Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa
File:                     3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa (raw, json)
Hash identifier:          pWS/hzWjSgmCFUFIIS8dKL4zzTlUbOK/GOaXl6nkauM=
Subject key identifier:   5F:8F:75:41:32:06:7E:D8:4B:4F:F4:98:73:AA:C6:6A:30:01:07:96
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       210AD28BFA4EA996CFFC3DEA7D069AE8D210B53E
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa
Signing time:             Wed 26 Mar 2025 14:49:38 +0000
ROA not before:           Wed 26 Mar 2025 14:44:38 +0000
ROA not after:            Wed 25 Mar 2026 14:49:38 +0000
asID:                     61684
IP address blocks:        131.108.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0a:d2:8b:fa:4e:a9:96:cf:fc:3d:ea:7d:06:9a:e8:d2:10:b5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Mar 26 14:44:38 2025 GMT
            Not After : Mar 25 14:49:38 2026 GMT
        Subject: CN=5F8F754132067ED84B4FF49873AAC66A30010796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:2c:dd:e8:c9:fb:75:54:6c:6a:59:36:99:
                    ec:fe:62:d9:06:2f:b7:1c:60:ae:ec:60:64:b5:6d:
                    ff:68:e2:3f:2a:1d:55:09:9f:aa:fa:9d:50:26:c8:
                    0b:ec:cb:f3:43:11:2c:77:38:77:be:61:8f:3d:c3:
                    ce:ac:14:7f:42:6b:ad:02:52:75:37:c8:6f:91:89:
                    cd:cc:7b:1f:68:67:e0:23:d7:55:d7:95:09:cd:0f:
                    fb:f4:6b:0e:6e:d9:e8:0b:e9:19:23:e4:db:4b:d1:
                    89:20:0c:3d:7a:3f:a6:3d:34:1c:bf:5f:d5:59:50:
                    f6:dd:0a:ad:2b:4f:d4:33:65:eb:fc:0e:85:9b:5e:
                    69:5d:b0:e5:75:5e:27:42:62:a6:aa:87:aa:9a:21:
                    ad:70:33:e7:ae:4d:3e:5b:ef:19:38:0f:e1:40:4e:
                    60:29:1e:b2:c2:5a:45:0e:45:bf:f8:b0:c5:05:6f:
                    52:11:e4:02:2f:6f:3f:6c:a1:69:9a:85:99:9f:eb:
                    c9:72:09:2c:67:9e:3c:08:e6:a2:b3:82:20:41:5f:
                    e3:0e:b9:86:7a:b8:5e:ca:93:84:e0:a0:b9:4f:ea:
                    70:79:af:59:3b:52:61:9b:56:af:53:5b:d8:0f:e9:
                    b6:55:d1:0a:6f:4a:91:45:dc:ef:c3:ed:55:80:e2:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:75:41:32:06:7E:D8:4B:4F:F4:98:73:AA:C6:6A:30:01:07:96
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:ab:c7:26:4b:31:5e:03:0e:57:94:bb:75:d7:c4:61:64:
         5c:b4:39:a6:19:e8:e9:cc:3e:c9:f9:e3:eb:fd:61:2c:7d:e2:
         0d:29:d4:f6:69:68:fd:80:66:be:e9:e9:4a:68:9d:e4:30:0a:
         c5:41:4b:fe:e3:78:64:87:09:59:a0:20:4a:f5:a1:a2:2a:fa:
         b3:fa:85:f4:fe:b8:d2:6c:52:57:20:a7:19:6c:98:4a:8f:57:
         d7:7f:fd:f2:af:23:d3:93:d8:33:32:2c:04:6e:a2:4a:5b:81:
         a5:69:5f:ce:96:56:69:ec:f7:b6:fd:b3:23:2b:3f:26:25:ab:
         de:b6:67:30:1c:65:ad:f3:6c:86:82:7b:66:10:da:39:f1:b7:
         e7:45:49:6b:9c:0c:7d:7d:8e:22:c6:80:c7:7f:b5:20:dc:74:
         a0:1c:a8:9d:bf:ba:59:b1:f0:9d:98:ca:39:28:b2:3b:74:6a:
         ff:54:03:7c:3a:c3:e0:6a:fc:20:ee:1c:0c:be:91:35:c2:50:
         65:e8:ab:f4:18:4c:e1:28:4e:54:b2:34:ec:f9:ca:cb:c6:72:
         9d:b8:31:fa:53:09:7c:4e:be:f9:c4:14:1b:90:4c:55:0f:38:
         b3:80:1d:a2:4c:61:f2:16:49:02:8f:54:58:7e:26:3b:80:6e:
         bc:8c:a7:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIQrSi/pOqZbP/D3qfQaa6NIQtT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5RjZGMDFCODc1MDA4QUYyQzEzMjAwOUQwNTA5RTY4
MUUyRkE5OTAeFw0yNTAzMjYxNDQ0MzhaFw0yNjAzMjUxNDQ5MzhaMDMxMTAvBgNV
BAMTKDVGOEY3NTQxMzIwNjdFRDg0QjRGRjQ5ODczQUFDNjZBMzAwMTA3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Qizd6Mn7dVRsalk2mez+YtkG
L7ccYK7sYGS1bf9o4j8qHVUJn6r6nVAmyAvsy/NDESx3OHe+YY89w86sFH9Ca60C
UnU3yG+Ric3Mex9oZ+Aj11XXlQnND/v0aw5u2egL6Rkj5NtL0YkgDD16P6Y9NBy/
X9VZUPbdCq0rT9QzZev8DoWbXmldsOV1XidCYqaqh6qaIa1wM+euTT5b7xk4D+FA
TmApHrLCWkUORb/4sMUFb1IR5AIvbz9soWmahZmf68lyCSxnnjwI5qKzgiBBX+MO
uYZ6uF7Kk4TgoLlP6nB5r1k7UmGbVq9TW9gP6bZV0QpvSpFF3O/D7VWA4lazAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUX491QTIGfthLT/SYc6rGajABB5YwHwYDVR0j
BBgwFoAU+59vAbh1AIrywTIAnQUJ5oHi+pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpUTGlyYnlqeWhnQmVVak4xZE5VaXZGUU55Q0RkR0hqaTdjYU1pZWF0
UUIvMC9GQjlGNkYwMUI4NzUwMDhBRjJDMTMyMDA5RDA1MDlFNjgxRTJGQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCOUY2RjAxQjg3NTAwOEFG
MkMxMzIwMDlEMDUwOUU2ODFFMkZBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKVExpcmJ5anloZ0JlVWpOMWROVWl2RlFOeUNEZEdIamk3Y2FNaWVhdFFCLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDbLwwDQYJKoZIhvcNAQELBQADggEBAKoFq8cm
SzFeAw5XlLt118RhZFy0OaYZ6OnMPsn54+v9YSx94g0p1PZpaP2AZr7p6UponeQw
CsVBS/7jeGSHCVmgIEr1oaIq+rP6hfT+uNJsUlcgpxlsmEqPV9d//fKvI9OT2DMy
LARuokpbgaVpX86WVmns97b9syMrPyYlq962ZzAcZa3zbIaCe2YQ2jnxt+dFSWuc
DH19jiLGgMd/tSDcdKAcqJ2/ulmx8J2Yyjkosjt0av9UA3w6w+Bq/CDuHAy+kTXC
UGXoq/QYTOEoTlSyNOz5ysvGcp24MfpTCXxOvvnEFBuQTFUPOLOAHaJMYfIWSQKP
VFh+JjuAbryMpx4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:12 2025 by rpki-client