Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa
File:                     3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa (raw, json)
Hash identifier:          8+usWcSegUEUvcuIspfZGUPrFRMxfY0kVemMc5qbRiA=
Subject key identifier:   FD:06:8B:3E:7D:00:CD:04:DF:C8:DD:1F:B8:B5:CB:DF:40:51:7C:DF
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       53B9CE91AA38F383B4668312497B2069D4670604
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa
Signing time:             Tue 22 Apr 2025 20:16:46 +0000
ROA not before:           Tue 22 Apr 2025 20:11:46 +0000
ROA not after:            Tue 21 Apr 2026 20:16:46 +0000
asID:                     265894
IP address blocks:        131.196.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b9:ce:91:aa:38:f3:83:b4:66:83:12:49:7b:20:69:d4:67:06:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: Apr 22 20:11:46 2025 GMT
            Not After : Apr 21 20:16:46 2026 GMT
        Subject: CN=FD068B3E7D00CD04DFC8DD1FB8B5CBDF40517CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:5e:50:54:70:5e:72:29:90:6c:4d:41:03:
                    0b:eb:7b:54:50:3e:7b:9e:af:d1:2d:da:4a:2a:ff:
                    83:75:d7:be:60:90:ab:5c:d6:80:c7:51:ef:84:5f:
                    00:46:d5:79:64:94:ae:6f:0d:8c:99:b8:a1:73:47:
                    1f:41:67:c4:ce:2e:df:48:6e:56:f7:7b:68:70:7b:
                    a7:61:72:02:7d:db:23:7b:93:98:b1:cc:75:8c:0a:
                    17:72:42:40:17:b1:1e:99:6e:ca:57:15:b5:06:79:
                    1a:db:fd:88:0d:97:ff:3e:f4:89:81:cc:dc:0a:a3:
                    7d:ad:48:ff:f9:e8:4a:8f:c8:d3:6b:92:36:b1:e5:
                    b7:e0:9a:cc:f0:9c:47:67:29:a7:50:c6:9f:62:cf:
                    d6:18:c7:0b:40:1d:6d:c3:da:cb:9d:70:5d:08:89:
                    35:c7:89:d0:f8:dd:d3:ad:ef:e5:30:5f:55:57:93:
                    e2:21:ea:a0:63:46:d4:79:3b:1d:c7:f3:e3:1d:9a:
                    6b:6b:ef:36:f6:54:37:da:0a:1c:e5:34:7f:4b:c5:
                    43:4d:e0:34:54:b0:c6:b9:a4:e9:82:97:8b:d8:06:
                    ec:77:ba:e7:b7:07:b4:bb:c3:1a:30:8b:ce:9e:36:
                    71:dd:02:6b:ea:2c:33:38:bf:11:10:76:f4:bc:8f:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:06:8B:3E:7D:00:CD:04:DF:C8:DD:1F:B8:B5:CB:DF:40:51:7C:DF
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:9f:d8:b5:1c:68:ac:86:09:5d:04:bb:3e:ef:e5:c7:c7:b0:
         de:f8:82:13:a2:79:1b:00:67:89:54:cb:0b:27:8c:25:36:d2:
         26:f8:1e:63:a4:2c:41:cd:07:ab:85:ef:1c:ef:92:0f:69:92:
         5c:cf:13:e9:1b:a7:84:70:cc:81:9d:9f:70:13:49:09:bc:99:
         de:40:14:d2:dc:12:2d:0c:e4:15:2f:fc:a9:af:d0:54:1f:87:
         50:8a:d1:67:60:03:0e:4c:fe:2a:ba:af:7c:d8:51:25:0e:52:
         14:16:ef:4f:ff:46:1b:43:d8:a0:fe:4d:13:9f:2f:6c:e6:0f:
         5a:f9:eb:86:1a:b1:59:a3:32:f1:33:0e:fa:73:cd:7a:c0:30:
         5d:36:0e:d7:7a:e8:be:83:0d:1d:20:c2:30:4a:ec:c2:b9:3d:
         68:e2:d7:ad:1a:38:70:71:70:22:3e:0a:17:fc:97:3f:31:bf:
         ed:f5:a6:ea:93:b6:99:f0:ce:7d:ba:53:61:3a:6c:5b:7b:dc:
         8c:4e:58:3f:2e:49:f3:84:fb:98:97:be:3c:37:cf:18:12:9d:
         93:23:07:ac:0b:e7:ed:fa:7f:6a:77:fc:c1:9f:e9:84:e5:1f:
         8a:ef:c2:18:a9:5d:55:c5:d2:ac:74:49:fa:e0:d9:52:94:cb:
         fc:3d:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:48 2025 by rpki-client on console.sobornost.net