Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          EFVOZwnHhM7r/P3q22x0tC8soMAAj+rMixw8lSGtOIw=
Subject key identifier:   F2:E1:C7:86:57:15:66:6E:90:BE:21:49:67:29:5E:EF:22:86:53:6E
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       3858A10E88CDE3B3A46AD21D8465CE21739E2E07
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        168.205.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 06:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:58:a1:0e:88:cd:e3:b3:a4:6a:d2:1d:84:65:ce:21:73:9e:2e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=F2E1C7865715666E90BE214967295EEF2286536E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:f0:9d:eb:1e:46:7f:a3:c1:ea:51:23:09:
                    b2:0a:a1:01:c4:fe:46:4a:25:37:0c:1e:0f:49:b8:
                    86:25:b9:ee:67:d8:c1:3e:af:67:16:29:40:9e:6c:
                    76:cf:56:2e:ee:3e:0f:b5:2f:f8:4f:97:96:d2:f7:
                    87:d2:e9:cf:01:59:ba:32:79:d8:f1:56:f2:5c:46:
                    9c:49:87:7a:29:ab:d9:b0:0b:1c:ed:fe:40:4c:86:
                    a1:b9:9b:f6:02:82:4a:36:55:b1:7e:67:03:44:11:
                    0d:83:f6:ef:c7:2b:f0:35:b6:a4:58:5a:42:63:4c:
                    b6:ed:b3:ad:b9:99:69:ad:91:7e:c0:96:42:8e:50:
                    df:bf:d9:39:e5:75:ff:a6:0d:70:ba:0f:aa:22:86:
                    92:5d:0a:05:fe:72:62:19:23:ca:04:34:e3:60:45:
                    e6:82:73:c3:15:49:9d:ba:b7:6d:06:37:9a:3d:f6:
                    00:eb:21:43:5a:c3:c4:6f:d9:f8:be:dd:33:85:92:
                    2b:66:52:08:e6:de:bc:2b:d7:c7:63:78:b7:2a:cf:
                    5f:bf:d7:5b:87:93:aa:73:d7:56:ce:54:43:78:20:
                    3c:00:53:9b:72:aa:45:33:e2:2f:0c:4d:df:92:2c:
                    16:08:27:f9:5f:7f:bc:a4:68:7d:fd:bc:12:5b:80:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E1:C7:86:57:15:66:6E:90:BE:21:49:67:29:5E:EF:22:86:53:6E
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:b2:89:49:22:0b:59:dd:3d:ac:1d:59:60:6a:a6:9a:53:1b:
         95:5d:8f:62:22:f9:ee:97:06:48:06:12:32:f5:27:1a:6b:47:
         e4:57:d7:da:65:a1:77:57:ba:06:25:c1:e2:41:5a:e8:3b:44:
         48:b3:ad:47:ab:80:64:c6:a4:59:12:4d:57:e9:c3:7b:e4:9d:
         72:99:25:ee:c9:32:57:60:bd:ac:91:97:cb:b3:44:06:45:59:
         f3:7a:fc:99:7d:67:ea:79:e5:64:50:30:e6:61:19:64:44:0d:
         9a:bb:dc:b1:08:af:6f:c0:a4:49:eb:3a:7f:39:b8:3e:6f:0a:
         a9:02:6e:e9:35:2c:95:0b:d4:ce:75:1e:f8:d0:06:cf:69:74:
         51:85:70:fe:8a:6d:59:f9:de:cd:3f:2d:a2:53:87:78:76:02:
         25:00:78:1e:c6:8b:73:ae:62:4f:38:9d:e2:13:e7:ab:2a:56:
         b5:04:f6:54:e6:da:8b:2d:b6:3a:9c:4c:53:e7:5d:18:cf:cf:
         07:8f:7e:b1:d0:c6:bd:8f:dd:f1:b1:62:96:25:9c:90:68:e8:
         5b:fc:6c:6f:ff:28:b4:21:ec:b5:51:11:8c:71:9c:47:fd:ad:
         5f:12:65:3f:4d:d5:81:65:77:7f:d7:2a:89:11:29:3e:3a:11:
         60:10:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:19:51 2025 by rpki-client