Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa
File:                     3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (raw, json)
Hash identifier:          yNpE3IEN8x94OueC84lrCBdj1zZLI9BtE7e50Zrvi40=
Subject key identifier:   40:C2:FB:98:0A:1A:2D:0C:E1:EB:77:2C:A6:50:B0:FF:43:26:6D:76
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       29EDA2F548209CCB92F7417E8726AAB8A269D392
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265938
IP address blocks:        164.163.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:a2:f5:48:20:9c:cb:92:f7:41:7e:87:26:aa:b8:a2:69:d3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=40C2FB980A1A2D0CE1EB772CA650B0FF43266D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:a1:ae:62:a4:40:97:f4:7c:94:ad:f1:66:
                    bd:c9:65:1d:64:73:df:ae:bb:3a:e4:47:e7:b8:7b:
                    1c:6d:4f:2c:10:b3:82:7d:50:32:af:87:b7:44:09:
                    78:d0:69:1f:63:f5:2a:07:dd:90:cd:07:33:11:bb:
                    e5:5b:e8:ad:51:9d:d4:3f:58:65:cb:ef:4f:c7:f2:
                    43:f4:4a:74:02:43:d4:5d:eb:d3:5d:e9:c5:8b:8e:
                    ea:8a:1b:ab:c4:8a:3c:bf:35:fc:8e:66:73:dc:ef:
                    dd:2c:08:93:e1:4e:5d:0f:b3:97:72:ed:cb:bf:cb:
                    36:f8:69:48:73:47:60:21:76:c3:c6:30:aa:68:6e:
                    8a:21:a2:da:65:a1:e2:a5:08:cf:7f:74:a5:1e:90:
                    c5:13:65:76:ee:4d:6b:27:46:93:6c:ca:5f:18:45:
                    1a:44:62:bd:ad:c2:fa:6b:9b:c2:4c:84:5c:83:ef:
                    a0:d9:a4:e6:3d:a8:0f:67:5a:40:e5:d3:c2:56:f2:
                    b4:59:1d:f1:22:e9:8a:c8:da:ad:0a:52:9f:e3:42:
                    4e:57:e1:30:eb:26:a6:99:ba:68:c3:df:7e:4d:0f:
                    ca:b8:f0:9e:54:d8:b2:77:91:dd:50:f4:b4:fe:55:
                    b3:60:f3:f5:2f:6c:21:d7:ec:73:a8:52:2b:21:2c:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:FB:98:0A:1A:2D:0C:E1:EB:77:2C:A6:50:B0:FF:43:26:6D:76
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:8d:87:41:cd:07:6e:e2:1b:da:81:bd:b8:43:b8:e4:6a:
         fa:17:82:9b:81:a8:5a:86:2d:b8:fe:eb:16:23:6a:29:a9:94:
         d8:ed:07:8c:d4:d1:42:e7:cf:8e:2f:89:04:9e:94:fd:51:4f:
         03:d2:a3:c6:9f:c1:ce:45:1e:10:ef:0c:db:f2:f1:30:aa:f2:
         92:7e:e7:0d:a8:9a:32:3e:5f:a3:c8:0f:e5:e6:8c:38:a4:be:
         60:4d:be:bd:21:a4:06:81:69:d7:93:a0:19:63:f0:40:52:f2:
         f6:f4:67:c2:79:44:c9:0c:a4:0a:01:a9:6f:25:f8:a3:91:6d:
         82:16:c9:3f:ad:59:ca:b5:a5:a5:74:b1:60:48:dd:05:c5:0a:
         78:89:eb:16:de:e8:9e:0d:e6:83:eb:ca:02:94:bb:a3:10:41:
         8e:c1:2c:a5:ce:42:f0:e0:f3:63:28:43:f1:a5:af:69:b8:2d:
         4d:b6:91:d8:43:9d:a4:69:6d:00:02:03:1f:39:4d:d4:6e:c9:
         a6:22:c1:a4:50:54:8f:d6:94:4c:2a:4c:e3:67:b1:6d:46:80:
         81:7c:ec:d8:d5:62:9b:03:25:29:64:d9:ea:b9:31:33:cf:02:
         0f:9d:65:84:a0:99:db:16:cb:43:3c:81:af:aa:b9:cd:fe:be:
         8c:83:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:01 2025 by rpki-client