Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa
File:                     3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (raw, json)
Hash identifier:          TQIWvgPybckuRDgNawrWl52foQOzfxhU4LVG+2RgegQ=
Subject key identifier:   B3:F2:D2:31:6C:69:E4:81:A5:65:74:A4:72:B0:80:78:8E:8C:AC:F3
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       6BDEF43090EA7B3D16751EAEEB7A9379C5982286
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa
Signing time:             Fri 18 Apr 2025 15:25:47 +0000
ROA not before:           Fri 18 Apr 2025 15:20:47 +0000
ROA not after:            Fri 17 Apr 2026 15:25:47 +0000
asID:                     265173
IP address blocks:        167.249.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:de:f4:30:90:ea:7b:3d:16:75:1e:ae:eb:7a:93:79:c5:98:22:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Apr 18 15:20:47 2025 GMT
            Not After : Apr 17 15:25:47 2026 GMT
        Subject: CN=B3F2D2316C69E481A56574A472B080788E8CACF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:1b:55:d3:ad:c3:ab:13:e1:1f:20:d6:b9:
                    c3:7b:83:cd:fc:94:c5:a2:fd:26:1f:30:e2:10:87:
                    1a:22:d2:45:6b:cd:24:83:13:c6:ac:ee:f8:52:31:
                    7c:04:63:43:a7:c0:e3:ef:e1:e7:e7:5e:71:20:97:
                    08:c5:72:4e:0e:4f:24:18:31:5d:6c:93:f1:0a:fc:
                    92:92:ae:18:18:9c:cf:6f:d4:b8:60:5d:96:ba:57:
                    73:59:b2:95:ef:b8:f6:04:6d:93:79:51:98:43:7f:
                    55:14:3e:48:87:fc:de:00:c6:c1:d8:bb:19:60:7a:
                    97:33:ea:97:33:aa:29:de:e1:0d:ba:26:30:35:69:
                    38:da:f4:b6:e2:70:ec:e5:3d:dd:4b:ae:e2:78:fa:
                    dd:21:5d:02:95:4c:f8:8b:9b:d5:db:9b:1d:a2:cb:
                    d3:55:5a:aa:6f:fe:6b:ad:49:2b:fd:76:1d:a1:91:
                    e9:0d:4d:65:cd:20:33:50:d0:e3:0e:ad:a5:05:1f:
                    59:63:87:7d:55:9f:46:30:38:c3:f9:c0:41:c5:9b:
                    59:92:df:d3:ea:96:2f:10:73:18:5e:57:86:76:c6:
                    bd:9b:cf:fc:ab:f6:46:75:13:a7:bc:4b:6d:71:dc:
                    bd:b3:e1:e7:25:85:5c:fd:ce:ef:93:61:1e:38:38:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:D2:31:6C:69:E4:81:A5:65:74:A4:72:B0:80:78:8E:8C:AC:F3
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:c4:56:e5:ef:47:d8:f8:7c:a5:c4:ec:f5:c6:52:fd:a4:
         15:b0:40:5a:e8:76:44:3c:65:ad:41:83:e5:6a:ae:00:c0:6b:
         e5:50:1c:4c:b7:7f:c9:7f:68:82:5a:d1:88:05:47:49:3f:62:
         e9:5d:52:da:f2:49:81:22:91:1a:75:51:9d:a0:8d:4e:36:6a:
         5f:0c:7f:e2:68:69:5e:29:85:61:a5:70:74:3e:2a:43:51:4c:
         33:26:12:e0:5f:09:98:06:38:2b:b3:cf:b7:a2:fb:e2:93:d4:
         0f:a5:58:e5:a9:de:5c:3b:1d:8c:c7:50:22:c0:3e:39:32:f3:
         aa:84:2b:e4:cd:3d:8f:59:20:76:f9:71:37:89:65:8d:51:5c:
         9f:b5:a6:07:f7:22:29:a8:24:86:d1:cc:ed:61:04:1e:e6:a3:
         35:9f:8c:77:4d:07:01:1e:8f:97:a2:75:ef:96:8f:03:b3:3c:
         dc:e7:b5:07:dc:0c:50:95:e0:49:6c:27:02:dc:8d:07:9d:0b:
         41:c7:74:80:a5:08:9c:6b:9c:d0:08:13:ba:20:9b:9f:90:b5:
         9b:fe:74:c5:35:46:05:ad:c6:58:9a:38:a2:4f:6b:db:f7:9d:
         eb:d3:5e:d1:26:12:4f:a3:8a:1d:0f:21:08:91:ce:ef:dc:61:
         cd:ed:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:00:03 2025 by rpki-client