Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa (raw, json)
Hash identifier:          OX+azuQWmUmumBTkIr48PwgO6BDcqne13Z5G6TTMB+4=
Subject key identifier:   5E:26:30:25:CB:60:05:4B:A8:97:B5:3F:AE:3C:D7:D4:3D:AA:8A:46
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       06D13C9F980DEEC3747FA088A000C872B2F6FE64
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
Signing time:             Thu 06 Mar 2025 18:39:20 +0000
ROA not before:           Thu 06 Mar 2025 18:34:20 +0000
ROA not after:            Thu 05 Mar 2026 18:39:20 +0000
asID:                     265885
IP address blocks:        128.201.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d1:3c:9f:98:0d:ee:c3:74:7f:a0:88:a0:00:c8:72:b2:f6:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Mar  6 18:34:20 2025 GMT
            Not After : Mar  5 18:39:20 2026 GMT
        Subject: CN=5E263025CB60054BA897B53FAE3CD7D43DAA8A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:9a:49:59:be:f4:25:98:52:7e:7b:c7:b9:
                    68:56:e2:43:71:e9:ad:da:c6:95:f6:03:5e:44:9e:
                    93:0c:8c:e0:6e:0f:ad:b6:31:33:a9:3d:7e:cb:e1:
                    38:db:93:fe:2b:23:a3:93:f0:f5:59:04:f6:bc:06:
                    df:51:91:b3:58:9b:6d:7d:b8:55:c8:09:8a:8d:63:
                    43:90:7f:fa:62:19:ba:97:47:fe:eb:c6:30:b4:6c:
                    4b:09:b3:95:ff:50:10:c7:37:a6:fe:98:8b:b6:b1:
                    f2:05:91:09:27:9f:c5:1f:e1:7a:b7:4b:70:e1:53:
                    39:55:57:5d:55:5a:dd:ab:7d:57:e3:f7:65:95:3d:
                    42:1a:77:02:05:38:d0:db:2b:f7:9b:4a:99:e9:14:
                    57:e8:14:be:36:4d:36:6d:f5:15:fb:dc:a9:09:39:
                    68:76:81:25:5d:2a:ef:50:88:c2:21:e8:98:85:74:
                    81:97:ca:e4:8a:67:3a:71:e1:5b:c6:21:91:ac:3a:
                    c4:89:21:a4:21:1e:de:78:18:50:45:3a:c0:26:07:
                    04:c5:76:10:50:8a:7e:fb:47:12:05:73:de:97:a6:
                    6d:8b:d5:c1:22:76:f1:d4:61:89:3e:e6:dc:e0:91:
                    36:17:46:3d:28:8b:c0:cf:85:73:e5:85:0e:de:88:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:30:25:CB:60:05:4B:A8:97:B5:3F:AE:3C:D7:D4:3D:AA:8A:46
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:0c:80:4c:9a:fb:d7:ac:c3:8e:d8:84:10:b9:a4:5a:70:
         6f:6e:6a:8d:64:06:4d:bf:07:3d:c0:8b:69:1d:bf:40:74:05:
         05:37:ee:a6:62:44:a8:b3:a2:b9:a0:fa:53:2a:af:32:41:7f:
         4b:54:18:8f:1d:3d:14:2d:34:25:e5:12:00:19:b8:60:09:d4:
         b9:a1:76:0d:22:69:7b:f3:79:e6:16:9c:f4:b0:17:d4:c1:4a:
         98:1e:67:a4:fd:c5:fc:64:c0:5d:03:53:a2:a4:7e:91:da:86:
         cc:65:3e:98:74:82:c0:2a:ee:c2:26:39:cf:46:3e:65:99:68:
         ce:6c:2f:28:de:ee:c0:5f:5d:50:53:58:9d:ad:e2:fd:a9:c7:
         21:cc:ff:87:e1:97:ca:b7:f1:80:49:11:95:54:3d:4f:24:f6:
         aa:d4:a2:44:89:0b:83:77:66:da:29:3b:31:62:83:fb:f0:fc:
         a4:0a:fb:3e:e2:93:46:a3:35:c5:66:1d:ed:05:48:d9:9d:fb:
         7a:d9:cf:35:b8:40:79:34:07:35:69:b7:bd:76:3c:99:f4:1d:
         e4:20:08:ca:a2:e4:90:02:c4:29:a3:be:f4:e8:29:5c:87:e7:
         b1:73:27:01:2c:5e:95:05:3e:c9:ee:fd:a7:d0:98:21:7b:23:
         e6:4c:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:15:52 2025 by rpki-client