Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          Ru7BA/ZzHr3BP41zTYZePxXDp4Gg3A9O5yfPPFXixDQ=
Subject key identifier:   BB:B7:EE:FF:E5:72:6B:E8:9D:E5:58:36:83:59:02:AF:4C:5A:51:22
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       469CFB12B6303FFE6DD7E2525081505CCC6C153D
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
Signing time:             Mon 23 Dec 2024 12:58:02 +0000
ROA not before:           Mon 23 Dec 2024 12:53:02 +0000
ROA not after:            Mon 22 Dec 2025 12:58:02 +0000
asID:                     61680
IP address blocks:        131.108.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 01:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:fb:12:b6:30:3f:fe:6d:d7:e2:52:50:81:50:5c:cc:6c:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Dec 23 12:53:02 2024 GMT
            Not After : Dec 22 12:58:02 2025 GMT
        Subject: CN=BBB7EEFFE5726BE89DE55836835902AF4C5A5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:ab:19:4e:92:fe:bc:8b:d5:ac:8a:8d:4d:
                    9a:df:79:26:ec:66:49:8e:92:71:e5:91:87:41:3f:
                    30:b9:f0:ec:f6:a1:30:1d:df:ba:56:76:d3:88:4f:
                    84:61:ec:c3:15:55:93:a1:69:a2:c5:4c:26:24:a5:
                    1d:1d:0e:8c:ce:b5:85:19:3a:e7:fb:47:8a:08:9c:
                    66:24:2c:a5:80:31:2a:4f:e1:4c:cd:b5:40:0f:6d:
                    87:d8:b7:27:30:36:7a:49:1d:2a:69:46:e2:58:59:
                    22:cf:49:ea:24:d0:a7:15:63:87:44:67:c4:e8:1c:
                    ff:8b:d1:a8:ee:43:49:15:81:d6:e4:1a:42:e8:8c:
                    42:89:dc:4d:bc:fd:15:bf:4c:46:9a:d9:ac:02:98:
                    d4:0e:19:7c:87:1a:51:b3:74:7b:02:5d:6a:3c:1e:
                    92:3a:93:cf:ff:1b:fb:22:76:a9:c1:fe:e1:da:a8:
                    eb:a6:6d:8a:55:a7:3d:9b:70:73:1d:f0:57:50:2e:
                    da:44:1b:eb:52:c0:43:b2:d2:0c:54:9a:7b:48:8e:
                    90:f2:c1:a6:30:59:76:94:2d:5c:4c:1d:de:59:5d:
                    81:3c:5a:0c:b8:27:79:dd:ab:24:b0:69:47:b9:c7:
                    0e:b5:a1:89:5b:7c:b3:f9:c2:1f:92:2f:21:73:7e:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:EE:FF:E5:72:6B:E8:9D:E5:58:36:83:59:02:AF:4C:5A:51:22
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:42:27:55:b4:13:a6:ef:e7:09:a9:88:1e:3d:78:04:e1:
         01:86:dd:50:f3:d4:f7:44:07:4d:ed:87:0f:cb:76:57:20:8b:
         a5:4c:34:1b:ff:08:02:dc:56:f5:e6:ad:e3:8a:d6:6f:2e:92:
         b8:bf:24:8f:3c:7b:09:03:4e:60:0f:e8:e4:b5:2b:6e:43:12:
         57:02:cf:5c:5b:1e:78:ed:20:5f:b9:ac:da:7b:69:66:9c:b1:
         6c:02:72:12:0f:a9:e5:11:2f:18:0b:0c:dd:1e:c1:eb:a3:f6:
         99:ff:e0:96:b0:ad:4c:24:09:2f:bb:c6:7d:ab:29:69:8e:d0:
         7b:ba:e4:02:a9:6f:3c:32:df:63:36:c3:93:f1:c0:41:3f:fc:
         ca:7d:70:09:bb:69:0c:c1:77:09:45:74:62:27:24:cc:e5:f7:
         5d:31:db:a5:1c:97:2f:6d:fb:ad:ca:d7:05:28:71:36:15:68:
         3b:4b:2b:71:fb:da:73:e7:66:0a:28:a7:60:0c:b0:ae:30:7b:
         eb:fe:2f:90:bd:70:7e:00:f1:b8:64:c9:14:68:63:37:8d:e4:
         58:92:fd:82:0e:fd:0a:2f:64:c4:e2:ba:8d:b9:aa:cd:0c:47:
         95:e8:d5:f9:70:20:f3:ef:db:92:84:92:87:17:7a:73:cd:56:
         46:8f:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:46:43 2025 by rpki-client