Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
File:                     3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa (raw, json)
Hash identifier:          AKyX3/nDwvmLn7FabZprT7qYxUsc8H3aiXQG+q7G2o4=
Subject key identifier:   A8:7B:2A:90:56:CF:18:9B:C9:FB:CA:F3:65:DD:AE:B8:A5:44:F3:77
Certificate issuer:       /CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
Certificate serial:       416A6D8CA527129B16D2DD8108B216F4AB530BDE
Authority key identifier: 4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
Signing time:             Thu 13 Mar 2025 12:15:23 +0000
ROA not before:           Thu 13 Mar 2025 12:10:23 +0000
ROA not after:            Thu 12 Mar 2026 12:15:23 +0000
asID:                     61673
IP address blocks:        131.108.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl
                          rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 10:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:6d:8c:a5:27:12:9b:16:d2:dd:81:08:b2:16:f4:ab:53:0b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
        Validity
            Not Before: Mar 13 12:10:23 2025 GMT
            Not After : Mar 12 12:15:23 2026 GMT
        Subject: CN=A87B2A9056CF189BC9FBCAF365DDAEB8A544F377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:c4:ba:c0:a0:be:a3:ee:e0:01:ec:68:75:
                    d5:52:1d:b9:c2:af:fb:c7:e2:b1:b3:41:4b:e7:cb:
                    a2:78:49:1f:6d:68:4f:87:19:fe:86:b2:bf:05:3c:
                    53:8e:3f:57:ad:11:e2:80:81:de:f1:be:6c:72:9f:
                    9d:7b:b9:75:1f:d9:fd:66:e8:38:fd:a8:7e:e1:4e:
                    59:30:7b:02:e9:f3:e3:e2:ed:18:5a:0b:d9:b8:5d:
                    1d:b5:0c:19:7c:46:de:84:e5:a4:53:41:e8:47:88:
                    c5:54:37:f4:2f:2b:e8:ac:55:b3:45:9d:2b:16:ea:
                    d4:47:36:4a:b2:78:af:4a:b8:e1:21:6e:fb:7e:b2:
                    5e:6a:0e:8b:1a:d1:2e:28:44:69:f3:bf:be:9b:50:
                    5d:fa:d7:74:d8:f6:dd:ff:26:7d:71:d9:57:95:f2:
                    1c:34:f9:d4:4d:01:6c:31:89:3c:b2:e5:99:10:7c:
                    99:7e:ec:31:9d:55:73:d9:d6:65:11:9c:40:77:1d:
                    9d:f9:43:8a:18:fb:85:68:ea:f6:01:5e:5b:55:1f:
                    9e:2c:c5:c5:44:39:bd:48:67:37:22:02:ca:48:28:
                    93:de:57:7b:53:97:c9:52:d5:d7:c1:e9:76:f3:b5:
                    f8:5b:46:e4:3a:21:d0:96:f9:f6:84:6f:e8:d4:dc:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:2A:90:56:CF:18:9B:C9:FB:CA:F3:65:DD:AE:B8:A5:44:F3:77
            X509v3 Authority Key Identifier:
                keyid:4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:5f:c0:cf:5f:1e:30:8e:40:0c:b9:5f:89:9d:e1:2a:5a:
         f8:5f:51:78:ef:e9:cc:0b:79:a3:82:71:76:b5:47:c1:2e:b0:
         a7:1e:5a:f8:3e:5b:5f:61:ba:ed:4c:0e:aa:06:d9:de:78:3e:
         23:23:0c:2e:e6:20:c8:12:e2:9b:b7:6c:35:30:79:d3:c7:c6:
         62:a1:47:e1:6c:ed:e9:3a:71:7d:21:2a:51:32:12:a8:0b:c1:
         28:74:d8:3c:2f:9d:b8:17:4c:8a:be:f2:73:cc:a3:33:4d:cd:
         94:1f:1e:2d:2c:2d:cf:ee:02:0e:80:41:08:86:9c:c6:0c:eb:
         82:ef:18:d3:15:ba:5d:bc:0c:d3:3d:eb:99:a7:e1:04:0c:ad:
         ec:f7:53:83:ca:f5:18:1b:05:89:0e:3f:2c:96:17:65:7e:50:
         10:0c:dc:85:68:1a:21:38:52:30:d6:93:6c:49:5f:3f:4f:e3:
         97:51:6f:bd:a8:ff:fb:6c:36:9b:6b:f6:81:cc:af:87:59:03:
         a2:a1:86:bf:93:e5:bf:36:fd:84:50:22:61:3e:ca:0d:e1:6f:
         49:f4:bb:f2:99:4e:71:34:5c:c0:40:26:fa:9a:38:ed:94:dc:
         c5:22:b8:a1:40:d2:ec:a5:3f:92:83:c8:a5:75:4a:a5:de:0d:
         2f:19:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:55:04 2025 by rpki-client