Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa
File:                     3136382e3230352e38342e302f32322d3232203d3e203532373830.roa (raw, json)
Hash identifier:          Fjomt8zxlDf78VPgmVJkUFkZh1ccrMaaUfhFibbxIaw=
Subject key identifier:   E9:47:56:FA:FF:6A:A2:A0:A4:88:56:1C:60:48:AB:5A:89:05:C6:D0
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       742ECBC04F5D84B52AA3B733566FA99DB619BBF8
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:24 +0000
ROA not before:           Thu 06 Mar 2025 15:28:24 +0000
ROA not after:            Thu 05 Mar 2026 15:33:24 +0000
asID:                     52780
IP address blocks:        168.205.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:cb:c0:4f:5d:84:b5:2a:a3:b7:33:56:6f:a9:9d:b6:19:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:24 2025 GMT
            Not After : Mar  5 15:33:24 2026 GMT
        Subject: CN=E94756FAFF6AA2A0A488561C6048AB5A8905C6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:93:f5:75:d6:1e:94:b3:39:3c:92:75:08:
                    5d:49:40:89:14:54:15:48:d6:1c:98:57:23:20:41:
                    da:8f:2d:b1:d0:de:ef:21:3d:c5:a9:aa:75:e2:d3:
                    e3:38:2a:a1:7f:a3:7a:a5:39:31:e0:f8:df:8d:d5:
                    04:7e:6a:07:c8:13:ca:e8:4d:89:ce:6c:24:7d:d7:
                    42:4f:2d:ea:ed:86:3e:2d:e5:ab:08:13:f0:9c:56:
                    44:36:f2:6e:78:3a:4d:b0:0a:d1:4a:66:05:84:10:
                    aa:46:a3:4a:c1:b8:9f:72:3c:fd:9d:5f:95:44:2d:
                    f2:4a:c2:c8:ed:84:c4:3b:cd:1a:5b:18:46:fb:f0:
                    ac:44:3f:f8:5c:00:f8:59:59:0c:8c:51:c3:e6:a4:
                    a7:fc:5b:2e:b4:f0:e7:48:4c:97:25:1c:8b:95:1d:
                    54:d2:fd:7f:97:f9:96:2f:60:bb:9e:5e:22:5a:13:
                    0f:32:19:a4:68:07:cf:19:28:91:11:b0:20:ce:00:
                    9c:72:9e:1d:14:1c:da:c1:0c:8c:e5:e8:94:e0:39:
                    71:4b:35:3b:9c:c8:f5:63:62:25:fe:c2:a8:eb:3f:
                    39:8b:18:32:91:22:e7:26:52:a5:d6:a3:c9:12:e5:
                    cc:db:d2:08:5a:bd:91:8d:3e:38:23:86:47:08:ea:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:56:FA:FF:6A:A2:A0:A4:88:56:1C:60:48:AB:5A:89:05:C6:D0
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:29:a9:77:af:7b:90:fe:bf:19:fe:2d:41:bb:e6:f5:9b:36:
         69:b0:7f:7b:42:9f:ea:7d:ff:9a:94:8e:f6:b4:74:a8:67:f4:
         0a:a1:55:1f:31:de:eb:07:e2:df:9d:52:26:2e:32:9d:c0:11:
         01:22:03:a9:53:0f:64:d4:91:7e:7b:01:ee:ab:ff:38:13:0f:
         12:3e:cd:28:84:37:d7:97:84:4f:42:41:1d:af:50:81:cc:74:
         bc:cd:2a:67:d1:a6:86:98:61:7b:3a:f6:65:17:c5:9a:d0:0a:
         65:78:21:69:1a:e8:4b:08:34:fb:4e:6a:a4:05:c5:46:33:5b:
         84:12:f3:56:2d:39:4d:94:7b:43:34:8d:37:16:dc:52:8f:9a:
         e4:f1:7c:9c:7a:dd:98:7d:12:34:f2:dc:81:a3:19:a9:97:1b:
         ca:55:df:03:ac:51:90:61:c1:dd:0b:77:e6:fd:db:56:8d:5e:
         ac:f6:d3:6d:8f:28:a7:20:a9:27:a6:aa:96:06:f3:5f:03:8a:
         86:b0:91:b2:a6:5a:8e:68:24:44:c1:f9:67:c2:cc:a6:3f:4a:
         32:6d:a7:19:63:ac:fa:c2:c5:95:22:62:0d:db:77:f8:3c:d2:
         93:4c:43:bb:84:5d:17:0c:24:13:de:25:af:14:a1:4e:e8:2c:
         9c:ba:5b:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdC7LwE9dhLUqo7czVm+pnbYZu/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNTAzMDYxNTI4MjRaFw0yNjAzMDUxNTMzMjRaMDMxMTAvBgNV
BAMTKEU5NDc1NkZBRkY2QUEyQTBBNDg4NTYxQzYwNDhBQjVBODkwNUM2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9ZP1ddYelLM5PJJ1CF1JQIkU
VBVI1hyYVyMgQdqPLbHQ3u8hPcWpqnXi0+M4KqF/o3qlOTHg+N+N1QR+agfIE8ro
TYnObCR910JPLerthj4t5asIE/CcVkQ28m54Ok2wCtFKZgWEEKpGo0rBuJ9yPP2d
X5VELfJKwsjthMQ7zRpbGEb78KxEP/hcAPhZWQyMUcPmpKf8Wy608OdITJclHIuV
HVTS/X+X+ZYvYLueXiJaEw8yGaRoB88ZKJERsCDOAJxynh0UHNrBDIzl6JTgOXFL
NTucyPVjYiX+wqjrPzmLGDKRIucmUqXWo8kS5czb0ghavZGNPjgjhkcI6klbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6UdW+v9qoqCkiFYcYEirWokFxtAwHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzEzNjM4MmUzMjMwMzUyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqM1UMA0GCSqGSIb3DQEBCwUAA4IBAQAIKal3r3uQ
/r8Z/i1Bu+b1mzZpsH97Qp/qff+alI72tHSoZ/QKoVUfMd7rB+LfnVImLjKdwBEB
IgOpUw9k1JF+ewHuq/84Ew8SPs0ohDfXl4RPQkEdr1CBzHS8zSpn0aaGmGF7OvZl
F8Wa0ApleCFpGuhLCDT7TmqkBcVGM1uEEvNWLTlNlHtDNI03FtxSj5rk8Xycet2Y
fRI08tyBoxmplxvKVd8DrFGQYcHdC3fm/dtWjV6s9tNtjyinIKknpqqWBvNfA4qG
sJGyplqOaCREwflnwsymP0oybacZY6z6wsWVImIN23f4PNKTTEO7hF0XDCQT3iWv
FKFO6Cyculvy
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:14 2025 by rpki-client on console.sobornost.net