Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32322d3232203d3e203631363834.roa
File:                     3133312e3130382e3138382e302f32322d3232203d3e203631363834.roa (raw, json)
Hash identifier:          SfuhqLYqXDrEnseaIU8YVKY2TKbVihNLPsaue+PU7UQ=
Subject key identifier:   60:FF:37:2D:56:57:4B:15:A5:51:39:D9:91:07:C1:06:57:A4:E8:C0
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       7C50268AEC56BAF15C37099B8D09903BD159B96E
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32322d3232203d3e203631363834.roa
Signing time:             Wed 26 Mar 2025 14:49:36 +0000
ROA not before:           Wed 26 Mar 2025 14:44:36 +0000
ROA not after:            Wed 25 Mar 2026 14:49:36 +0000
asID:                     61684
IP address blocks:        131.108.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:50:26:8a:ec:56:ba:f1:5c:37:09:9b:8d:09:90:3b:d1:59:b9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Mar 26 14:44:36 2025 GMT
            Not After : Mar 25 14:49:36 2026 GMT
        Subject: CN=60FF372D56574B15A55139D99107C10657A4E8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:ad:35:33:20:dd:4b:be:e4:3d:d4:bb:f4:
                    35:2b:da:26:12:f0:29:9d:08:22:30:f3:32:7b:72:
                    be:58:d8:41:a4:90:08:57:8a:37:b4:3b:ba:72:8f:
                    94:5c:fd:32:9c:3c:4d:f8:7c:20:0a:25:c2:f7:0c:
                    b8:89:6c:70:7f:3f:a5:d0:94:44:18:bd:7b:c7:8b:
                    74:5c:fa:4e:11:44:e8:c1:e2:c3:43:cb:6a:71:5d:
                    55:52:71:c6:bb:12:c3:4f:b0:8a:ff:23:e6:3d:39:
                    37:b8:37:f0:5e:ee:49:20:ce:47:5a:df:02:58:63:
                    12:4f:79:e4:26:f3:86:a4:f0:2b:0f:d9:a9:63:bc:
                    2c:8a:d4:de:20:df:fc:e4:9c:5a:98:50:a8:bc:04:
                    5f:6f:06:79:f6:bd:1b:ac:6e:68:30:f4:cd:2f:df:
                    f5:e6:07:7d:05:5f:2c:c3:ea:d6:6c:3f:81:43:c3:
                    06:7c:1e:fe:29:1c:45:93:26:ef:87:15:0a:01:5c:
                    cf:26:01:49:d5:4e:2a:31:9a:80:49:cb:31:07:46:
                    93:a8:a9:ef:de:ae:23:a0:ad:04:72:40:d5:48:e7:
                    aa:d2:d0:b4:3b:ab:1e:99:c2:4a:89:f7:7c:bb:50:
                    60:1f:63:76:b1:38:00:09:25:01:c1:1f:95:44:cc:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:37:2D:56:57:4B:15:A5:51:39:D9:91:07:C1:06:57:A4:E8:C0
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32322d3232203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:76:20:3f:b8:3e:f9:a2:49:e4:fb:ef:d8:82:f3:b8:ba:
         df:41:0f:b4:da:0f:9d:90:a5:36:32:64:f5:c9:24:11:6c:8b:
         6f:c8:ea:cd:a0:b8:17:f6:8d:47:f6:b4:b8:3f:59:b8:25:74:
         f6:92:dd:67:04:39:70:0a:51:c3:33:c6:a0:4a:36:4d:5f:54:
         f5:4c:52:ee:cc:64:1c:1a:93:c8:65:4d:3e:95:b9:ce:8d:77:
         f6:35:08:8a:41:e2:70:e1:d9:24:10:6d:29:bf:b1:50:b3:34:
         58:51:8d:9b:52:2e:5e:3a:85:59:90:42:16:49:e5:16:99:bc:
         01:44:4e:d0:75:33:ae:13:c0:4a:59:70:a6:4e:2d:99:04:7d:
         ab:c5:5e:2a:36:cd:1d:0d:d8:c3:ad:20:53:58:0f:bf:2c:ca:
         cf:c1:26:a2:27:89:12:7d:99:a4:75:92:7d:4a:c9:b1:7d:4a:
         fb:eb:9f:7d:e2:39:71:34:7d:c7:5d:22:59:14:e1:43:e2:97:
         ad:93:24:6c:63:83:75:e6:a8:15:ef:24:58:14:14:95:ec:c2:
         fc:b2:c4:5e:4c:7c:12:43:34:d9:9c:8b:81:18:9b:e5:24:86:
         cf:a2:de:5d:d2:d3:05:d2:f3:82:56:14:96:29:21:01:4f:85:
         75:46:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:35 2025 by rpki-client