Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38362e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          JrR2ztFGY6gOSfBqfH6v3U1yBpNsfY5i5k8vS+RIWo4=
Subject key identifier:   99:7E:9B:15:21:41:E3:A4:08:25:7B:CD:0A:E2:5D:1B:1D:5D:0C:A3
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       0A390F475494F87C9FB2B9C4F2CE0B86C530B49D
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        168.205.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:39:0f:47:54:94:f8:7c:9f:b2:b9:c4:f2:ce:0b:86:c5:30:b4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=997E9B152141E3A408257BCD0AE25D1B1D5D0CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:81:ce:08:e9:f2:72:ad:d6:dc:ff:2b:12:
                    b8:cf:05:74:88:fc:8f:bc:00:ca:ad:41:ff:4f:da:
                    22:54:68:a2:d2:54:f7:f7:39:b5:51:b1:bf:7e:1a:
                    bf:34:12:c3:40:fd:37:07:a8:12:81:b1:97:6b:69:
                    37:7f:1c:f3:06:c6:d0:87:ca:8c:a0:11:98:3b:a4:
                    ab:55:9c:94:04:1d:b5:aa:c5:0b:a9:90:61:f6:0c:
                    11:0c:62:16:97:2f:06:96:ec:cf:86:d3:ad:e1:cf:
                    25:fb:8e:0f:66:4b:7b:8a:ea:8c:d3:87:79:de:e7:
                    30:4f:2d:4f:de:a3:78:1b:2e:72:5f:7d:d8:2c:75:
                    4f:9e:9d:f4:4c:f1:70:05:6b:42:49:f1:c0:65:67:
                    57:ee:47:3a:f2:16:c2:39:61:5b:a6:ad:95:5d:4c:
                    d9:03:ed:e0:fa:62:45:02:42:a4:52:bc:f8:36:bf:
                    e9:68:da:ee:fa:ef:87:e2:44:e5:1a:66:52:c0:1d:
                    e3:a6:46:7a:26:9d:cb:31:4d:1b:5e:a6:ad:2d:71:
                    67:fd:55:f8:e3:d5:86:31:42:6f:0a:71:60:24:9f:
                    f6:22:7f:5a:18:fa:c6:28:69:27:f6:5b:3f:09:17:
                    dc:b4:7a:e9:2a:3d:62:ce:cc:80:bd:d9:15:df:ae:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:9B:15:21:41:E3:A4:08:25:7B:CD:0A:E2:5D:1B:1D:5D:0C:A3
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:8c:6d:76:59:5e:3f:f6:79:40:1f:92:4a:1d:da:53:1e:95:
         04:e4:0a:6a:78:28:c5:6f:88:b4:c0:03:4c:16:da:29:46:38:
         84:64:f5:62:ee:c1:8c:2a:a1:6a:30:91:dd:f9:5f:17:3f:e8:
         d6:00:64:37:58:e0:83:d6:4d:b8:40:84:af:78:90:7e:db:fb:
         be:52:ca:14:63:e3:d6:fe:f5:b6:6e:9b:54:bc:a3:fd:7b:18:
         65:d8:85:68:51:22:3c:9c:cb:99:fa:34:23:9c:b1:2b:11:5c:
         49:9b:9e:09:ee:dc:88:d0:5b:9b:54:e1:ea:cf:d0:4d:3b:7c:
         71:42:98:c5:4d:be:f2:87:c2:c3:08:08:c8:d9:f7:97:b1:bc:
         f8:79:12:33:57:f0:4d:3b:0b:88:c8:9f:15:e8:2f:ae:53:05:
         7b:4b:f9:16:8b:a9:4f:81:9c:8a:cc:ab:5c:a6:76:5a:36:9c:
         0a:43:7e:f5:cb:bb:b4:ec:92:26:ee:68:bd:68:26:4f:c0:56:
         1b:34:ad:fa:0b:06:89:a6:da:07:83:a9:41:ab:38:c2:99:4c:
         d5:f2:35:06:7e:66:d5:3a:84:4b:19:dd:82:2d:2b:0c:f0:6a:
         fb:74:06:d0:6b:b1:11:2a:0e:22:b3:d9:cf:3d:25:ab:58:66:
         5f:f0:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:14:42 2025 by rpki-client