Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          VEMuGTU1XcAerA67tBBVbrd5MGanoFApgdQ1K0Xygag=
Subject key identifier:   1C:D2:44:F0:27:74:82:3A:38:45:52:6B:08:0A:26:42:05:05:70:13
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       15AFE8DB4876D2AA1CA56BDFE0628976A3BF72B2
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 13 Jul 2024 14:04:29 +0000
ROA not before:           Sat 13 Jul 2024 13:59:29 +0000
ROA not after:            Sat 12 Jul 2025 14:04:29 +0000
asID:                     262507
IP address blocks:        177.55.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 01:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:af:e8:db:48:76:d2:aa:1c:a5:6b:df:e0:62:89:76:a3:bf:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jul 13 13:59:29 2024 GMT
            Not After : Jul 12 14:04:29 2025 GMT
        Subject: CN=1CD244F02774823A3845526B080A264205057013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:53:1e:d0:12:43:d2:39:60:0d:92:20:01:
                    dc:ac:34:d4:a6:3f:49:3c:65:d7:67:93:24:4a:8d:
                    bf:c8:d6:1c:fd:86:13:a1:59:d8:8c:3c:6b:3c:fa:
                    ac:87:8d:7f:35:a4:90:46:d0:e7:22:8e:5e:a7:03:
                    23:8f:fd:8d:14:31:af:8a:fe:8f:b7:f1:80:52:11:
                    4b:00:cc:1d:d0:79:f1:3a:54:64:92:c7:3a:0d:73:
                    b5:f9:14:77:dc:f3:cb:58:f1:17:bc:56:cd:76:0a:
                    4b:43:1a:a3:3d:f7:e3:4e:15:65:1f:6c:59:59:22:
                    bc:12:46:6d:a7:48:6d:92:59:0a:5b:c0:03:f6:ad:
                    c8:b0:83:37:1c:7a:81:09:f5:8a:6b:40:61:64:b5:
                    71:d4:f5:5d:dd:78:91:67:f8:37:33:98:0d:f4:4d:
                    2d:ec:0f:c7:8e:2e:2a:d8:05:0f:ca:1b:07:f5:2e:
                    5a:71:e0:47:de:20:0f:0b:e4:f3:36:07:10:6e:88:
                    00:3d:12:3f:0a:b4:d5:70:ee:88:54:75:49:5d:25:
                    bf:02:82:65:10:3d:ed:df:87:a0:a5:95:1c:2d:4c:
                    77:e8:48:2a:ac:5e:a5:df:ae:db:94:6b:56:8a:f7:
                    3d:c2:67:49:cb:fe:22:76:09:96:3b:ef:e3:08:31:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:44:F0:27:74:82:3A:38:45:52:6B:08:0A:26:42:05:05:70:13
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:20:38:f4:d4:06:4d:62:f4:81:cf:6a:f5:7c:49:e2:c7:09:
         59:70:98:30:70:00:1b:5a:02:ee:6b:ea:2f:a3:c0:b7:e0:3e:
         c5:be:0d:4c:5c:92:d6:a5:69:4d:b2:f1:6b:69:84:55:89:0e:
         43:80:c6:c2:62:c9:80:33:67:7d:f6:84:45:e2:83:71:33:fc:
         1c:0c:7e:95:fd:af:b2:fe:61:9e:fc:16:0b:6d:a7:c1:7f:7f:
         e9:ec:9e:ea:29:c3:89:d2:2f:14:dc:7d:03:be:a3:98:24:45:
         98:38:9e:21:70:84:af:b8:6f:fc:f6:63:c3:6e:9d:02:7f:f8:
         80:32:8c:95:14:12:8b:35:07:d6:30:a0:88:1b:33:1b:49:62:
         d1:85:a4:90:df:f7:36:5f:7f:6e:a3:ec:66:1c:25:19:9f:14:
         f9:b5:d3:15:45:5d:ae:cd:8b:56:35:68:95:83:69:a0:32:93:
         ef:d7:6b:b9:91:f0:22:23:7d:e6:a8:22:47:ee:6c:08:9d:7f:
         45:f2:73:19:40:83:bc:c5:55:dc:ad:18:89:f7:9c:19:e6:44:
         c0:80:d9:4d:1c:90:7c:c9:bb:2b:63:5c:36:c9:2a:25:98:1d:
         89:f3:d9:6b:db:8d:77:43:ce:dd:ff:36:1f:6d:ff:bf:c7:10:
         cb:d5:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:01 2025 by rpki-client