Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32322d3232203d3e20323635333131.roa
File:                     3136382e3132312e3131322e302f32322d3232203d3e20323635333131.roa (raw, json)
Hash identifier:          9XXSPwEdwTPmf4aWrk//fWhcwf1/dCOyy39cLbuBG+E=
Subject key identifier:   31:5E:0A:0E:68:76:4B:57:81:62:77:C2:8B:93:19:0C:47:18:6A:39
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       0569E92653CCAED4F1B91093E27854B0668E8FCD
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32322d3232203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:34 +0000
ROA not before:           Thu 06 Mar 2025 16:42:34 +0000
ROA not after:            Thu 05 Mar 2026 16:47:34 +0000
asID:                     265311
IP address blocks:        168.121.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:69:e9:26:53:cc:ae:d4:f1:b9:10:93:e2:78:54:b0:66:8e:8f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:34 2025 GMT
            Not After : Mar  5 16:47:34 2026 GMT
        Subject: CN=315E0A0E68764B57816277C28B93190C47186A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:3c:89:db:ac:03:71:29:81:7e:ae:63:4a:
                    c0:32:92:fc:24:9e:fd:ff:35:fd:48:37:22:e0:73:
                    ca:a8:c9:36:ea:4d:72:ed:e6:08:49:16:98:b9:f6:
                    f6:7d:0d:8a:be:19:ea:d6:20:21:39:a3:42:30:e2:
                    66:0c:44:6d:f5:41:7e:9d:c9:e7:84:b0:f6:ca:3d:
                    6f:e5:cb:19:2d:f6:36:49:19:05:2a:f1:1b:95:57:
                    cc:ee:0d:f2:f3:b4:9d:18:f0:35:03:28:f3:65:cb:
                    fb:5c:4c:d7:e4:78:d6:cd:4e:05:f0:0e:15:7c:11:
                    38:73:a6:34:60:ac:b2:71:0a:6b:c0:01:ee:0c:2a:
                    fd:e4:52:cd:c5:2a:b1:3b:7b:5d:ed:a9:d0:dc:1a:
                    a1:c7:bf:42:53:c4:3b:f9:fc:5c:e9:ca:db:e2:02:
                    48:16:b3:73:e8:65:cb:e4:26:61:93:02:3d:6b:55:
                    f4:93:2b:a0:fb:2b:42:3b:14:25:95:75:b3:51:f5:
                    93:71:e5:ef:b0:30:8d:29:21:97:51:23:82:8e:50:
                    92:33:a7:89:65:32:bd:59:c1:10:60:15:a6:2b:2f:
                    b2:5a:f5:13:28:6e:50:c1:52:12:bd:e8:48:0e:a2:
                    f6:69:2e:d6:33:11:d7:a4:2b:a4:78:cb:28:8c:93:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:0A:0E:68:76:4B:57:81:62:77:C2:8B:93:19:0C:47:18:6A:39
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32322d3232203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:c6:39:32:af:e1:c8:7b:ee:1b:2b:2b:ae:32:cd:dc:36:
         97:6e:ca:69:5f:59:01:ad:6f:ac:da:0c:b8:f3:81:f1:12:8b:
         b2:6b:cd:c6:bc:68:10:33:c6:54:f7:e5:28:eb:27:57:05:44:
         24:5d:8e:47:7d:65:97:f1:b1:12:0f:a8:61:13:8b:10:97:ae:
         70:3e:56:a1:86:1c:0a:b9:80:41:2e:6d:c6:09:9f:29:43:f6:
         cc:f7:59:2f:d3:3f:e9:22:84:2b:83:51:a2:fd:c2:e0:eb:a1:
         5e:64:3b:5d:e8:68:cd:3a:5b:b1:28:04:be:28:85:da:fe:d6:
         fc:1a:98:e0:c3:4c:76:f6:2a:da:dc:88:40:33:ee:94:2c:93:
         ec:a6:54:27:c8:c7:89:bb:4b:7e:0d:27:e2:19:8e:98:c3:3f:
         0f:12:26:91:75:91:46:40:2d:ac:33:b0:fb:b6:8b:08:0d:69:
         7a:ca:9c:3a:49:50:d4:b3:0b:1a:ad:29:40:24:e3:4c:7d:15:
         83:53:0c:03:c4:22:87:f1:6d:4b:88:6d:64:5d:34:9f:9a:f6:
         aa:43:77:11:74:7d:1c:ed:57:6c:cc:a8:50:06:51:cb:4a:a7:
         7f:1c:70:44:4a:09:d3:e9:3a:4b:ca:06:17:af:41:4a:48:e3:
         3c:37:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:39 2025 by rpki-client