Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa
File:                     3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa (raw, json)
Hash identifier:          uKkO/8jfGBqoDou8m7WCis6oWMzMEe9JXP+FpbqkKi0=
Subject key identifier:   3A:A2:46:E7:DD:7D:09:0D:65:D0:05:E8:A4:C2:64:80:8A:7B:F2:7F
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4386B12069AB62C62E3849D64D5F8946F6AD9A43
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa
Signing time:             Tue 04 Feb 2025 12:20:27 +0000
ROA not before:           Tue 04 Feb 2025 12:15:27 +0000
ROA not after:            Tue 03 Feb 2026 12:20:27 +0000
asID:                     53108
IP address blocks:        167.249.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:86:b1:20:69:ab:62:c6:2e:38:49:d6:4d:5f:89:46:f6:ad:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb  4 12:15:27 2025 GMT
            Not After : Feb  3 12:20:27 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:fd:72:8d:06:66:9c:f6:39:12:19:ca:91:
                    ef:c0:a8:c2:35:68:06:7a:a4:32:61:4c:ce:cd:33:
                    f6:7f:c3:d5:32:d0:47:03:ca:fd:cc:a5:72:58:7f:
                    d3:c1:38:63:27:ad:79:15:cb:cc:ac:20:75:f2:21:
                    b4:38:e5:d4:6a:8e:44:7d:d4:2d:65:1e:36:33:59:
                    69:5b:4f:dd:e3:dc:5f:32:06:ed:8a:57:79:04:a7:
                    cb:94:d1:b9:33:83:a9:04:6f:7f:7f:41:09:e6:5e:
                    68:83:96:c9:dd:05:82:88:0b:b0:29:28:60:46:2b:
                    9a:b4:77:3f:a8:31:84:f1:1b:02:38:d0:e4:80:ef:
                    cd:35:52:9c:64:75:66:6b:d3:8c:72:25:21:af:58:
                    0a:12:fe:1a:8d:0a:ac:49:f2:33:cc:5a:26:2d:80:
                    47:5e:5b:69:42:85:51:fc:d4:c9:76:04:2c:c1:46:
                    27:68:69:a2:0c:e5:44:1c:1a:2c:9f:77:35:0a:77:
                    13:59:3f:fa:37:11:53:83:32:80:24:88:f6:18:55:
                    89:0f:09:c2:f6:3f:16:5f:57:1c:77:96:69:ef:75:
                    e8:c4:9c:bf:46:4a:fb:59:b1:d8:56:44:98:b6:a8:
                    fe:2f:26:80:5d:12:b0:df:49:69:d0:7d:f0:8d:4d:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:46:E7:DD:7D:09:0D:65:D0:05:E8:A4:C2:64:80:8A:7B:F2:7F
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:81:75:72:4c:47:57:d1:fd:7f:0f:ac:e5:b3:e0:8b:31:
         fb:20:ae:fd:9e:63:32:a2:d9:56:f7:71:07:52:4d:13:21:12:
         87:9b:8d:f5:ee:47:39:81:ac:7c:b6:5a:6a:44:31:e3:05:9b:
         be:40:86:04:df:d0:0d:6e:f8:25:6f:a4:6b:c9:58:10:ca:87:
         f5:4f:d5:87:a3:c8:90:0a:fe:28:29:de:f0:34:72:7d:8e:2a:
         ea:d6:7c:0b:18:5d:f6:c6:a7:b0:57:37:b8:b5:7c:eb:53:83:
         8a:3b:d6:4a:20:ab:37:e4:16:fa:07:da:ab:55:68:ce:98:9f:
         55:de:5c:38:6a:99:77:02:0b:f4:f1:2b:3a:09:29:80:21:ca:
         90:ae:36:70:5e:0f:62:ec:8e:fe:45:2e:1b:b2:ed:94:84:18:
         04:a4:23:59:ac:ce:ef:d8:ad:ac:c0:35:52:f1:e3:ca:e8:52:
         b0:2e:80:96:0d:70:a6:d3:fe:a5:a6:62:1e:2a:8d:9e:f9:63:
         99:74:5d:9b:88:3f:cc:7e:59:92:4c:2f:7a:2e:3a:46:f0:90:
         0e:33:ac:62:6e:9f:46:3f:79:e3:35:3e:08:3a:d5:67:7b:e9:
         63:8b:98:14:9f:f2:21:97:dc:87:53:24:1d:e9:d8:21:ad:e6:
         5d:98:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:50:46 2025 by rpki-client