Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
File:                     3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa (raw, json)
Hash identifier:          RagpUSi6p6R7Pd76k9kw29koRsfPiH0X4Wz1CoRbfAU=
Subject key identifier:   44:04:54:6F:97:AB:C4:CC:3A:BC:05:95:4F:11:D3:8C:88:79:D2:AC
Certificate issuer:       /CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
Certificate serial:       7808CDC83EC15847970264BAE8DE26AF6BBDA2CE
Authority key identifier: 4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
Signing time:             Wed 05 Mar 2025 21:14:25 +0000
ROA not before:           Wed 05 Mar 2025 21:09:25 +0000
ROA not after:            Wed 04 Mar 2026 21:14:25 +0000
asID:                     61673
IP address blocks:        131.108.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl
                          rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:08:cd:c8:3e:c1:58:47:97:02:64:ba:e8:de:26:af:6b:bd:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
        Validity
            Not Before: Mar  5 21:09:25 2025 GMT
            Not After : Mar  4 21:14:25 2026 GMT
        Subject: CN=4404546F97ABC4CC3ABC05954F11D38C8879D2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:af:5c:ae:a0:b5:80:d8:38:76:bf:f2:57:
                    ef:b5:15:52:02:df:61:fd:53:09:eb:c5:1b:cf:b2:
                    f7:34:5c:79:70:14:d1:96:3b:c5:f4:d8:84:1a:ab:
                    fb:5c:4f:45:c1:0c:79:9c:80:10:d7:0a:6d:02:a0:
                    66:a5:51:59:16:27:6b:df:24:69:38:fb:e2:2f:0c:
                    6e:0f:1b:06:87:d7:5b:ca:68:d2:0f:80:2a:16:89:
                    fa:8c:a9:f5:1c:ba:e3:7d:48:9c:d7:cc:85:bf:6e:
                    0d:29:82:e6:36:41:e4:c8:bc:08:75:bb:cf:55:85:
                    3c:a6:ec:f3:c0:6a:4a:d0:eb:ab:64:46:f6:84:99:
                    7e:54:c4:80:a2:2b:10:25:1b:7a:e7:93:77:f0:03:
                    7c:e9:6c:c9:94:34:40:b9:9b:fc:ed:63:8d:17:7e:
                    22:26:d3:51:46:69:5b:97:98:b0:27:1d:b0:1e:60:
                    6d:0d:08:94:9f:60:ed:35:26:95:09:d0:1b:f5:77:
                    73:d7:16:e2:5c:24:59:d3:90:27:c9:72:af:17:46:
                    be:2d:4b:c9:ec:b3:75:5c:74:d6:f5:34:60:45:33:
                    91:58:2a:07:71:97:56:af:c8:21:99:c4:29:47:cc:
                    d6:ed:02:0b:6c:a7:8d:95:dc:a6:71:00:72:27:a6:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:54:6F:97:AB:C4:CC:3A:BC:05:95:4F:11:D3:8C:88:79:D2:AC
            X509v3 Authority Key Identifier:
                keyid:4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:78:6d:b6:4b:ad:93:ab:95:64:d1:29:f2:98:5d:f0:07:70:
         9e:ec:9b:ea:87:d0:a7:85:6c:b8:e8:a3:86:1c:b3:bf:80:5e:
         c1:36:6d:ce:c9:0e:73:f1:b4:25:1a:a2:88:26:ca:0a:60:f8:
         6e:8b:39:0c:62:47:66:a8:7a:16:0a:c9:db:76:24:39:7c:3e:
         65:76:b1:cf:cd:5a:6d:b6:9d:ca:f6:d3:01:46:03:86:22:9b:
         a1:18:35:82:42:26:b9:23:88:70:64:db:2c:2f:ef:37:7b:c4:
         fe:f3:3b:35:5d:bd:07:b9:b8:fd:36:3d:f9:37:17:ec:cd:b7:
         30:20:e2:3a:1d:86:87:1d:83:42:96:49:fb:01:d0:57:a3:c7:
         5f:ac:78:aa:03:bd:95:71:15:b7:e5:e1:62:bd:54:a6:bc:0a:
         57:8f:d4:fa:45:30:15:df:46:4b:7d:bd:f5:36:e5:6c:2e:53:
         d7:ab:db:07:95:80:fd:b9:f7:03:66:91:70:a3:e6:27:ff:b9:
         21:2c:54:8e:14:54:a9:8f:b0:10:69:f3:a7:25:ac:81:8c:fc:
         8a:71:91:b0:6f:83:dd:4c:37:ec:80:fb:d2:3a:43:10:3e:75:
         f1:57:56:e3:55:64:61:52:5b:26:45:5a:11:97:06:c7:9f:be:
         4c:88:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:26 2025 by rpki-client on console.sobornost.net