Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa
File:                     3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          fQFFHDPg9iwMxVy+lAblOUDuurEnJzzjP4C2Lo8djd8=
Subject key identifier:   44:0A:EC:32:72:80:7B:86:C6:26:79:77:35:76:3D:43:68:9D:62:37
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       7F44A9134AE0C9D4DD082BF6F07B92BEA2356B3C
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa
Signing time:             Tue 11 Feb 2025 12:03:52 +0000
ROA not before:           Tue 11 Feb 2025 11:58:52 +0000
ROA not after:            Tue 10 Feb 2026 12:03:52 +0000
asID:                     53108
IP address blocks:        167.249.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:a9:13:4a:e0:c9:d4:dd:08:2b:f6:f0:7b:92:be:a2:35:6b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 11:58:52 2025 GMT
            Not After : Feb 10 12:03:52 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:dc:ff:1d:50:e7:c8:4a:8e:90:f9:d4:44:
                    fe:fc:1e:db:66:30:40:fb:d2:63:07:dd:11:24:09:
                    79:35:5f:61:a0:b0:2d:23:ff:8f:b3:b8:8e:f6:dc:
                    0d:09:d7:ea:47:76:b1:7e:7b:c4:61:0b:56:c4:09:
                    07:d8:42:c0:29:f4:2b:c9:51:97:f6:84:d9:0b:c4:
                    96:d9:b0:f1:b0:51:37:ff:14:fc:63:90:27:b5:db:
                    b7:c2:50:ac:04:2a:77:71:ac:63:bd:8b:3a:fa:77:
                    01:7e:5d:cd:95:a4:64:d6:ef:bd:9c:75:ed:47:78:
                    55:fc:f5:12:e5:cb:cc:3e:d9:c4:38:bf:8f:15:68:
                    54:fb:11:9a:e2:96:74:86:3b:03:ce:38:3a:80:f1:
                    97:4f:6d:af:be:12:2e:b3:bc:b9:cb:66:b9:cb:10:
                    f1:11:39:33:95:d4:c0:dc:bd:82:f0:ce:97:e5:dc:
                    60:bd:5b:e4:2e:59:1f:9e:b6:60:4a:b7:8d:38:b1:
                    dc:55:91:b4:77:0b:d6:79:e6:4c:29:c4:51:04:6a:
                    19:a3:96:00:d9:85:75:d8:6f:b9:06:dd:3d:86:02:
                    0c:ac:3a:50:73:9d:74:84:19:88:2f:b5:fb:4e:ef:
                    8c:d8:e5:49:9e:b4:74:17:79:f3:00:f6:62:b4:c3:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:EC:32:72:80:7B:86:C6:26:79:77:35:76:3D:43:68:9D:62:37
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:90:58:6b:3b:46:ac:77:87:1f:94:27:12:49:e2:9f:fe:
         21:47:16:89:25:dc:18:ae:e0:36:06:20:c8:a6:4e:61:98:be:
         59:a2:84:ec:3b:b7:94:42:d6:29:95:fe:ed:22:a2:d6:ad:25:
         b6:80:83:97:c4:8d:4c:3e:bc:06:cc:89:17:1a:70:4b:11:42:
         99:ae:e9:1c:6d:dc:4b:09:ff:2f:0c:8c:7d:67:d4:ac:f2:f1:
         ff:b5:cf:5e:5b:0a:e5:5e:79:44:72:37:e4:57:49:e4:cc:82:
         d7:e4:ca:ea:a9:06:c9:34:80:37:f7:f9:a6:94:02:7c:44:f3:
         10:be:89:c4:63:fa:96:7c:ba:97:b2:9e:dc:54:e6:af:dd:f5:
         fd:0e:8a:cf:a7:b9:d1:e2:33:c5:cd:05:eb:ff:2b:e0:1a:c0:
         27:42:59:7d:81:99:34:00:29:9d:51:03:1e:51:41:ef:e3:ea:
         ed:dc:2d:1b:da:fa:fa:cc:25:82:27:0c:6d:7d:d5:e5:59:6b:
         5a:95:d2:66:82:41:5e:2f:70:22:d6:db:33:ff:10:3c:15:d0:
         d8:0c:9a:1b:29:04:e0:45:22:68:ff:d6:73:62:b6:68:d5:26:
         ba:14:5d:dc:c4:16:3d:10:6d:d1:a0:0a:08:34:71:28:34:f3:
         b6:6c:63:f6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUf0SpE0rgydTdCCv28HuSvqI1azwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNTAyMTExMTU4NTJaFw0yNjAyMTAxMjAzNTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNFQkRDRkYxRDUwRTdDODRB
OEU5MEY5RDQ0NEZFRkMxRURCNjYzMDQwRkJEMjYzMDdERDExMjQwOTc5MzU1RjYx
QTBCMDJEMjNGRjhGQjNCODhFRjZEQzBEMDlEN0VBNDc3NkIxN0U3QkM0NjEwQjU2
QzQwOTA3RDg0MkMwMjlGNDJCQzk1MTk3RjY4NEQ5MEJDNDk2RDlCMEYxQjA1MTM3
RkYxNEZDNjM5MDI3QjVEQkI3QzI1MEFDMDQyQTc3NzFBQzYzQkQ4QjNBRkE3NzAx
N0U1RENEOTVBNDY0RDZFRkJEOUM3NUVENDc3ODU1RkNGNTEyRTVDQkNDM0VEOUM0
MzhCRjhGMTU2ODU0RkIxMTlBRTI5Njc0ODYzQjAzQ0UzODNBODBGMTk3NEY2REFG
QkUxMjJFQjNCQ0I5Q0I2NkI5Q0IxMEYxMTEzOTMzOTVENEMwRENCRDgyRjBDRTk3
RTVEQzYwQkQ1QkU0MkU1OTFGOUVCNjYwNEFCNzhEMzhCMURDNTU5MUI0NzcwQkQ2
NzlFNjRDMjlDNDUxMDQ2QTE5QTM5NjAwRDk4NTc1RDg2RkI5MDZERDNEODYwMjBD
QUMzQTUwNzM5RDc0ODQxOTg4MkZCNUZCNEVFRjhDRDhFNTQ5OUVCNDc0MTc3OUYz
MDBGNjYyQjRDMzRGRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0+vc/x1Q58hKjpD51ET+/B7bZjBA+9JjB90RJAl5NV9hoLAtI/+P
s7iO9twNCdfqR3axfnvEYQtWxAkH2ELAKfQryVGX9oTZC8SW2bDxsFE3/xT8Y5An
tdu3wlCsBCp3caxjvYs6+ncBfl3NlaRk1u+9nHXtR3hV/PUS5cvMPtnEOL+PFWhU
+xGa4pZ0hjsDzjg6gPGXT22vvhIus7y5y2a5yxDxETkzldTA3L2C8M6X5dxgvVvk
LlkfnrZgSreNOLHcVZG0dwvWeeZMKcRRBGoZo5YA2YV12G+5Bt09hgIMrDpQc510
hBmIL7X7Tu+M2OVJnrR0F3nzAPZitMNP+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEQK7DJygHuGxiZ5dzV2PUNonWI3MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzEzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
p/lqMA0GCSqGSIb3DQEBCwUAA4IBAQBOFZBYaztGrHeHH5QnEknin/4hRxaJJdwY
ruA2BiDIpk5hmL5ZooTsO7eUQtYplf7tIqLWrSW2gIOXxI1MPrwGzIkXGnBLEUKZ
rukcbdxLCf8vDIx9Z9Ss8vH/tc9eWwrlXnlEcjfkV0nkzILX5MrqqQbJNIA39/mm
lAJ8RPMQvonEY/qWfLqXsp7cVOav3fX9DorPp7nR4jPFzQXr/yvgGsAnQll9gZk0
ACmdUQMeUUHv4+rt3C0b2vr6zCWCJwxtfdXlWWtaldJmgkFeL3Ai1tsz/xA8FdDY
DJobKQTgRSJo/9ZzYrZo1Sa6FF3cxBY9EG3RoAoINHEoNPO2bGP2
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:16 2025 by rpki-client