Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          h1hzxlKnqRjxs6dzZxXJfzVgOW72kbl1DF7IVQXZq7Q=
Subject key identifier:   1C:14:B1:C8:97:59:87:C1:A8:5F:22:C4:38:AC:27:D6:16:3D:ED:13
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       5A9A4AEE3A3D8F5BBDE488AB00A6CE6FADB82EAD
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 07 Mar 2025 14:41:01 +0000
ROA not before:           Fri 07 Mar 2025 14:36:01 +0000
ROA not after:            Fri 06 Mar 2026 14:41:01 +0000
asID:                     265485
IP address blocks:        168.197.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9a:4a:ee:3a:3d:8f:5b:bd:e4:88:ab:00:a6:ce:6f:ad:b8:2e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Mar  7 14:36:01 2025 GMT
            Not After : Mar  6 14:41:01 2026 GMT
        Subject: CN=1C14B1C8975987C1A85F22C438AC27D6163DED13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:0b:56:f2:15:e3:24:98:a4:3b:a1:dd:85:
                    20:13:d9:22:38:da:50:78:d3:d6:df:9e:c2:23:90:
                    f1:22:b9:ad:b0:74:40:25:c1:3a:02:9d:d9:65:b5:
                    33:05:25:57:fd:aa:fa:b4:ad:ab:64:83:d8:8a:f9:
                    d1:40:d4:e7:ed:ff:82:3b:b7:73:80:e5:77:ec:9e:
                    11:2d:06:29:06:67:d2:e9:15:7d:e4:11:52:59:b4:
                    05:ae:f1:8d:dd:1d:2e:eb:02:3a:53:06:58:74:44:
                    0a:9d:a3:0e:2b:32:70:ca:6c:94:47:c5:e4:33:d2:
                    e5:cd:a6:23:19:a5:82:cd:ca:da:5f:fc:c0:6c:e2:
                    31:9f:f6:7e:f8:29:f0:92:8c:e1:ed:e0:54:3c:55:
                    da:95:2d:11:86:7b:1f:35:ec:c1:08:cd:d6:ec:67:
                    70:4e:f1:ce:6f:07:ec:06:bf:d2:43:ef:72:7f:2e:
                    46:59:99:c5:95:71:ff:ce:8f:ac:98:02:7c:89:a4:
                    59:1c:56:fc:f7:16:6f:0d:04:b3:f9:9e:a9:6f:24:
                    9a:74:9a:c6:d2:0e:54:de:55:f6:e3:a1:37:29:cb:
                    44:0d:95:f5:5f:2e:6d:c4:ed:2e:d6:8e:64:fc:eb:
                    dc:06:bd:58:09:29:c1:65:ee:f2:0d:70:b5:fa:45:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:B1:C8:97:59:87:C1:A8:5F:22:C4:38:AC:27:D6:16:3D:ED:13
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:43:79:95:2c:d4:7d:f1:da:fa:2f:c2:8c:9b:cf:bd:ca:98:
         8f:ac:ed:97:4f:16:01:59:73:81:22:0b:35:32:8a:0b:55:76:
         5e:7f:3d:e1:03:b2:03:7d:1a:97:98:4f:ea:b8:fb:24:16:1d:
         7c:cc:f6:33:74:3d:20:67:e7:a9:90:5d:e1:54:a6:26:2b:b4:
         84:52:5f:73:2d:87:d0:df:54:b0:1a:3e:64:ee:5e:eb:92:05:
         ed:6b:c8:38:74:01:ae:2c:85:2a:46:a7:14:79:ac:52:88:a1:
         92:08:1a:e1:1f:ca:19:ff:11:c3:a8:33:cb:27:29:59:c4:c5:
         ab:eb:76:3e:61:36:d7:26:f0:b5:98:ee:be:18:66:88:01:29:
         13:fc:41:f6:d7:7c:e7:64:73:e0:3e:da:d0:fe:4b:02:31:58:
         2c:ab:72:6d:39:6f:0b:05:73:cf:de:79:23:b7:4d:4d:9e:ce:
         b6:85:43:94:08:5a:db:db:d8:c7:ad:1d:c6:7b:9f:5e:69:e4:
         84:e9:9d:68:c4:39:9e:27:3c:f5:88:1f:c5:de:4f:c1:38:b0:
         4b:cd:54:74:ec:f5:04:42:02:1b:b7:18:99:ae:8a:4a:4e:1f:
         2f:ec:07:59:a0:59:0a:a8:a2:f7:f0:1a:4b:36:c3:6e:1c:9c:
         e7:81:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:44 2025 by rpki-client