Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa
File:                     3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (raw, json)
Hash identifier:          TpMe21/y7N0hpatEwrFUwO3jGlX7QHMEgWX4xeJ/TDA=
Subject key identifier:   2F:48:18:66:23:2F:C7:85:1B:59:AA:0F:E9:04:E7:60:DF:0D:23:92
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       6CF025BD78A8B77060A4AB4171A9C32E487B8C06
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa
Signing time:             Sat 25 Jan 2025 16:15:23 +0000
ROA not before:           Sat 25 Jan 2025 16:10:23 +0000
ROA not after:            Sat 24 Jan 2026 16:15:23 +0000
asID:                     61675
IP address blocks:        131.108.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
                          rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:25:bd:78:a8:b7:70:60:a4:ab:41:71:a9:c3:2e:48:7b:8c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Jan 25 16:10:23 2025 GMT
            Not After : Jan 24 16:15:23 2026 GMT
        Subject: CN=2F481866232FC7851B59AA0FE904E760DF0D2392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:74:16:30:50:6c:da:c9:8f:fe:66:51:68:
                    4a:d9:60:76:a4:f3:80:cb:ba:b4:29:9a:40:7f:6a:
                    25:6b:dd:d8:19:21:7c:65:f0:04:1b:1a:36:84:99:
                    4e:74:3f:ab:7e:e6:f5:39:16:02:e6:21:52:00:92:
                    1f:2e:e7:c5:a7:50:a4:5e:2d:30:a5:bf:b2:cf:70:
                    83:8f:da:82:56:50:26:7e:f9:63:ff:30:49:56:ee:
                    cd:3e:c1:d9:7f:13:c4:0b:b3:06:12:9f:4b:e7:d3:
                    04:d5:39:b9:4a:1d:83:53:5c:d7:2d:b9:1b:9b:cf:
                    15:6f:6a:27:e3:8a:6d:b8:13:bf:c8:4c:d1:39:be:
                    95:61:de:e4:2c:49:b8:ad:41:34:17:95:ce:fa:0e:
                    9d:cc:67:4d:5a:0e:2e:64:44:0d:51:ab:be:d3:89:
                    ac:a8:02:88:91:b9:f8:55:d9:45:cb:ef:d9:cb:fe:
                    c3:fb:77:a0:23:de:9b:f3:b5:d0:aa:79:f3:d8:09:
                    99:6c:c2:b7:65:6d:9b:31:28:08:69:01:c5:48:22:
                    39:f2:2a:3e:d0:79:3e:6f:5e:8e:52:cd:62:93:29:
                    2a:f9:eb:c2:84:2b:0c:5c:41:4d:ee:ac:f8:81:09:
                    ac:3e:37:d1:3f:84:af:94:4c:ef:f9:88:b6:fd:22:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:18:66:23:2F:C7:85:1B:59:AA:0F:E9:04:E7:60:DF:0D:23:92
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:84:49:9b:44:26:c2:6b:21:eb:40:ab:98:da:f0:e5:2e:
         a4:82:b1:34:e5:ef:b2:59:21:81:af:c1:0d:6b:28:93:c5:c6:
         9b:02:fb:a8:50:3a:9f:28:81:02:3a:db:35:52:09:62:a8:e4:
         41:5f:bd:e4:50:23:d9:c7:3e:66:c3:2a:34:b1:cc:43:d1:92:
         95:90:21:08:2a:31:1f:8f:f8:9f:c4:05:91:f0:5e:14:7d:88:
         05:00:61:d5:dd:d7:67:1e:21:30:aa:ec:ea:5d:ff:06:b7:c2:
         bf:81:05:63:3e:66:9a:f4:c5:5c:f2:87:d7:69:f5:65:21:47:
         e3:07:cb:32:fc:c8:84:85:1b:5b:df:7f:c2:8f:53:aa:5e:e6:
         9d:34:48:43:18:84:0f:d4:ed:52:38:b2:28:47:22:6d:af:11:
         be:4a:07:cd:05:e5:7f:43:9f:fc:cc:c3:4e:b0:97:54:f6:93:
         05:4c:f3:6d:f8:2c:26:d6:27:96:f8:4b:41:15:22:af:7a:9c:
         be:1f:36:53:76:f0:14:03:4a:19:b3:64:3d:7b:8a:b1:89:23:
         f8:84:90:34:8d:15:cf:2c:bf:8d:3e:c2:d8:ec:9c:cc:60:f5:
         46:50:4b:5e:28:f5:6a:2f:92:ac:aa:38:4f:3c:1e:6c:c9:42:
         0a:7b:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:34 2025 by rpki-client