Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
File:                     3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (raw, json)
Hash identifier:          yWVpzzfxPmeNo2QzaRp9WQbxJTr8twBOkMO/pK/U4VA=
Subject key identifier:   FC:5E:D4:75:7B:B1:E7:26:7F:C3:E0:78:46:64:54:CF:65:26:95:77
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       1A0F63323BB332C8530EE61D279565593FF550A7
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
Signing time:             Thu 06 Mar 2025 04:45:39 +0000
ROA not before:           Thu 06 Mar 2025 04:40:39 +0000
ROA not after:            Thu 05 Mar 2026 04:45:39 +0000
asID:                     264470
IP address blocks:        131.255.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl
                          rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:63:32:3b:b3:32:c8:53:0e:e6:1d:27:95:65:59:3f:f5:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Mar  6 04:40:39 2025 GMT
            Not After : Mar  5 04:45:39 2026 GMT
        Subject: CN=FC5ED4757BB1E7267FC3E078466454CF65269577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:b6:9b:5e:89:8c:c6:25:1e:d9:2a:6a:c2:
                    03:c2:47:76:e4:a0:32:bf:07:34:df:e2:1d:e1:9a:
                    31:ed:25:53:76:6d:dd:cf:98:4b:fb:f4:dd:c7:7b:
                    75:58:4a:fd:b5:c0:78:57:2e:d2:0b:d3:6d:9a:70:
                    ca:db:d1:32:1f:fb:67:c8:16:e0:d4:02:54:69:d9:
                    b6:3f:2c:bb:47:05:30:85:17:85:46:fa:e1:e7:34:
                    33:30:9e:f9:ad:6e:71:88:fb:a6:5f:81:ff:5b:3a:
                    38:c9:8e:87:b4:14:80:b7:38:b1:c1:03:ef:c2:1e:
                    e0:53:be:37:eb:d7:da:20:4a:7b:75:72:ed:fe:57:
                    e4:c0:16:66:9a:4d:27:6c:ca:ca:87:c2:1c:20:29:
                    d1:26:a7:31:c6:fd:8f:24:f9:f2:be:f1:81:44:46:
                    03:f5:69:53:e4:91:dd:19:24:40:ac:49:ff:f0:a0:
                    b9:6b:ad:14:a9:80:0a:c7:f5:21:26:ce:ed:44:b5:
                    87:14:d4:81:82:c9:63:91:bf:1a:f0:8b:59:a7:52:
                    62:da:f7:13:6c:f0:3d:9f:06:a9:38:5a:09:57:8d:
                    a9:70:84:da:d8:52:93:bc:d8:9f:0d:34:85:51:74:
                    89:eb:95:db:ab:e3:c0:d8:c3:de:4a:db:b6:56:6a:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:D4:75:7B:B1:E7:26:7F:C3:E0:78:46:64:54:CF:65:26:95:77
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:78:ae:d0:7a:8c:82:63:db:8f:2b:9c:fb:34:4a:95:6a:
         8c:44:b5:91:dc:e8:e7:58:c4:20:c7:72:bf:da:e4:cd:19:b0:
         09:ee:a2:99:1f:b1:fa:8e:36:9e:c3:20:06:ba:d0:36:d8:b3:
         a8:6e:c5:60:a8:5d:93:66:31:32:a6:f8:ac:13:58:29:c2:39:
         f1:a7:18:56:12:1f:58:fe:29:85:8c:da:13:98:16:d1:cf:21:
         09:a2:25:83:e7:64:5d:bd:5e:20:df:07:90:f6:83:03:4a:8e:
         69:00:2e:c3:5b:1c:e2:17:e2:f8:54:ef:fe:44:60:f0:69:74:
         24:ce:c5:8f:02:02:b4:af:05:fc:80:da:51:99:94:1d:f0:6f:
         3a:94:2a:23:2f:71:bf:25:f2:38:57:23:6c:82:9d:7e:a3:33:
         4c:27:9e:d6:86:6d:b9:93:fe:b9:62:d5:f9:73:a7:4d:e8:90:
         3d:2f:d0:06:f0:50:e6:c7:d4:75:58:4b:0b:be:27:df:70:22:
         f7:40:25:ec:c7:36:fc:f4:08:18:29:db:9a:aa:20:4d:27:0b:
         d7:ab:79:1f:93:cf:21:09:28:fb:ff:e1:e4:51:39:44:61:54:
         52:8f:6f:56:39:34:02:7a:11:d5:47:a5:e3:15:0c:6f:73:5a:
         73:af:ac:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGg9jMjuzMshTDuYdJ5VlWT/1UKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGMkE0MDMzQkUzNEUwMjNFOUNDOENBNzhDQTc4NUIw
NURFN0RBNDAeFw0yNTAzMDYwNDQwMzlaFw0yNjAzMDUwNDQ1MzlaMDMxMTAvBgNV
BAMTKEZDNUVENDc1N0JCMUU3MjY3RkMzRTA3ODQ2NjQ1NENGNjUyNjk1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfarabXomMxiUe2SpqwgPCR3bk
oDK/BzTf4h3hmjHtJVN2bd3PmEv79N3He3VYSv21wHhXLtIL022acMrb0TIf+2fI
FuDUAlRp2bY/LLtHBTCFF4VG+uHnNDMwnvmtbnGI+6Zfgf9bOjjJjoe0FIC3OLHB
A+/CHuBTvjfr19ogSnt1cu3+V+TAFmaaTSdsysqHwhwgKdEmpzHG/Y8k+fK+8YFE
RgP1aVPkkd0ZJECsSf/woLlrrRSpgArH9SEmzu1EtYcU1IGCyWORvxrwi1mnUmLa
9xNs8D2fBqk4WglXjalwhNrYUpO82J8NNIVRdInrldur48DYw95K27ZWaoQHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/F7UdXux5yZ/w+B4RmRUz2UmlXcwHwYDVR0j
BBgwFoAUb/KkAzvjTgI+nMjKeMp4WwXefaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk51M2hVenRnamVveUdqR0pSaEFzTXZSSGFlUm5jcW4xRW12OU1UWXE5
eGEvMS82RkYyQTQwMzNCRTM0RTAyM0U5Q0M4Q0E3OENBNzg1QjA1REU3REE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRjJBNDAzM0JFMzRFMDIz
RTlDQzhDQTc4Q0E3ODVCMDVERTdEQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOdTNoVXp0Z2plb3lHakdKUmhBc012UkhhZVJuY3FuMUVtdjlNVFlxOXhhLzEv
MzEzMzMxMmUzMjM1MzUyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/1AwDQYJKoZIhvcNAQELBQADggEBAAqDeK7Q
eoyCY9uPK5z7NEqVaoxEtZHc6OdYxCDHcr/a5M0ZsAnuopkfsfqONp7DIAa60DbY
s6huxWCoXZNmMTKm+KwTWCnCOfGnGFYSH1j+KYWM2hOYFtHPIQmiJYPnZF29XiDf
B5D2gwNKjmkALsNbHOIX4vhU7/5EYPBpdCTOxY8CArSvBfyA2lGZlB3wbzqUKiMv
cb8l8jhXI2yCnX6jM0wnntaGbbmT/rli1flzp03okD0v0AbwUObH1HVYSwu+J99w
IvdAJezHNvz0CBgp25qqIE0nC9ereR+TzyEJKPv/4eRROURhVFKPb1Y5NAJ6EdVH
peMVDG9zWnOvrLQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:28 2025 by rpki-client on console.sobornost.net