Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3138362e3235312e3132392e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3132392e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          /JA/hVPR9b0pHESrE48r3FnjwNiv9fn420r1hKAv8Z8=
Subject key identifier:   7C:CA:94:AC:31:C0:9D:07:E1:E0:58:02:1A:6C:FC:94:52:31:41:17
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       75EEFCB7073455B60AB49FF9E31F08535E774397
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3138362e3235312e3132392e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:56:59 +0000
ROA not before:           Fri 21 Feb 2025 13:51:59 +0000
ROA not after:            Fri 20 Feb 2026 13:56:59 +0000
asID:                     53225
IP address blocks:        186.251.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ee:fc:b7:07:34:55:b6:0a:b4:9f:f9:e3:1f:08:53:5e:77:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:51:59 2025 GMT
            Not After : Feb 20 13:56:59 2026 GMT
        Subject: CN=7CCA94AC31C09D07E1E058021A6CFC9452314117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:97:94:05:7d:b4:80:ad:be:a3:f1:ed:ad:
                    6b:18:a2:38:cb:16:89:a4:55:a7:d9:7f:78:6c:e7:
                    f8:f7:07:be:5b:e6:c1:9e:fc:76:3e:2b:30:6a:8d:
                    f9:21:e3:7d:76:6b:7d:1c:7b:61:91:6d:ee:10:d1:
                    86:80:23:d0:ce:b9:ad:66:1b:ca:5a:69:15:31:84:
                    03:39:73:fa:ee:df:cb:9d:71:c5:ba:76:05:4c:5a:
                    d9:13:e7:f3:10:0b:90:8e:53:1c:20:58:fd:0b:e7:
                    45:f6:e5:31:31:5e:b5:81:3f:20:a6:a3:c0:08:83:
                    84:29:c0:f6:95:f2:2a:d1:d5:24:7e:6d:77:13:a7:
                    7c:e0:d0:d8:5a:42:b9:42:f7:70:e2:48:bd:a7:2b:
                    88:32:31:d6:cd:bb:d4:64:53:73:93:03:fe:f4:3b:
                    0e:60:03:84:6d:c4:af:cc:a1:2f:46:de:a8:1d:00:
                    cd:d6:a8:88:15:ce:93:3d:a8:1d:be:36:08:34:9e:
                    00:d3:bd:0d:8b:13:37:c3:66:9d:34:67:9c:43:e3:
                    41:b5:9c:80:b0:df:a2:7a:da:df:dd:3c:d6:09:4e:
                    fc:68:93:e3:1b:f8:f8:ed:e9:e0:e3:30:cf:6b:9b:
                    98:83:1c:78:7a:12:bf:5b:8f:31:12:3f:d9:4f:9a:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:94:AC:31:C0:9D:07:E1:E0:58:02:1A:6C:FC:94:52:31:41:17
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3138362e3235312e3132392e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:1b:de:74:df:cd:9f:d8:18:73:a5:a8:ce:3e:9e:f1:b3:
         09:ca:ef:55:c9:63:34:07:d3:5e:ea:a8:1e:37:03:6e:2b:7d:
         4b:e0:e4:ae:28:4c:47:5f:b8:41:2e:21:c9:b0:94:17:f3:a0:
         8d:71:59:44:23:3b:3e:e1:96:dc:38:ba:de:a7:c2:5b:a7:e6:
         03:90:15:e6:66:0b:32:95:b6:67:ae:21:5c:5d:65:b3:bf:68:
         7c:99:32:e8:6c:02:da:39:d1:b5:f4:c5:47:6c:4a:85:28:ce:
         d0:20:d8:d3:66:bb:19:ae:12:87:3a:8f:93:6e:ae:c2:42:81:
         88:36:14:9b:9b:6a:08:1d:2c:bc:b6:4a:90:84:21:74:31:ce:
         85:ad:af:74:71:29:e4:af:dd:ce:a0:85:17:df:52:46:e4:83:
         73:69:40:21:87:1b:29:70:8a:8b:6b:ad:34:79:ee:94:4f:76:
         27:14:1c:9e:82:c4:e0:0a:c2:ff:61:81:12:fe:7a:58:eb:4f:
         24:15:2f:23:fe:36:d4:38:f5:7b:d6:a0:74:8a:c5:96:b4:0e:
         c1:aa:50:a3:d7:3a:b5:c3:44:6f:61:c3:04:1a:c7:08:a4:dd:
         6e:1c:45:6e:35:e9:43:03:ca:70:73:a2:f4:28:90:a6:99:f0:
         40:5b:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:40:40 2025 by rpki-client