Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
File:                     3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier:          pYThd40tDOP/JDfVOYJobiyuXD6slG7cqrnQzP6cmKI=
Subject key identifier:   65:00:8B:0A:4C:2B:D8:8C:6D:6F:B9:BC:76:86:27:B8:4E:1F:33:36
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       37DE413730831332FA7B167E44B563F98852DEBC
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:36 +0000
ROA not before:           Thu 06 Mar 2025 16:42:36 +0000
ROA not after:            Thu 05 Mar 2026 16:47:36 +0000
asID:                     265311
IP address blocks:        168.121.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:41:37:30:83:13:32:fa:7b:16:7e:44:b5:63:f9:88:52:de:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:36 2025 GMT
            Not After : Mar  5 16:47:36 2026 GMT
        Subject: CN=65008B0A4C2BD88C6D6FB9BC768627B84E1F3336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:42:47:d0:da:c4:a2:ec:87:14:ab:63:b1:
                    7b:41:f7:a4:3a:9b:3e:36:bc:e2:bb:49:eb:f2:92:
                    da:ed:2e:1f:50:81:6b:24:ff:7e:a6:1a:7e:f4:c9:
                    4e:00:13:23:5b:91:c1:c6:dc:9d:fa:f4:fa:26:e5:
                    fa:f8:d5:2f:7c:dd:71:c2:83:68:4d:c2:e0:2a:57:
                    da:35:ab:f8:d4:63:9d:ca:c1:f2:1e:7b:fe:e9:a4:
                    86:27:99:b3:8b:e2:4d:6c:e1:7e:5d:0d:08:7f:26:
                    62:87:ff:24:1d:72:f9:6c:ea:de:61:c2:b3:0a:e3:
                    e8:0f:29:cd:cd:e7:3a:ca:1b:f4:b5:10:10:c3:af:
                    eb:3d:76:f6:bb:b9:f3:30:4f:cc:cb:f7:0a:0d:82:
                    26:0f:2f:2a:b0:88:7e:12:d8:91:73:5d:0f:5e:9e:
                    8d:b2:c5:12:f5:bc:40:81:af:34:d3:d7:12:ab:9b:
                    cd:57:4f:f1:54:05:f7:79:1e:17:0d:d2:8b:d2:54:
                    10:9f:42:ac:d3:55:fc:52:06:ef:49:ee:08:9b:5f:
                    4a:a7:ba:6a:51:35:d2:b4:bc:c8:62:1f:c9:52:e2:
                    50:5d:83:35:35:9f:cb:78:90:45:9c:03:4e:90:01:
                    fc:48:3c:4b:8c:37:5e:73:a7:46:61:d7:b3:be:f6:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:8B:0A:4C:2B:D8:8C:6D:6F:B9:BC:76:86:27:B8:4E:1F:33:36
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:95:79:f0:fe:92:f4:41:ae:02:48:1e:f8:59:41:5f:74:
         aa:aa:0b:29:5b:ee:10:59:d9:4b:cd:94:27:68:1a:9d:1c:1b:
         29:3b:9c:43:69:84:50:98:c6:44:e2:d6:e5:a8:21:6b:79:6b:
         1d:90:7d:19:7c:a1:a0:d4:5e:1a:78:79:00:c2:b8:0f:87:2c:
         c6:5e:b3:14:0d:89:7d:c5:77:f5:70:f5:2d:be:6a:30:11:db:
         a2:a3:cc:77:70:e8:76:fd:7a:b0:a1:e4:a7:67:ca:4e:ef:a0:
         af:2b:72:4d:cc:d2:84:95:22:12:8b:21:76:8b:80:6a:bb:98:
         7f:55:c5:b9:c2:a5:b2:3b:9c:8c:07:79:27:37:98:ba:c6:15:
         cb:14:5a:b0:78:9e:45:b1:04:15:70:f8:72:6c:0a:ef:bb:4d:
         da:91:e7:94:d8:de:6b:c1:2a:a5:16:bf:7e:b3:5d:51:67:c6:
         62:8d:bc:bf:b8:1e:02:ce:72:20:0f:a3:8d:11:08:b5:72:d6:
         c9:2a:15:ef:92:3c:09:98:cc:86:6b:40:94:c4:cd:29:f3:c3:
         ab:0c:d0:b7:15:a3:23:a1:e3:bb:b9:51:91:a9:f7:2f:8d:38:
         dc:19:94:54:e1:3c:ff:e2:96:c7:fd:b6:0a:b5:35:04:5b:6c:
         26:5e:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:55:29 2025 by rpki-client