Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38342e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          GO+mKb087ASdPi14WjUKqAunlyuJD2wBSsWGu2BCMHs=
Subject key identifier:   56:3E:A4:6D:8B:B2:0A:00:A5:07:13:3F:80:05:11:83:47:89:BC:FB
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       04C3D631E990D04A6664D1F2201CC4E07E716505
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        168.205.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:d6:31:e9:90:d0:4a:66:64:d1:f2:20:1c:c4:e0:7e:71:65:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=563EA46D8BB20A00A507133F800511834789BCFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:f1:83:7a:49:ac:81:33:c2:48:b1:75:d2:
                    5c:58:61:0c:5a:4b:6e:6c:ef:fb:87:bf:16:2a:fe:
                    3f:c3:a4:2e:57:26:35:52:9c:4a:0f:bd:63:91:03:
                    f9:9f:fc:2f:41:b6:b4:6c:cf:95:de:f6:42:d7:36:
                    88:23:35:3e:a6:32:51:0a:e3:7c:43:6b:88:03:01:
                    23:f2:06:f3:07:14:ac:cc:82:62:6a:ea:96:30:e5:
                    c7:a8:1c:57:a2:25:1a:72:b6:be:7b:26:1a:a8:40:
                    fd:b7:bf:de:7c:11:1e:c4:50:f2:f9:4f:2e:3f:c5:
                    8e:14:3f:c7:50:29:c3:7d:bf:f6:14:09:60:19:53:
                    c2:88:b1:bb:97:9a:80:d0:1a:95:cd:06:a6:47:4f:
                    33:6a:30:74:05:f0:be:d8:4c:2a:dc:46:b5:9e:57:
                    ab:73:f3:ec:f9:97:7a:96:73:4e:c1:a7:b6:2e:73:
                    19:16:36:7b:30:25:f4:e5:f3:93:61:43:03:05:cd:
                    c4:db:ad:9d:bf:06:ab:13:e3:e1:ae:f2:30:7b:90:
                    6c:d4:ff:e9:de:48:76:34:d2:ea:15:93:c6:1c:2f:
                    e7:aa:ff:49:67:cd:4c:5e:cb:25:38:12:35:0f:b7:
                    f6:2d:04:49:5f:ad:df:3f:ba:1e:73:3a:98:34:e6:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:A4:6D:8B:B2:0A:00:A5:07:13:3F:80:05:11:83:47:89:BC:FB
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:d5:23:54:0a:81:00:e4:b6:48:72:67:fb:96:4d:97:d7:
         4b:0a:27:9c:d7:74:9c:92:77:6e:1f:8c:99:c3:6f:d5:db:2e:
         21:09:99:47:7e:b2:62:49:ba:0b:e6:8c:f6:ca:49:91:b3:95:
         17:7c:0e:68:45:0c:60:75:e1:0e:2a:73:6d:34:9b:ac:ae:8f:
         1a:50:2a:c4:72:6b:5f:b4:5d:59:b1:32:7f:4d:48:82:39:0a:
         47:b0:20:3a:e8:f9:94:76:29:e3:71:07:bb:52:64:3e:58:33:
         11:8e:0f:81:71:27:67:12:c0:17:b6:6a:51:90:8c:1e:e2:e6:
         24:ac:62:e4:f3:ad:91:c2:b5:6d:de:0e:c1:9a:20:9c:7f:b0:
         3f:ed:19:29:b4:50:b4:6b:a5:0c:ff:8d:e4:9a:57:c3:c3:97:
         3b:de:0e:18:e9:b4:a0:17:c8:f6:11:e8:30:ce:d3:0a:2f:af:
         2c:d3:21:6d:e6:b5:c5:7a:63:fa:cb:87:e1:10:bc:2e:6c:0e:
         f6:3a:d9:ab:16:0d:a5:48:50:b8:ff:42:06:19:3b:8a:26:21:
         af:55:29:60:6a:79:17:95:a8:14:2e:89:5b:01:28:14:29:e3:
         47:e1:96:92:99:e8:c0:c0:78:6d:1d:ea:b5:79:12:fb:8c:fb:
         9b:c3:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:10:41 2025 by rpki-client