Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32342d3234203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32342d3234203d3e203631373536.roa (raw, json)
Hash identifier:          YekA/KErraUQLvkt06ctCk9yfutrRddDMOz9NBxVDQQ=
Subject key identifier:   18:8A:C6:A0:25:1F:98:D1:69:B2:2B:63:2D:53:D0:51:08:83:A1:41
Certificate issuer:       /CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
Certificate serial:       71184548BA997EBC880F7ACD0341D958C514C7D6
Authority key identifier: A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32342d3234203d3e203631373536.roa
Signing time:             Wed 16 Apr 2025 18:38:41 +0000
ROA not before:           Wed 16 Apr 2025 18:33:41 +0000
ROA not after:            Wed 15 Apr 2026 18:38:41 +0000
asID:                     61756
IP address blocks:        131.100.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:45:48:ba:99:7e:bc:88:0f:7a:cd:03:41:d9:58:c5:14:c7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3DB03FB501F59B8249DC376AB91FD1D96D1435E
        Validity
            Not Before: Apr 16 18:33:41 2025 GMT
            Not After : Apr 15 18:38:41 2026 GMT
        Subject: CN=188AC6A0251F98D169B22B632D53D0510883A141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:ac:b8:95:ae:b8:0b:2c:41:dd:35:c9:53:
                    7e:49:90:60:5d:bc:f4:1c:27:f0:71:90:b0:22:c4:
                    57:f9:e6:aa:e1:45:53:f0:23:49:44:b4:4b:1d:0e:
                    a5:b6:8b:f0:99:c5:6a:fe:8c:48:37:ea:ef:22:02:
                    86:3c:c5:00:25:3b:8a:e2:6c:0e:3c:4d:7f:bd:6a:
                    f0:a9:0c:02:5e:9d:93:28:3f:9f:a0:29:5c:c8:37:
                    14:a3:32:c4:e4:4e:7d:82:c0:39:80:da:c0:9f:36:
                    c2:05:70:bb:91:9c:cb:7f:1a:93:06:45:f8:f3:d8:
                    6e:f6:6e:4d:fa:f5:b9:68:a7:dd:77:98:51:0a:12:
                    04:e1:b2:4b:9a:5c:fe:fc:71:24:38:59:ba:f4:34:
                    43:33:f2:74:27:56:da:35:e5:a7:43:fb:25:17:ca:
                    90:5c:68:b1:46:78:c4:a8:52:f9:ce:a9:91:ed:97:
                    39:03:54:7e:30:19:16:97:c0:77:08:30:23:20:c4:
                    c7:84:52:9f:42:c2:82:32:e3:d6:19:43:b7:1f:05:
                    a3:c5:d2:b1:b4:a9:4c:2f:3d:1a:33:30:0f:97:8f:
                    de:57:c7:63:23:26:80:f9:9c:6c:bc:66:9a:c7:8f:
                    bd:ac:39:6b:af:34:0e:a6:4b:87:6b:be:be:79:19:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:C6:A0:25:1F:98:D1:69:B2:2B:63:2D:53:D0:51:08:83:A1:41
            X509v3 Authority Key Identifier:
                keyid:A3:DB:03:FB:50:1F:59:B8:24:9D:C3:76:AB:91:FD:1D:96:D1:43:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DB03FB501F59B8249DC376AB91FD1D96D1435E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32342d3234203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:aa:94:1f:96:02:73:81:47:d8:8f:f3:f1:d6:99:34:44:
         cd:0d:17:c1:0f:8d:ab:00:87:0b:25:e7:f3:2f:6d:8a:f9:ff:
         2a:f5:74:32:67:0a:28:8c:6e:7f:66:84:18:2c:43:49:a4:21:
         06:01:60:f1:43:9d:c7:70:23:2f:8b:ce:24:41:1f:d0:36:fe:
         ef:da:32:c2:8f:cd:ff:f4:7f:06:ab:bc:0e:43:8b:9d:75:d4:
         f6:fa:26:cc:15:d2:0b:08:cb:ce:f2:04:2b:8c:8a:51:98:66:
         43:6d:cf:7f:d1:e3:37:9d:95:0e:5e:8b:95:41:66:b9:26:f5:
         75:13:8a:0c:07:a6:ca:e1:5c:de:10:46:e6:26:3c:c3:29:81:
         30:d7:03:22:d0:54:a3:1c:c0:c5:23:63:d4:49:c5:28:bc:d6:
         70:23:41:10:d6:c8:38:a7:92:00:94:e0:c8:55:57:a3:34:0c:
         a2:91:69:91:9d:e1:70:c1:71:52:23:37:46:5b:12:3c:36:ea:
         71:af:2c:18:97:9d:26:1f:77:6e:00:d5:34:b8:6b:61:3d:d9:
         46:bb:b4:3b:75:0a:ed:4a:8f:1f:6d:ba:3e:5b:a5:9e:73:ba:
         c4:1b:e2:20:54:34:3e:e6:f2:d9:61:24:45:92:b0:2c:9b:48:
         d8:c1:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:30 2025 by rpki-client on console.sobornost.net