Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
File:                     3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa (raw, json)
Hash identifier:          55wGrRer1BCBTzmMQrlNU7kdQEcwTPaOVMzs6tVhQFE=
Subject key identifier:   AE:8F:29:77:13:FD:B8:99:93:AE:79:74:15:FA:DF:4E:DE:9C:1C:63
Certificate issuer:       /CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
Certificate serial:       0F56C0D07D3EF8526D06EE13044F6324ABFFA785
Authority key identifier: F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
Signing time:             Fri 10 Jan 2025 20:29:13 +0000
ROA not before:           Fri 10 Jan 2025 20:24:13 +0000
ROA not after:            Fri 09 Jan 2026 20:29:13 +0000
asID:                     61657
IP address blocks:        131.100.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/F950AA9EB69B6E76356621815A68620E1CFC80E6.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/F950AA9EB69B6E76356621815A68620E1CFC80E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:56:c0:d0:7d:3e:f8:52:6d:06:ee:13:04:4f:63:24:ab:ff:a7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
        Validity
            Not Before: Jan 10 20:24:13 2025 GMT
            Not After : Jan  9 20:29:13 2026 GMT
        Subject: CN=AE8F297713FDB89993AE797415FADF4EDE9C1C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:dc:db:96:b7:28:d7:eb:3b:78:e5:8d:a4:
                    61:ea:b2:f9:67:2b:7f:f7:6b:00:72:99:ce:77:82:
                    0e:19:ec:79:8d:21:e4:e3:7d:6e:3c:db:e7:5d:6c:
                    2f:d5:08:09:c5:52:10:86:b8:d8:37:80:3b:48:75:
                    78:85:9b:8d:9e:c5:8f:8b:48:dc:61:40:d7:e5:38:
                    79:50:5c:34:43:ac:74:39:e6:8f:e3:b1:a7:c1:54:
                    cc:c0:67:e5:12:88:b7:e2:d8:28:ad:f3:52:c0:31:
                    88:9c:5f:97:f2:7a:0e:ad:e0:00:49:6e:fb:15:b4:
                    12:62:0e:bb:02:72:3a:9a:22:54:86:28:c1:4b:56:
                    c5:ee:41:31:73:d9:1b:20:4a:2b:2d:8f:9e:44:7d:
                    85:aa:f0:c8:f4:b9:89:de:e3:94:95:26:08:54:cf:
                    67:bb:62:52:4a:97:2b:0f:ff:49:25:9e:c3:b7:d1:
                    d2:c6:02:dd:27:db:e3:53:10:d4:97:05:b5:d5:36:
                    12:73:c4:a5:51:41:0b:36:2b:d5:34:1a:76:0d:12:
                    a0:38:d8:cc:6e:10:78:17:33:13:d7:d8:44:19:12:
                    ce:30:cf:56:15:15:cb:db:e8:25:20:9a:79:48:4b:
                    7a:e9:2c:00:e9:14:40:ce:77:05:c2:ab:7b:2d:95:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8F:29:77:13:FD:B8:99:93:AE:79:74:15:FA:DF:4E:DE:9C:1C:63
            X509v3 Authority Key Identifier:
                keyid:F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/F950AA9EB69B6E76356621815A68620E1CFC80E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:ba:51:8e:c3:e7:ec:15:6f:40:78:25:8b:63:26:4d:29:
         de:29:7f:6e:da:8d:08:34:1e:33:20:96:5b:2c:e8:40:dc:66:
         c8:9a:2c:24:ab:80:53:d9:e7:00:8e:eb:33:32:13:1e:ec:da:
         28:48:f7:a6:ba:fa:0d:19:cb:33:c7:46:10:75:ad:41:71:69:
         2a:89:99:13:8d:9c:fb:42:29:49:f5:22:55:30:93:7a:e0:0d:
         4a:da:26:7f:ed:1e:ff:26:40:e6:b3:59:35:62:71:99:ce:28:
         23:9a:b0:25:78:b9:1f:cb:4b:64:6d:d7:7c:e8:db:b8:c7:de:
         b7:b0:c1:3d:b0:98:f7:5b:9d:3e:26:71:20:b3:3d:0b:70:06:
         fc:49:8d:8d:d7:94:c0:ed:e6:aa:34:47:a6:bf:b2:a4:69:9b:
         ff:24:0d:d3:90:89:db:03:32:25:2a:47:b5:a8:aa:6b:d4:aa:
         ce:fa:e8:dd:e6:3f:65:21:10:6a:32:e0:68:58:15:a6:30:bd:
         31:2f:1d:63:8e:58:3b:f7:cd:9c:bf:99:d9:fb:0e:2b:d4:fb:
         38:6e:93:cf:27:2e:34:67:1b:42:df:71:23:e5:6b:6b:16:c5:
         14:cc:d9:d5:16:68:e7:91:fc:12:cf:f7:33:97:7d:cb:bf:55:
         91:d0:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:20:58 2025 by rpki-client