Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
File:                     3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          CaV1Odb8NWfmMmb841oeSnut5ZQhys+Hijr5E9nhBZc=
Subject key identifier:   85:AE:B8:F3:F1:3A:DE:4F:5B:36:C7:35:D2:97:DB:9C:85:C2:A7:67
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       55C0F38A9FA74B642324A6D4E93EF23696A0E832
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
Signing time:             Wed 05 Mar 2025 23:22:05 +0000
ROA not before:           Wed 05 Mar 2025 23:17:05 +0000
ROA not after:            Wed 04 Mar 2026 23:22:05 +0000
asID:                     52756
IP address blocks:        170.245.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl
                          rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 18:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c0:f3:8a:9f:a7:4b:64:23:24:a6:d4:e9:3e:f2:36:96:a0:e8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Mar  5 23:17:05 2025 GMT
            Not After : Mar  4 23:22:05 2026 GMT
        Subject: CN=85AEB8F3F13ADE4F5B36C735D297DB9C85C2A767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:b6:8c:c5:4f:4a:8a:4f:71:08:ad:93:4e:
                    c9:45:e9:b1:19:59:a6:6b:50:4a:c8:24:32:5f:63:
                    54:0e:61:5e:08:41:8f:ff:3e:96:04:2b:d5:c6:b2:
                    6a:b9:2f:93:cd:14:c2:6f:a2:18:f2:58:5b:28:c9:
                    ac:70:85:34:59:b1:d1:c7:fc:5c:09:53:09:db:aa:
                    26:43:73:7c:1d:3b:70:86:fd:4f:34:40:60:05:b0:
                    01:c0:74:37:1e:09:bc:14:21:72:0e:68:04:12:f8:
                    77:a1:93:ee:2c:95:2a:b6:6a:0a:26:7c:18:99:41:
                    f5:8b:3c:31:06:e4:ca:d5:9f:34:b7:cf:47:6d:0f:
                    ca:8d:0b:21:67:e9:8e:cc:eb:d0:fc:0c:03:70:19:
                    08:e0:c0:21:54:cc:54:ba:f8:8a:98:dc:57:a7:96:
                    82:17:b0:40:01:78:11:71:08:72:e1:f7:5f:23:7e:
                    0a:12:a1:b2:24:6c:9e:b6:0f:11:1f:cb:09:b1:cf:
                    66:10:81:b0:a3:2b:f8:08:75:70:89:58:6e:d9:ec:
                    78:f6:9f:87:43:07:a4:08:5d:55:dd:ad:c9:49:a9:
                    80:50:ab:ff:2e:e9:6f:b7:97:4d:09:6e:bf:5e:bc:
                    af:a6:83:e4:d3:05:b6:ff:cf:f7:0d:9b:34:64:79:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:B8:F3:F1:3A:DE:4F:5B:36:C7:35:D2:97:DB:9C:85:C2:A7:67
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:3e:73:71:cc:6f:b6:d1:8d:ec:e3:65:1f:b4:55:90:7a:
         4a:dc:c0:31:19:7c:d2:2d:70:31:4d:c0:83:b4:10:75:2f:c2:
         a9:55:d2:3e:d8:29:3c:e8:f9:da:bf:d0:82:a2:d2:03:e0:9d:
         9e:73:cc:51:c4:29:30:d2:fb:c8:ba:b6:c5:69:52:ff:df:20:
         a8:ba:f8:69:e9:ad:7e:2b:f1:6e:0a:9a:3b:61:4e:c0:78:76:
         db:ba:cf:75:f0:e4:c9:ec:d5:7a:7e:cb:cb:8d:20:4c:25:1a:
         b9:be:93:2e:d3:34:b6:42:fb:90:29:18:0c:46:39:af:c3:6e:
         7e:2f:8c:52:e3:c3:71:6f:07:dc:13:a4:a3:94:3a:5c:69:e9:
         c9:83:36:6c:ba:b4:4e:91:40:64:fb:0c:5e:4c:b0:0f:22:dc:
         b4:dd:14:14:4a:53:81:48:2b:78:fa:7b:8a:0c:d1:02:da:e5:
         a4:eb:bc:6e:75:49:d1:0b:32:b2:d3:fb:db:b3:9c:7b:3c:7b:
         4b:24:2a:45:2b:76:7b:8f:d7:cc:13:aa:69:de:a0:78:b1:b3:
         a8:8e:1a:9e:9c:6e:81:f4:e8:8a:24:d2:09:9f:90:95:df:b1:
         5a:3e:83:34:73:2b:03:59:64:3c:c8:ec:07:35:69:1b:6f:f3:
         29:db:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:47:21 2025 by rpki-client