Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          XM9Yn/UBYBCTD1DSvd8wPKTqFRAcQT/obwzYOwIO0YM=
Subject key identifier:   32:9F:44:34:E5:22:C5:DD:E4:A7:19:F7:52:AD:27:2F:53:D3:EE:64
Certificate issuer:       /CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
Certificate serial:       49045FB6F02118FD0491DD03DAAEC2A5F466BFC1
Authority key identifier: BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
Signing time:             Sat 10 May 2025 14:23:22 +0000
ROA not before:           Sat 10 May 2025 14:18:22 +0000
ROA not after:            Sat 09 May 2026 14:23:22 +0000
asID:                     61680
IP address blocks:        131.108.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:04:5f:b6:f0:21:18:fd:04:91:dd:03:da:ae:c2:a5:f4:66:bf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
        Validity
            Not Before: May 10 14:18:22 2025 GMT
            Not After : May  9 14:23:22 2026 GMT
        Subject: CN=329F4434E522C5DDE4A719F752AD272F53D3EE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:a5:65:2d:3b:15:cf:d8:5b:cb:0b:5f:9a:
                    57:39:f6:77:e4:3e:d3:c8:3a:ca:91:cd:e7:14:43:
                    2e:3f:be:3c:e0:95:37:33:c1:28:4b:f4:f0:1d:53:
                    2e:f8:b5:54:42:b0:02:38:76:98:81:53:1d:26:db:
                    ba:a7:35:dc:10:3c:ba:57:50:1f:c7:78:99:64:11:
                    71:40:a8:f0:10:ba:46:2f:90:ec:ef:4e:53:48:8c:
                    90:bb:dd:78:3f:26:0b:c0:09:64:6d:13:2b:d6:c5:
                    75:59:99:98:76:b2:b1:1a:2d:93:d0:d6:20:51:53:
                    c6:88:88:2c:b0:2b:2c:37:b2:a9:21:e2:7f:75:6e:
                    5e:a2:15:42:39:4a:ee:6d:4c:00:39:37:03:c4:c0:
                    48:1e:ce:b6:a9:7e:1d:f7:3c:96:52:50:00:ab:a5:
                    93:a1:ae:55:96:3b:99:fc:ce:87:6f:a0:cc:58:12:
                    04:39:92:41:05:d2:58:8f:be:f8:99:91:a5:27:f0:
                    3c:42:56:32:83:8c:50:1e:74:7d:cf:aa:b0:b1:20:
                    b7:ca:a5:1e:df:7f:8a:58:a8:bf:54:d8:ed:68:ff:
                    17:3c:5b:6f:6d:1f:c0:a9:94:08:85:87:7b:2e:79:
                    e0:ed:82:30:4f:c4:1f:5c:05:39:fb:8c:bd:f7:3a:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:44:34:E5:22:C5:DD:E4:A7:19:F7:52:AD:27:2F:53:D3:EE:64
            X509v3 Authority Key Identifier:
                keyid:BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:5d:0d:3e:b0:8d:ad:99:dc:ae:4e:bd:32:b6:4b:a8:17:
         9b:86:38:72:5d:a3:dc:a8:79:d0:73:bb:15:bb:10:6f:62:47:
         76:bd:21:5d:50:29:39:1b:01:0f:dc:35:18:c5:d9:85:b9:ab:
         cc:d9:f7:31:34:28:47:d8:52:82:9e:c4:3b:2d:63:ee:07:54:
         15:c0:f8:b7:a1:00:14:dc:86:0e:c4:66:16:63:68:17:70:2e:
         c9:ef:97:20:d3:86:3d:f9:53:73:c0:1e:e9:ea:e9:20:6c:3c:
         ca:17:20:e0:db:85:c3:68:eb:ab:80:d3:af:62:a8:89:31:98:
         04:f3:51:e4:78:7b:55:66:f6:85:7e:9e:a6:44:fe:dd:64:29:
         77:51:b4:e3:5a:05:cb:9d:e4:1c:13:50:93:1e:8f:4d:dc:ba:
         57:85:9f:1d:f9:84:41:d6:15:e7:b5:68:04:4f:83:f5:a1:16:
         4f:e6:16:4d:5d:ca:f3:6c:77:e3:23:b0:71:dc:db:64:45:b0:
         65:ff:8f:65:0c:f0:9f:3c:3e:f5:91:d4:47:92:51:7b:c5:59:
         7a:75:9d:3e:eb:01:09:5d:18:ca:99:f3:f5:ea:dd:57:78:71:
         96:0e:94:53:3d:a5:1e:59:46:9f:0f:c2:50:c2:38:ab:ac:e3:
         93:d4:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:41:07 2025 by rpki-client