Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (raw, json)
Hash identifier:          /RkI7K3MFSbxg0rpmqRCTgQuC1jsVwXRfwR1XW1HgG4=
Subject key identifier:   95:7B:E5:7B:25:B7:87:19:0F:CF:93:3B:53:BD:90:0B:D3:F4:DC:AE
Certificate issuer:       /CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
Certificate serial:       62511D3BB1BE01F3C7EB5BC892D2BDBAA671BD17
Authority key identifier: A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa
Signing time:             Wed 16 Apr 2025 18:38:38 +0000
ROA not before:           Wed 16 Apr 2025 18:33:38 +0000
ROA not after:            Wed 15 Apr 2026 18:38:38 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:1d:3b:b1:be:01:f3:c7:eb:5b:c8:92:d2:bd:ba:a6:71:bd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
        Validity
            Not Before: Apr 16 18:33:38 2025 GMT
            Not After : Apr 15 18:38:38 2026 GMT
        Subject: CN=957BE57B25B787190FCF933B53BD900BD3F4DCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:24:6c:92:1a:7e:12:f1:ae:93:e3:a2:fc:
                    be:55:84:e7:16:06:83:5e:60:3e:05:42:89:22:37:
                    5e:4e:82:72:5e:64:05:7f:c1:df:e4:02:c7:94:71:
                    6b:a6:a8:56:d5:17:42:4e:80:a6:49:26:69:c5:9e:
                    9d:f4:04:76:cd:f9:fa:f1:51:c6:69:c4:4a:da:e3:
                    7c:c5:a5:8a:76:a8:ad:d9:1a:7b:17:28:f5:77:de:
                    78:ab:e8:a0:40:61:78:ca:72:2f:76:88:39:5c:6b:
                    db:f7:16:36:bf:6c:64:f3:17:68:d1:d0:f6:5e:19:
                    30:1c:62:80:fd:eb:21:f9:57:e0:4d:a5:74:0a:be:
                    db:33:12:9b:05:e2:f4:c4:57:98:5d:38:bd:e8:bb:
                    0d:85:b3:a0:5e:2c:fb:79:cb:91:a6:ea:50:22:7f:
                    2c:c3:93:7c:fb:83:6b:8d:ee:2e:60:ba:51:0f:7b:
                    f6:b1:02:70:17:0d:fb:91:e3:ac:a1:ef:04:e9:0e:
                    b9:b8:37:f3:55:58:40:5b:77:79:9c:81:88:ad:6f:
                    89:46:0d:55:c3:8e:63:95:96:3e:6d:22:75:1d:c7:
                    74:f1:a1:6f:b8:e5:34:52:6a:c3:c3:fd:cc:ce:75:
                    3f:49:4c:43:54:f1:b3:06:c5:69:8b:2d:18:ff:83:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:E5:7B:25:B7:87:19:0F:CF:93:3B:53:BD:90:0B:D3:F4:DC:AE
            X509v3 Authority Key Identifier:
                keyid:A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:3f:c8:18:ee:b0:9e:fc:a5:06:b6:a1:fe:1d:0c:8a:8a:
         5e:55:0c:51:1e:71:e4:05:53:71:55:b3:2a:d6:15:53:b4:35:
         29:5e:63:38:86:87:e2:a5:8c:42:77:e3:8d:9c:d4:1a:68:6d:
         f9:b5:79:52:71:65:94:73:c7:d7:c0:22:28:fc:63:2f:05:c4:
         4d:b4:ec:3b:9b:8c:60:25:3a:1d:68:aa:d7:c7:c9:ce:57:7a:
         28:aa:dc:72:25:ac:53:09:8c:cb:e6:c7:1a:34:76:5a:83:e7:
         95:07:68:bf:4e:eb:52:3e:76:70:54:8e:02:54:2e:e7:6e:a6:
         23:e8:01:ee:7c:18:06:9f:83:c7:cb:d1:30:13:ca:68:c2:de:
         ba:29:7d:2e:ab:d6:46:b8:3d:33:ce:08:96:a6:ac:0e:8a:a1:
         89:93:c2:0e:ed:9e:6c:9d:0b:94:ff:4c:1a:3e:90:d7:17:99:
         69:42:8f:21:67:e3:da:8c:be:72:2b:ef:bc:49:d8:4e:c9:3a:
         19:32:91:87:7f:5d:7b:c8:10:9a:d4:0e:4b:05:26:f4:e2:4c:
         33:0a:d2:ad:ce:b3:d7:61:19:6b:f4:85:64:6d:a7:9b:58:5a:
         06:c5:e8:9d:d4:9b:a2:db:5e:e9:20:cc:92:ec:41:5d:0c:1d:
         1a:e0:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:30 2025 by rpki-client on console.sobornost.net