Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
File:                     3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (raw, json)
Hash identifier:          4nsxKkzXo8fOPU7RBg5HafwDkZZ+DNihrBdA44woyOs=
Subject key identifier:   79:32:68:FC:54:FE:FE:1B:1B:EA:50:DA:6B:61:D8:95:E6:95:2D:CE
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       246928BE64FC91ED9887C94DC430B29D80AC79A4
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     264350
IP address blocks:        131.108.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 02:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:69:28:be:64:fc:91:ed:98:87:c9:4d:c4:30:b2:9d:80:ac:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=793268FC54FEFE1B1BEA50DA6B61D895E6952DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:3e:57:2a:c6:7a:84:9a:5a:f2:7c:e2:41:
                    a6:7e:4f:43:03:d2:44:a2:d4:8c:84:9d:12:8a:90:
                    6d:74:81:77:31:8c:11:55:65:d4:d1:9d:98:7a:8b:
                    12:ef:c6:84:0b:ae:21:23:a1:a0:19:50:d0:f5:6d:
                    e6:b4:b0:c7:18:98:52:f4:c4:2f:08:ec:c7:54:db:
                    4c:15:ef:9e:e8:0e:1f:eb:8c:6b:a7:05:5c:df:f3:
                    45:d9:cd:43:df:97:8e:bf:89:1c:f0:30:73:86:96:
                    99:92:1d:d9:66:da:f4:85:07:51:4e:4b:45:d1:a7:
                    32:74:de:7f:06:0b:16:d6:d1:5c:c6:23:25:3f:df:
                    22:8f:50:a6:b3:ba:29:cf:ac:ed:93:e5:d2:3c:77:
                    e7:cc:d3:e1:a0:f8:54:77:7f:01:43:8c:57:74:89:
                    a8:56:22:36:92:35:f3:79:5e:58:87:59:4d:a4:a4:
                    86:f9:1c:d8:64:a4:2e:1d:fa:14:ef:99:49:ad:7f:
                    6c:b3:42:0d:d4:ce:bd:1d:2d:ce:09:1f:53:04:00:
                    ad:43:6a:60:a0:75:e3:8e:26:53:9b:a1:80:97:22:
                    99:07:18:1d:b6:60:d3:9b:e4:85:fb:b8:a9:25:76:
                    0e:76:a1:9a:3a:4d:70:d1:b6:61:d9:47:11:e4:84:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:32:68:FC:54:FE:FE:1B:1B:EA:50:DA:6B:61:D8:95:E6:95:2D:CE
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:cf:0b:f1:0f:12:6d:9b:74:f9:3b:40:29:b3:a4:20:d6:37:
         c3:4f:5c:40:10:a8:01:b5:2c:24:54:d9:78:be:b8:4e:db:8e:
         3d:ae:68:e4:c8:de:0b:82:88:28:a0:f6:23:a5:4c:d5:d1:7d:
         83:f7:5a:28:8a:a8:2e:33:73:9a:81:1a:0a:af:e6:34:6c:f0:
         88:fd:29:df:ca:ca:71:ee:aa:c2:96:93:ec:9d:1e:b3:73:82:
         4b:37:4b:a7:3a:d1:64:ca:36:a9:97:ca:b7:b0:9e:01:b0:14:
         ce:7a:7b:9c:32:0b:54:d3:e8:1a:ac:16:98:79:80:c4:22:01:
         3a:95:43:b7:a2:37:7c:89:bc:61:22:56:36:ab:d2:fa:9d:53:
         04:a4:87:22:2d:67:36:cf:92:71:52:70:ae:92:d8:b6:4c:2c:
         99:f6:04:50:7c:2f:b9:64:7b:e2:24:bb:05:f7:3f:23:84:9a:
         b0:d2:ef:c8:bc:35:87:e7:7b:f4:7c:b6:2a:b3:23:92:a2:e1:
         24:39:15:6b:57:95:47:4c:e1:cc:de:ad:10:be:8a:66:47:5d:
         fe:22:97:a3:9e:39:f2:8b:e3:8f:30:5a:b9:42:5e:33:e0:5a:
         3a:4b:e5:04:f2:09:51:f3:34:d0:2e:3d:44:2d:0b:e6:25:06:
         36:2d:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:01:21 2025 by rpki-client