:df:a1:65:99:e4:
                    87:af:6c:0c:a6:80:36:d8:da:ba:e0:42:07:f2:69:
                    70:ef:97:5d:ad:19:61:23:bc:b1:c6:34:35:b0:63:
                    37:84:04:63:0e:e0:7f:ed:d4:d2:5b:bd:4c:c4:df:
                    90:df:ec:5e:e5:c6:d3:6f:a9:97:82:cd:aa:31:23:
                    9c:04:b7:a9:90:27:b9:84:1a:5c:30:dd:bd:e6:ee:
                    63:d0:63:c6:2f:52:2f:1e:e1:ef:31:7f:70:cd:97:
                    65:67:f3:9b:28:64:cc:fe:2e:c3:85:16:c9:02:5b:
                    78:c6:d2:0b:81:fa:5f:3e:f6:11:70:d6:91:32:dc:
                    81:38:eb:5e:bc:01:03:3a:b7:da:05:68:94:36:d3:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:D2:2D:1F:FA:16:BF:EB:D1:0E:E4:AB:89:E0:4B:F2:C4:86:7C
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:1d:97:7f:b0:82:4a:37:fa:ff:cb:66:72:ef:75:d0:51:
         0a:6a:60:20:0c:a9:76:21:e7:82:de:8c:30:df:ad:1c:e7:85:
         0d:a9:b3:21:6e:79:43:c6:51:76:64:2d:09:87:e3:36:c9:1c:
         e8:6e:62:f3:b8:20:34:32:1a:4d:ba:9c:7c:98:2b:f4:1b:39:
         f8:8d:de:96:61:57:c8:c6:86:69:b7:ba:0c:f3:6b:aa:64:6a:
         7a:d6:44:b9:71:5b:eb:74:12:a7:5b:28:e6:21:26:a2:0b:95:
         fb:41:bb:06:67:09:9b:1d:98:22:5d:e5:80:f8:73:e7:3a:70:
         67:26:8e:7d:d3:cd:b4:b0:3b:05:94:e5:f8:5b:c1:6f:09:fc:
         29:bd:7f:f1:fe:f2:54:7f:a4:65:b9:db:39:e5:fd:ca:9d:ea:
         35:5f:6f:13:89:a5:cc:88:c6:a0:9a:ae:36:ca:cf:b6:ca:2a:
         24:d6:e9:d1:1a:12:13:2a:5a:60:22:c0:10:bf:86:82:54:ac:
         3c:67:93:32:5d:7b:08:27:2b:3e:4b:54:27:21:c9:65:ae:f8:
         2a:3e:74:04:86:dd:d4:aa:dd:5b:fc:5c:51:3c:f8:15:a1:2f:
         26:32:19:47:4c:9d:1d:0b:70:28:87:ad:62:72:c8:67:75:b3:
         05:e2:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:02 2025 by rpki-client