Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa
File:                     3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (raw, json)
Hash identifier:          vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=
Subject key identifier:   D9:67:CA:6E:6E:ED:32:2C:DA:73:87:DA:CB:A2:45:FF:B9:38:16:D6
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       17993C5572A5A3E36ACCD94511942A75AF296DDD
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa
Signing time:             Thu 27 Mar 2025 11:38:47 +0000
ROA not before:           Thu 27 Mar 2025 11:33:47 +0000
ROA not after:            Thu 26 Mar 2026 11:38:47 +0000
asID:                     61805
IP address blocks:        131.161.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:99:3c:55:72:a5:a3:e3:6a:cc:d9:45:11:94:2a:75:af:29:6d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Mar 27 11:33:47 2025 GMT
            Not After : Mar 26 11:38:47 2026 GMT
        Subject: CN=D967CA6E6EED322CDA7387DACBA245FFB93816D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:20:da:ac:63:84:e6:03:f1:b9:51:43:e6:
                    fa:73:ca:25:fa:d7:d2:8c:5c:bd:bf:65:15:e2:ae:
                    53:04:b5:8d:1c:74:4a:14:8e:08:da:0a:c5:03:18:
                    44:3a:be:7a:6a:d5:90:e9:a8:2c:45:b3:f2:9a:c7:
                    5a:c2:f2:3e:97:77:c5:e5:55:1d:d4:29:53:7a:8a:
                    00:98:71:7a:b5:b7:16:e4:78:cb:8f:eb:6f:67:78:
                    67:03:b4:98:02:1f:31:ed:5d:f1:9d:49:98:5a:d0:
                    97:d4:d1:c5:79:0f:04:4e:af:5c:40:77:cb:8e:4c:
                    6a:f1:cc:18:a4:4f:0e:41:d0:76:58:3d:1d:ba:3e:
                    cd:16:4b:46:6d:19:f4:ed:e4:13:a3:d7:e3:5c:76:
                    27:36:ef:d9:a6:52:2a:78:3d:64:51:84:13:91:c0:
                    fb:db:cc:3e:bb:10:ab:59:5c:77:45:4e:b9:11:28:
                    a4:18:36:44:30:de:eb:bb:5d:56:e0:a3:4b:2c:4f:
                    a5:0a:58:f4:1c:9a:58:93:a8:a4:91:a2:f7:a9:8f:
                    88:48:c1:ae:37:2a:bc:15:5c:79:b4:55:2e:2f:f5:
                    50:0c:5d:13:af:f0:ac:37:4c:52:af:dc:62:31:64:
                    e0:b2:17:04:4c:b3:54:fc:53:65:2f:1b:31:fc:2d:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:CA:6E:6E:ED:32:2C:DA:73:87:DA:CB:A2:45:FF:B9:38:16:D6
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:e7:6e:65:42:a7:02:a5:f8:4d:a8:40:56:ae:e6:a0:a9:
         91:13:47:51:99:aa:d6:a9:59:1e:b6:f4:bf:e8:3a:11:63:ed:
         b4:86:eb:e3:3f:3e:6b:29:1b:80:76:6f:de:b6:70:16:0e:49:
         75:5d:95:0f:a7:69:35:1c:53:71:a6:57:16:16:cb:16:59:da:
         0b:22:16:6b:9b:57:20:b1:1f:bc:02:b9:d3:58:ec:74:36:b2:
         db:4c:02:e5:f7:14:f5:c2:c4:48:28:15:34:62:90:c9:06:cb:
         f2:c4:36:41:28:11:d7:4f:3a:56:10:6b:e8:2d:98:95:ce:90:
         66:fc:fd:be:c6:58:84:6c:fd:d5:61:f4:32:aa:6b:4d:89:3b:
         63:53:d3:64:28:5a:32:ec:57:04:20:33:fd:fe:2a:77:88:12:
         26:97:2b:5b:07:0d:8c:cf:d3:c6:79:af:e8:5b:db:33:a7:77:
         dc:dc:1f:7f:a2:85:17:8a:b8:b2:1f:f7:10:7c:da:f0:19:4e:
         b3:2c:d5:a0:09:3c:7c:15:5c:a9:30:bf:ef:e7:f6:02:7e:ee:
         a9:a8:63:f4:53:bc:bd:44:76:93:28:bb:39:e6:cb:13:0c:e7:
         33:ff:a6:d3:4d:05:ea:c1:42:b5:e0:81:ab:54:c0:5f:a4:46:
         4c:b1:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:14:52 2025 by rpki-client