Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          voTedKIG37FOFLaqm6fGmpFCZvrCf87+R7MSaW7j1gQ=
Subject key identifier:   9F:B8:FD:8A:4C:1B:A0:DE:75:BC:D6:F5:D4:C4:E0:3B:BA:88:4D:86
Certificate issuer:       /CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
Certificate serial:       3A81B7FB3359E6293E3C261ED474CB0F530BA0BD
Authority key identifier: BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa
Signing time:             Sat 10 May 2025 14:23:26 +0000
ROA not before:           Sat 10 May 2025 14:18:26 +0000
ROA not after:            Sat 09 May 2026 14:23:26 +0000
asID:                     61680
IP address blocks:        131.108.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 18:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:81:b7:fb:33:59:e6:29:3e:3c:26:1e:d4:74:cb:0f:53:0b:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
        Validity
            Not Before: May 10 14:18:26 2025 GMT
            Not After : May  9 14:23:26 2026 GMT
        Subject: CN=9FB8FD8A4C1BA0DE75BCD6F5D4C4E03BBA884D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:f3:5b:90:f7:56:d5:b6:79:1e:6d:82:54:
                    b5:da:8e:b2:5a:0a:ae:f7:e0:07:1c:ca:36:14:61:
                    6e:23:96:72:1b:bc:94:73:94:7c:69:c1:da:43:fa:
                    5e:0c:ee:10:c3:6c:31:f9:a8:31:c2:d5:71:04:1c:
                    52:e2:aa:f5:a0:1e:3a:ca:96:35:84:59:0e:be:83:
                    77:28:a7:40:57:24:f9:48:d8:fe:36:6e:d9:a9:4b:
                    88:0f:62:cb:52:9e:31:ff:c7:71:77:d8:07:08:6c:
                    99:e0:5a:a7:10:fd:f7:bd:43:2d:a9:1e:3b:4a:bb:
                    87:99:02:56:82:c0:b1:a6:de:55:d3:c0:a9:d8:dd:
                    57:ca:8c:68:b9:c8:f2:72:45:4e:8f:42:27:c5:ed:
                    08:ed:78:be:3d:4a:2e:61:af:8e:a7:95:1d:c3:a7:
                    ad:ce:04:82:35:4a:4a:be:b3:10:8f:ff:79:c7:d9:
                    3c:c3:23:20:20:e1:69:c4:70:d0:fe:13:b1:63:6a:
                    95:70:ac:b9:0e:32:7a:3c:72:60:bb:d0:2d:ac:f0:
                    b5:6d:36:62:d5:45:b8:08:42:36:5a:07:a6:5c:18:
                    24:f1:51:f1:18:65:ba:8d:51:97:89:24:39:a1:97:
                    2c:b6:ac:12:ce:fd:3e:a2:bf:e1:97:c5:c0:a8:e0:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:FD:8A:4C:1B:A0:DE:75:BC:D6:F5:D4:C4:E0:3B:BA:88:4D:86
            X509v3 Authority Key Identifier:
                keyid:BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:89:26:2c:60:5b:06:f2:ee:86:f7:5b:fe:11:b9:e1:2c:72:
         14:77:21:93:ca:db:76:d8:d1:8b:c8:5e:6f:7a:e6:3c:c0:25:
         15:35:05:15:6b:aa:ba:ab:fb:1a:0b:65:13:64:04:ab:94:4b:
         61:ad:92:64:db:d4:89:4e:f3:96:9a:0a:a7:3d:28:13:90:4b:
         4e:d7:6d:05:a1:0b:92:e5:9d:9f:bf:1d:7d:07:85:07:da:e1:
         04:31:d0:57:41:f2:83:88:61:e3:ac:a0:9a:81:3f:8b:36:1f:
         1a:61:c7:1c:12:f2:2f:95:bb:ad:f3:a8:d2:3d:e2:f9:da:dd:
         55:5c:49:49:c7:0f:d0:36:d6:95:e2:26:1c:7c:c3:50:e4:86:
         3a:24:1a:6c:39:ca:47:e5:f0:51:cc:7a:60:b2:69:9e:4b:17:
         a1:9a:d3:44:60:04:bb:37:6e:b6:d6:c6:2e:93:6b:ca:b8:2d:
         04:8c:4d:b2:b3:ad:2b:63:0a:1d:76:78:2b:de:87:e9:a0:5b:
         48:15:78:33:21:d1:4c:7a:0e:dd:ab:3c:69:3d:5f:89:83:be:
         7d:4b:bb:51:9f:67:10:70:97:01:01:a6:f6:71:70:57:89:71:
         b5:fc:50:fe:31:5c:d2:52:b2:08:00:95:f3:ca:a3:8b:a7:c4:
         d0:84:ff:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOoG3+zNZ5ik+PCYe1HTLD1MLoL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ0Njc5OUZDMjY3NTVCNUZGQTc4REZBRDAwNkJCNUEy
OTMyMEE2RDAeFw0yNTA1MTAxNDE4MjZaFw0yNjA1MDkxNDIzMjZaMDMxMTAvBgNV
BAMTKDlGQjhGRDhBNEMxQkEwREU3NUJDRDZGNUQ0QzRFMDNCQkE4ODREODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmvNbkPdW1bZ5Hm2CVLXajrJa
Cq734AccyjYUYW4jlnIbvJRzlHxpwdpD+l4M7hDDbDH5qDHC1XEEHFLiqvWgHjrK
ljWEWQ6+g3cop0BXJPlI2P42btmpS4gPYstSnjH/x3F32AcIbJngWqcQ/fe9Qy2p
HjtKu4eZAlaCwLGm3lXTwKnY3VfKjGi5yPJyRU6PQifF7QjteL49Si5hr46nlR3D
p63OBII1Skq+sxCP/3nH2TzDIyAg4WnEcND+E7FjapVwrLkOMno8cmC70C2s8LVt
NmLVRbgIQjZaB6ZcGCTxUfEYZbqNUZeJJDmhlyy2rBLO/T6iv+GXxcCo4PE1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn7j9ikwboN51vNb11MTgO7qITYYwHwYDVR0j
BBgwFoAUvUZ5n8JnVbX/p4360Aa7WikyCm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9Xc3RDWXZLYlB4UTdtQ3BEaFh4U0RjWTVXWk1wQnVRaVdhUTNvZFZq
eHIvMC9CRDQ2Nzk5RkMyNjc1NUI1RkZBNzhERkFEMDA2QkI1QTI5MzIwQTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JENDY3OTlGQzI2NzU1QjVG
RkE3OERGQUQwMDZCQjVBMjkzMjBBNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvV3N0Q1l2S2JQeFE3bUNwRGhYeFNEY1k1V1pNcEJ1UWlXYVEzb2RWanhyLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2xCMA0GCSqGSIb3DQEBCwUAA4IBAQAYiSYsYFsG
8u6G91v+EbnhLHIUdyGTytt22NGLyF5veuY8wCUVNQUVa6q6q/saC2UTZASrlEth
rZJk29SJTvOWmgqnPSgTkEtO120FoQuS5Z2fvx19B4UH2uEEMdBXQfKDiGHjrKCa
gT+LNh8aYcccEvIvlbut86jSPeL52t1VXElJxw/QNtaV4iYcfMNQ5IY6JBpsOcpH
5fBRzHpgsmmeSxehmtNEYAS7N2621sYuk2vKuC0EjE2ys60rYwoddngr3ofpoFtI
FXgzIdFMeg7dqzxpPV+Jg759S7tRn2cQcJcBAab2cXBXiXG1/FD+MVzSUrIIAJXz
yqOLp8TQhP8h
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:39 2025 by rpki-client