Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
File:                     3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier:          HTOJSLJl4GIWwKAj2fSmf9lIf5SoUbQwzrRwLXM6NoM=
Subject key identifier:   72:68:F5:47:B2:BD:2E:18:46:16:7E:16:06:93:89:98:54:76:87:9F
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       3304AEDC3D7F52B13A42054063716B5455273803
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
Signing time:             Thu 10 Apr 2025 14:05:15 +0000
ROA not before:           Thu 10 Apr 2025 14:00:15 +0000
ROA not after:            Thu 09 Apr 2026 14:05:15 +0000
asID:                     53196
IP address blocks:        131.100.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:04:ae:dc:3d:7f:52:b1:3a:42:05:40:63:71:6b:54:55:27:38:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: Apr 10 14:00:15 2025 GMT
            Not After : Apr  9 14:05:15 2026 GMT
        Subject: CN=7268F547B2BD2E1846167E16069389985476879F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f3:6d:64:ba:f3:b7:74:e9:77:fd:f7:38:15:
                    5a:4d:bb:06:2f:a4:0d:7e:57:7e:9d:9e:fe:c8:8b:
                    ca:b1:ff:f4:f4:65:2c:ee:52:d2:b4:d4:25:d7:8f:
                    7a:6c:5a:00:e0:a8:57:41:11:ee:2e:99:1b:a8:64:
                    20:36:80:d2:66:7e:21:5c:71:84:30:16:03:65:b5:
                    98:be:a8:16:a0:07:e6:9b:aa:55:4c:7b:19:ff:3e:
                    45:a7:33:a9:20:5f:78:d2:d9:b6:3d:bf:0b:08:0b:
                    fa:86:6c:43:1f:6c:06:23:b8:7a:1a:cc:81:f4:25:
                    ac:59:68:0d:1d:2f:74:63:ae:06:65:2a:d6:a4:a1:
                    26:0b:8a:35:f9:6d:c1:97:a6:22:fa:cb:2c:16:48:
                    46:5e:cb:63:ad:b9:23:10:21:48:e9:0a:1c:5e:f1:
                    22:d3:ec:29:f0:06:69:73:c6:54:ed:21:11:8d:3f:
                    98:6c:3d:09:83:aa:63:b3:b2:02:28:b1:e6:74:95:
                    a5:03:31:16:9c:51:bb:e4:d4:6f:68:81:e8:1e:ee:
                    d5:2e:4f:62:9a:88:cd:a9:08:d3:80:da:e9:69:25:
                    78:77:93:77:dd:b8:af:9e:58:bc:30:5e:80:09:11:
                    b9:9d:9a:24:5c:66:97:7b:8c:e0:2a:a9:72:ec:dc:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:F5:47:B2:BD:2E:18:46:16:7E:16:06:93:89:98:54:76:87:9F
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:1f:50:72:05:fa:3a:59:a0:a4:1b:2f:0b:31:1b:26:35:
         6f:bd:b9:e9:01:63:19:fc:71:04:43:e3:42:5d:20:b3:0c:45:
         47:99:d4:c1:05:2e:98:f2:03:a0:ea:66:63:46:f0:90:4c:e9:
         8f:5f:27:6a:6c:8f:cb:db:25:3f:f7:c3:82:fd:8e:3f:a9:9c:
         1a:a8:22:2d:55:e8:47:e2:eb:c8:7a:af:22:36:f9:a3:11:0e:
         76:14:19:8f:a7:af:6a:bc:04:cc:44:cb:26:86:c7:cf:8b:a6:
         fb:46:a6:fb:f7:82:6f:7e:3b:a4:a5:fb:30:7a:79:2e:fc:3f:
         06:24:93:ac:72:08:ed:54:31:a3:87:24:f8:f2:20:b9:ef:5e:
         af:7e:85:b0:bb:a3:75:4c:60:8c:a8:6a:ef:5c:06:c0:03:66:
         a1:98:1b:0f:44:c6:4e:2f:8e:ee:a3:d4:c4:6b:ed:78:f5:94:
         f8:6a:ac:56:c9:5d:43:4d:b3:f6:d6:2a:8e:a8:9e:1a:7b:9c:
         7b:20:98:d9:b8:68:22:cd:a8:12:ee:8c:45:fc:64:bd:65:4f:
         9b:e6:41:de:99:07:e7:52:b3:35:3e:a0:0f:35:41:88:8b:7c:
         06:00:f3:e1:6c:20:af:f6:26:0c:1f:26:16:82:f0:5f:47:5c:
         88:94:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:09 2025 by rpki-client on console.sobornost.net