Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          yrxbU0EzyLgoksOkqvM3A8eoEfVOXWD9Nl4YkxI1D4c=
Subject key identifier:   97:39:ED:0D:07:54:71:4F:03:04:09:09:10:A4:FA:26:70:9E:AD:60
Certificate issuer:       /CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
Certificate serial:       20A8EDA44CC1189BD9525545B3853BCB5CCAE0C6
Authority key identifier: BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa
Signing time:             Sat 10 May 2025 14:23:28 +0000
ROA not before:           Sat 10 May 2025 14:18:28 +0000
ROA not after:            Sat 09 May 2026 14:23:28 +0000
asID:                     61680
IP address blocks:        131.108.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a8:ed:a4:4c:c1:18:9b:d9:52:55:45:b3:85:3b:cb:5c:ca:e0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
        Validity
            Not Before: May 10 14:18:28 2025 GMT
            Not After : May  9 14:23:28 2026 GMT
        Subject: CN=9739ED0D0754714F0304090910A4FA26709EAD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:38:b6:60:28:93:2e:e1:8e:c6:1f:90:b0:
                    4c:04:83:d7:03:bb:af:07:5c:2e:cc:57:65:d6:0e:
                    3c:c9:2a:24:9f:47:d2:a7:9d:63:97:b0:5b:a2:2c:
                    7a:83:a8:ca:14:d6:80:78:89:62:31:43:dd:2e:22:
                    da:c2:ab:32:21:2e:6a:ee:9b:59:b2:fb:84:e7:78:
                    8f:40:42:52:9f:d8:7b:83:17:dc:ca:83:a4:42:85:
                    65:89:f3:43:c4:d0:c1:bd:e6:5b:f2:f5:fb:af:75:
                    33:0e:c4:ee:f0:02:e0:a9:ef:06:c6:c6:f1:df:c9:
                    3d:7a:48:38:4f:a8:bf:31:b2:9d:6b:b1:e8:e6:e4:
                    a5:cf:74:49:ea:e6:7e:b1:32:6e:09:b6:0b:dd:85:
                    93:31:b9:e2:44:bb:d8:8c:d0:4f:43:0b:d2:a2:cc:
                    b5:5f:3c:08:fb:3c:ed:c7:0b:50:d0:2f:b3:ec:31:
                    f4:9d:a7:4f:0a:e8:74:c1:6d:5e:90:05:bf:af:79:
                    cf:3b:f3:6d:f0:1c:71:58:81:54:0e:eb:06:48:a3:
                    2f:0d:92:d1:67:2a:93:ad:42:19:56:0c:28:88:d3:
                    d4:7a:2d:10:c1:8f:80:c3:5b:65:f0:ec:ce:03:e1:
                    71:88:5b:1f:75:6e:cb:d0:0b:d4:0d:fe:e2:7d:52:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:ED:0D:07:54:71:4F:03:04:09:09:10:A4:FA:26:70:9E:AD:60
            X509v3 Authority Key Identifier:
                keyid:BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:68:e5:2e:57:fa:a8:30:a4:eb:e1:24:a8:4e:71:e5:22:
         39:37:ab:74:c1:10:0d:87:bc:9f:98:bc:df:d0:c7:ef:f8:63:
         49:52:cf:07:43:f3:a3:79:5f:89:2a:16:23:e9:af:03:59:22:
         ef:e0:2c:38:51:a5:b8:fb:a5:64:79:2b:f5:c1:40:a4:41:6a:
         c4:30:07:3f:55:14:2b:37:ce:0c:75:44:91:fb:26:2d:a3:a8:
         bf:92:c3:8b:0a:76:02:e2:d5:8d:b9:0e:9f:c1:8e:5f:c9:f1:
         2b:2d:20:3f:69:b5:15:a3:cb:b4:f5:8e:e8:02:f3:09:c9:ed:
         08:fd:db:ab:a2:79:fc:5a:23:8d:90:00:32:c4:b0:56:73:ce:
         9f:8d:51:6a:c8:c7:95:e3:39:f2:d6:22:3a:4c:25:63:67:6c:
         7f:c5:bf:84:01:08:53:32:da:9a:98:61:dd:b2:35:b4:0e:be:
         2d:f0:09:d5:f1:1f:4a:b0:2a:69:a0:84:5a:68:d6:2f:ec:7d:
         ba:52:c0:83:96:c0:8e:a3:1d:f8:c5:3a:73:32:b6:1f:0e:48:
         df:bf:d0:34:de:e2:a2:2b:5a:fa:bd:5b:23:cd:fa:42:45:4a:
         fe:60:bd:9c:09:3e:ff:fd:7b:d7:a2:1e:81:99:35:87:45:bf:
         03:0e:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:48:26 2025 by rpki-client