Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          3w7zK+smAtu9K8FwKPgIzxlGDvqhflr9WpumS/oj/Aw=
Subject key identifier:   FC:85:70:48:1A:33:5D:96:A2:1D:1D:45:F5:41:94:AB:47:A8:DC:69
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       749D3CB6674EE7A251FD7A8E2694A5AC505A02F4
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa
Signing time:             Thu 06 Mar 2025 18:39:19 +0000
ROA not before:           Thu 06 Mar 2025 18:34:19 +0000
ROA not after:            Thu 05 Mar 2026 18:39:19 +0000
asID:                     265885
IP address blocks:        128.201.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:3c:b6:67:4e:e7:a2:51:fd:7a:8e:26:94:a5:ac:50:5a:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Mar  6 18:34:19 2025 GMT
            Not After : Mar  5 18:39:19 2026 GMT
        Subject: CN=FC8570481A335D96A21D1D45F54194AB47A8DC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:63:2d:9e:3c:ba:46:92:2f:8a:f0:ff:2f:
                    e9:82:9d:20:6e:2b:d1:1f:c9:03:7e:30:7e:a8:87:
                    5f:64:da:b3:ca:d3:b1:29:8e:33:1f:21:44:8d:71:
                    3d:bd:9a:3f:47:a4:5e:6f:cc:b1:24:c5:a4:44:4e:
                    40:ac:5e:72:80:d8:da:a2:bf:39:a2:9c:81:01:45:
                    b0:d4:4e:6c:d4:d4:9b:f9:bb:52:10:7d:76:53:39:
                    4e:1f:99:c9:af:de:3b:d2:50:74:65:04:e9:cb:f6:
                    73:aa:76:74:15:d1:1c:f4:fc:cf:e9:61:e1:e9:82:
                    ea:85:7d:fd:e1:ca:ff:aa:fb:c3:06:a7:fe:ab:c3:
                    39:95:90:e4:b2:de:2a:4c:a7:30:45:83:bb:39:37:
                    85:56:b7:c9:4e:9e:88:fd:b1:4c:20:c8:fe:94:97:
                    f0:84:74:f5:91:f8:ca:57:38:f8:08:66:ac:64:0f:
                    87:cd:81:7e:37:fb:06:56:26:65:66:7e:49:d0:50:
                    6c:14:4b:57:5d:6a:ae:95:1d:8f:63:6e:b7:64:43:
                    23:19:a1:f1:a5:97:af:72:3b:98:98:7e:71:52:05:
                    fd:c4:15:e2:83:32:cb:a4:fb:45:61:fc:8e:93:25:
                    3a:6a:ed:da:16:3a:38:53:e9:13:7e:46:1d:8a:68:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:70:48:1A:33:5D:96:A2:1D:1D:45:F5:41:94:AB:47:A8:DC:69
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:42:2a:40:41:4e:f4:3e:c9:57:19:b8:36:ed:40:1d:e2:
         aa:63:11:73:ef:f3:57:0d:c0:94:90:f6:96:f2:a5:f6:bc:cc:
         18:81:14:c7:82:22:29:42:c1:5e:b0:3b:bf:fa:d0:ab:59:36:
         66:16:1b:34:34:bb:7b:14:54:6a:fb:b7:c0:61:52:a7:1c:54:
         a7:cd:82:ae:c3:ea:af:4f:d7:7e:77:64:7f:69:27:71:74:6f:
         e7:34:ff:ba:83:93:c0:f8:2e:57:b2:9e:0d:f6:52:c9:7d:c9:
         1f:13:14:e8:fb:d2:44:7e:d1:ee:e6:ec:02:d1:47:93:fe:27:
         b2:5c:57:6e:5a:10:b2:21:e7:86:48:1f:5f:ef:ee:a1:bf:1e:
         3d:ad:45:7e:0a:29:22:f3:41:f1:e9:a4:7e:b6:b6:6a:62:08:
         7b:9b:93:80:9c:27:f7:9f:0a:cf:24:4a:2e:65:f2:04:37:9a:
         27:fa:f5:9d:74:89:61:63:d1:49:4d:e5:2d:70:81:bc:38:19:
         2e:72:c5:fc:b1:ff:10:9b:79:47:c5:d0:43:50:5c:78:ca:4c:
         35:80:4b:b9:94:57:65:68:84:a0:65:c1:90:c4:88:50:97:6c:
         99:b3:0b:71:65:6d:ec:6e:58:9a:05:f4:c8:68:48:ee:b1:d4:
         50:75:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:20:09 2025 by rpki-client