Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa
File:                     3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (raw, json)
Hash identifier:          VCvDrQd+QVT3HeVPzsxrfh+4Lco4C+uJntp7xlF++P4=
Subject key identifier:   86:85:FC:51:B4:FE:05:10:25:5B:96:B2:9E:CF:44:2F:41:F5:DF:9A
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       59551ADDAE1E62DC5B6A01951C5ECFAEE5831533
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     265938
IP address blocks:        164.163.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:1a:dd:ae:1e:62:dc:5b:6a:01:95:1c:5e:cf:ae:e5:83:15:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=8685FC51B4FE0510255B96B29ECF442F41F5DF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:06:46:89:c6:bf:e1:4f:2c:14:be:72:a0:
                    b0:02:35:f1:37:85:72:fe:7d:0d:b9:5a:9d:b1:da:
                    54:f2:2a:86:16:c3:ce:90:2f:dc:44:71:ab:e0:14:
                    27:89:22:f3:4d:8b:79:e4:37:e2:58:81:6d:fc:60:
                    4b:5a:98:16:0e:c4:dd:82:1f:a0:6b:a3:ff:68:bc:
                    e5:c6:0a:37:c5:fc:59:ce:68:f5:2f:a5:19:66:76:
                    3f:cf:46:4c:5a:90:d9:63:49:39:9a:c6:9e:9b:8c:
                    55:9a:50:5e:fa:4d:2a:eb:2c:57:69:2b:cd:c0:fc:
                    a0:49:c6:2c:c7:54:a9:cc:52:8a:ca:30:48:a4:bb:
                    ca:5a:49:ae:d0:65:28:ac:40:a0:2a:ed:78:51:9b:
                    cf:81:ae:9d:71:0c:d2:8a:e8:78:a7:03:01:20:9c:
                    50:e4:4e:5b:33:99:dc:c6:4a:5b:3a:da:40:68:fa:
                    d3:65:c8:a4:84:29:05:86:62:5a:93:67:42:02:64:
                    e9:82:78:bd:83:8e:b4:8e:79:28:da:1f:8f:2d:c9:
                    4e:19:2a:9d:08:4c:6d:4e:06:e2:1d:0b:16:b8:c3:
                    b1:f3:22:99:1f:a6:13:2f:8a:5c:81:77:ce:af:fd:
                    d9:92:c5:aa:3b:52:da:01:05:cb:b9:51:35:20:70:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:FC:51:B4:FE:05:10:25:5B:96:B2:9E:CF:44:2F:41:F5:DF:9A
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:67:d9:17:b8:23:cc:a8:d0:15:ea:b4:94:ba:82:0b:9b:
         f1:54:60:91:8d:cf:02:92:48:86:23:00:ba:dd:d9:32:fd:05:
         a5:32:8a:18:82:fb:e3:a0:50:2e:e1:3b:1f:ba:eb:8d:fc:b7:
         08:e8:e7:b5:9b:92:f5:9f:5f:d0:f1:ec:b6:9e:a4:fd:72:d6:
         6d:39:fc:9c:ae:b5:21:39:f2:57:e2:bd:2b:b7:64:8b:7e:03:
         50:23:11:2c:cf:b9:01:fc:43:e2:88:ee:77:b4:73:08:0c:a7:
         70:ef:48:ed:a4:db:36:4e:7f:33:0d:39:5a:20:7e:5c:eb:32:
         61:e6:d1:ba:c8:01:c1:ab:c3:a6:b0:08:0f:50:fd:de:c7:0e:
         e9:2f:6c:48:e6:72:4a:98:d3:ce:76:13:5d:12:77:6b:cb:16:
         10:76:54:cb:64:ad:29:b2:ec:25:83:dd:63:58:06:67:20:40:
         8c:be:75:eb:50:c7:ed:3c:53:8f:c6:52:3c:04:ed:53:90:32:
         84:34:d0:20:74:7a:28:54:4d:6b:90:df:d3:24:44:41:d2:b6:
         49:6a:28:e6:d0:5c:44:61:ce:3c:b2:37:9e:5a:1c:b1:98:96:
         0d:39:88:25:7d:f0:69:e3:d0:7e:70:d1:64:60:be:d5:dc:8a:
         4a:d2:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:24 2025 by rpki-client