Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          Jk/dUTsEyRS4eaUNQyg2faTffP9Q2z1Onu74obZI4Kc=
Subject key identifier:   77:FB:C1:5D:54:51:7B:CD:28:1D:28:55:35:46:72:76:B0:43:32:CE
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       3A7CAFE071C9537DEC52D4143D86FAD384B17206
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 06 Mar 2025 03:11:49 +0000
ROA not before:           Thu 06 Mar 2025 03:06:49 +0000
ROA not after:            Thu 05 Mar 2026 03:11:49 +0000
asID:                     266611
IP address blocks:        128.201.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7c:af:e0:71:c9:53:7d:ec:52:d4:14:3d:86:fa:d3:84:b1:72:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Mar  6 03:06:49 2025 GMT
            Not After : Mar  5 03:11:49 2026 GMT
        Subject: CN=77FBC15D54517BCD281D285535467276B04332CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:b8:88:46:76:28:e4:f9:25:94:c1:a7:b5:
                    53:49:7d:56:6c:b2:17:28:c7:29:c1:a3:6d:0b:f7:
                    91:4a:54:e3:6e:99:bd:6d:ee:5f:0d:1e:ae:ef:5c:
                    a5:e3:8f:15:e5:48:34:9b:79:c5:44:67:5b:f3:43:
                    97:3a:37:7e:52:5d:86:72:7b:a7:a5:ac:38:86:74:
                    fb:d2:36:f4:c4:c6:26:e5:90:95:d4:21:e9:b3:78:
                    0b:05:c1:9a:69:2a:7b:86:7a:1b:4d:91:9d:5c:33:
                    26:94:3d:e5:77:a6:36:cf:f3:23:1a:a4:ff:e3:55:
                    42:82:61:e8:55:40:a3:f8:be:20:a5:08:0e:41:14:
                    38:db:00:fc:f2:8e:16:46:9e:3b:ed:6f:de:3d:22:
                    2e:1b:f9:5e:61:1c:14:37:71:d5:d4:80:29:7f:b5:
                    29:32:fc:53:40:cd:94:e6:91:8b:e7:e9:8e:fb:11:
                    ac:41:ef:b9:ac:48:47:4e:96:b5:bf:8f:be:db:c7:
                    02:fb:ef:2e:89:fc:be:63:70:d6:d7:3a:6f:0a:cc:
                    1b:12:6f:2c:21:07:e1:1f:61:dc:89:98:99:b8:83:
                    8f:32:17:52:bf:4a:17:6e:f4:5d:9b:8e:24:0f:37:
                    77:b7:72:52:03:74:6a:6b:58:10:48:d3:00:dd:17:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:C1:5D:54:51:7B:CD:28:1D:28:55:35:46:72:76:B0:43:32:CE
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:e5:7a:9d:a8:d3:b2:68:16:25:8b:9b:7c:b2:8f:62:8b:
         19:98:11:1a:8f:53:05:7f:b2:1e:4b:bc:e3:18:b8:7f:6b:f2:
         2e:7a:3f:5e:0d:7c:86:a5:fd:77:4f:cc:6f:c1:2b:fc:ec:72:
         06:a8:2d:9b:ae:35:5b:c9:e8:a8:b0:be:d1:c7:34:8c:02:e6:
         04:e5:23:9c:8a:6a:68:8b:f8:af:4b:77:ac:77:60:e8:13:10:
         63:23:f3:5e:59:79:6a:82:5f:00:f2:bd:69:16:ad:4a:c0:c0:
         d4:fc:2d:35:aa:e0:15:54:0d:50:47:04:f1:0e:2a:19:32:89:
         44:82:7e:18:33:e6:c6:34:f0:2a:b7:3a:b6:86:ea:b3:3a:12:
         75:d3:18:94:65:34:28:de:02:f8:f4:c1:3b:c9:cb:20:72:b7:
         c0:c7:f1:56:9e:f8:99:6c:5d:38:81:53:59:9d:da:60:28:df:
         b8:ff:cb:1b:92:5a:dd:77:3c:4b:b7:52:0b:f0:a5:cb:70:fd:
         94:25:53:be:12:8a:cc:bc:cd:c2:21:e7:9b:9a:7b:d1:61:30:
         45:86:ce:f6:81:74:15:9f:a1:f7:94:a3:4e:00:28:cc:66:dc:
         b0:40:98:78:97:f7:82:4d:75:d6:df:3e:5e:26:2a:c3:50:a3:
         15:c6:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:51 2025 by rpki-client