Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa
File:                     3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          r31qDXALIWZVKyZ0gTPuLzzPthPm5Ef1Yl+beOzQ0LU=
Subject key identifier:   C0:C1:E7:30:D0:17:34:4E:87:2C:72:51:27:75:A0:DE:38:B3:80:8F
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       01EF4B7B8E015BDD7168E3C8D8C4073454A98DE7
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 26 Mar 2025 14:49:37 +0000
ROA not before:           Wed 26 Mar 2025 14:44:37 +0000
ROA not after:            Wed 25 Mar 2026 14:49:37 +0000
asID:                     61684
IP address blocks:        168.228.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:4b:7b:8e:01:5b:dd:71:68:e3:c8:d8:c4:07:34:54:a9:8d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Mar 26 14:44:37 2025 GMT
            Not After : Mar 25 14:49:37 2026 GMT
        Subject: CN=C0C1E730D017344E872C72512775A0DE38B3808F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:7e:b3:8a:4b:13:52:73:75:96:00:7c:e7:
                    71:50:72:73:10:69:ef:f6:11:6d:d8:f1:ce:99:d6:
                    ed:be:73:5c:26:3c:70:fc:e8:49:1a:6c:5e:e4:97:
                    49:7f:62:c7:29:82:eb:da:43:ce:25:c6:8e:33:05:
                    fe:f8:59:de:3c:bd:b3:e7:cf:ce:7d:db:9f:f1:e6:
                    7c:51:e0:f4:c2:99:4c:b1:c0:65:6b:3c:3d:cc:32:
                    c7:97:af:6f:c1:f8:f5:4b:ef:6a:42:57:43:a1:da:
                    e4:f5:b6:99:5a:c4:15:c7:55:14:63:c3:61:6c:b9:
                    5a:40:51:ac:8d:0e:00:c7:b0:ca:f4:de:75:bf:79:
                    d4:3f:f0:0b:65:93:ea:7a:cb:72:f1:7f:45:75:54:
                    e9:13:61:9b:55:cd:9a:01:eb:75:71:36:2f:7c:b7:
                    9d:d3:fc:f4:4f:0e:c0:22:5d:1e:25:5d:26:6f:43:
                    a1:ac:15:fe:69:1e:88:43:e2:da:63:a6:d6:dd:47:
                    7e:e8:4c:f9:65:30:f8:84:31:79:53:3f:ec:80:b6:
                    db:6b:22:0b:8a:4f:d8:b5:a9:20:f2:58:3a:4e:21:
                    74:fb:fb:71:f2:74:9d:91:7c:c7:fc:ee:7b:0b:31:
                    4f:ec:13:b4:a7:e9:f6:9b:09:ae:23:fb:39:a3:02:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:E7:30:D0:17:34:4E:87:2C:72:51:27:75:A0:DE:38:B3:80:8F
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:54:e7:ac:b6:94:d1:6d:cf:8b:c7:30:91:89:5b:b0:2e:
         d5:d7:0d:ef:b3:8e:77:64:ed:c3:0d:7c:3b:20:de:a6:a7:1c:
         33:20:04:cf:a4:3a:79:22:c6:9f:a6:a7:d8:6d:6b:ef:20:93:
         91:8f:38:a0:78:36:f7:09:4c:e9:75:63:19:be:05:a7:0c:0e:
         20:53:b2:f0:48:17:a6:13:7c:2e:16:b2:f3:5a:13:4c:5f:84:
         02:23:6e:4c:69:03:6b:3b:39:97:8f:1e:b3:0a:9f:06:08:ef:
         31:d3:63:1e:40:75:60:93:14:27:98:5d:a9:91:3e:73:2c:c1:
         0e:60:06:ca:9b:7d:10:0a:bc:d9:78:5a:a0:dc:d5:b3:f5:f4:
         cc:87:e2:16:ee:8e:a4:f9:4c:7d:cc:0c:7a:27:9c:f3:8e:3c:
         9c:42:d5:d4:97:ae:9d:7b:71:20:d0:36:9c:17:6a:e7:45:5e:
         6e:02:07:61:88:3a:4f:e0:91:40:9f:bf:f7:4d:3b:e5:fa:a8:
         0f:d8:18:99:ee:5e:68:41:d0:70:11:aa:d4:af:54:8e:ed:a8:
         d9:b6:72:08:60:99:1d:c7:1a:aa:2f:30:ee:c0:07:2c:cd:83:
         e3:ec:69:fe:b6:9c:f4:9f:0d:3e:04:22:d9:8b:c4:89:32:42:
         ff:99:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:27 2025 by rpki-client