Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa
File:                     3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=
Subject key identifier:   6F:AC:3C:30:8F:1E:59:16:95:03:C3:A5:D8:D3:04:08:3D:C7:12:FF
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       05E277867F641E553FBC307B99D15DAAE0B6EAAD
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa
Signing time:             Fri 27 Dec 2024 13:21:05 +0000
ROA not before:           Fri 27 Dec 2024 13:16:05 +0000
ROA not after:            Fri 26 Dec 2025 13:21:05 +0000
asID:                     266446
IP address blocks:        170.82.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 18:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:77:86:7f:64:1e:55:3f:bc:30:7b:99:d1:5d:aa:e0:b6:ea:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Dec 27 13:16:05 2024 GMT
            Not After : Dec 26 13:21:05 2025 GMT
        Subject: CN=6FAC3C308F1E59169503C3A5D8D304083DC712FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:08:4d:66:53:54:3b:92:66:0e:7d:d1:d7:
                    7b:3e:ad:84:bb:51:0f:9d:90:0b:8e:8f:b7:e2:75:
                    8b:5c:74:c2:1d:78:e9:2e:f3:cb:e2:52:36:d6:76:
                    e8:ce:f5:d8:da:c0:2a:63:7f:9f:93:67:9d:4f:e1:
                    71:25:d1:42:36:8e:b4:f4:e6:19:c7:c3:00:34:57:
                    d7:d2:f1:94:7f:23:28:ac:7c:b2:a4:23:15:88:bf:
                    e3:26:d4:14:28:56:aa:48:b2:71:6d:dd:a3:08:af:
                    11:d8:06:06:6f:e8:c1:d5:53:50:dc:be:5e:24:4a:
                    c8:e5:ab:fc:f4:3f:be:29:a9:f6:53:11:99:23:57:
                    21:f6:93:ac:b8:65:51:bc:b8:c6:6c:6b:85:7c:1e:
                    20:bd:b3:0a:8c:da:02:b5:fc:0c:f4:14:66:d5:4c:
                    74:f3:94:05:99:3b:e3:35:64:46:44:6c:a9:8c:31:
                    b7:e9:3c:3c:b9:37:25:ec:55:87:f2:bb:ff:0b:dd:
                    0c:51:b7:ee:f0:86:a0:ee:bd:49:41:19:e6:58:4b:
                    4e:3e:fe:09:3b:bc:ec:4e:a8:07:4a:32:92:78:85:
                    24:db:43:c0:68:ea:64:33:10:c1:3b:f3:69:5f:eb:
                    14:f4:41:2e:63:ea:8e:5b:ee:8b:d7:3a:ba:c1:24:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AC:3C:30:8F:1E:59:16:95:03:C3:A5:D8:D3:04:08:3D:C7:12:FF
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:22:9a:4d:2f:81:c7:53:b3:f7:43:b0:e4:d8:35:07:e9:
         ec:49:0d:0e:e7:ec:ce:fd:65:42:af:20:01:2d:b2:35:98:ab:
         86:29:3a:f3:1a:a0:4c:29:41:19:26:10:e6:62:98:db:a3:02:
         d2:49:31:1b:81:0f:6a:a8:6b:91:e2:61:54:b4:12:b6:a8:ea:
         ea:17:d6:da:fa:ba:33:0a:2a:22:14:e5:2c:99:07:0e:72:94:
         cd:c0:01:bc:9d:63:75:e2:6e:8e:cd:85:9b:95:d0:05:12:85:
         7e:76:a7:1a:13:de:af:a1:b8:35:86:b6:4e:ed:75:13:a8:f8:
         27:e0:25:83:f4:dc:71:13:b8:26:e8:f7:50:26:22:92:4e:ba:
         1e:ed:ce:f6:36:83:38:dc:ee:94:bc:28:2e:a7:88:01:00:d3:
         5f:80:3f:72:c5:76:0a:12:10:86:22:71:73:67:b8:ba:86:12:
         30:31:1a:72:0f:fb:0f:18:7c:4f:20:d1:4b:c1:37:90:73:a5:
         7c:3a:dd:42:80:54:0a:70:66:2a:41:a8:58:39:10:30:31:97:
         1a:46:82:6f:1f:ce:d9:b7:11:3c:b3:bf:22:14:ff:a0:21:f6:
         76:5b:63:39:d6:09:24:22:00:44:83:07:9c:cc:63:ea:2a:3e:
         29:07:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:01 2025 by rpki-client