Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa
File:                     3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          EcXWstYuOkvI8R9bRIhjyJabRzW/gwLCOnfTJhlAJ5E=
Subject key identifier:   CF:20:44:15:E2:EF:AF:91:B1:57:C3:87:94:75:D1:5A:04:76:8E:65
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       062536AED86F51B20D6BAB7C4CE0493431625C3A
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa
Signing time:             Sat 13 Jul 2024 00:39:28 +0000
ROA not before:           Sat 13 Jul 2024 00:34:28 +0000
ROA not after:            Sat 12 Jul 2025 00:39:28 +0000
asID:                     262507
IP address blocks:        177.55.165.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:25:36:ae:d8:6f:51:b2:0d:6b:ab:7c:4c:e0:49:34:31:62:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jul 13 00:34:28 2024 GMT
            Not After : Jul 12 00:39:28 2025 GMT
        Subject: CN=CF204415E2EFAF91B157C3879475D15A04768E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:43:18:ba:d8:e0:d5:6c:8c:c7:aa:c2:23:
                    ee:cd:c0:6a:ea:d0:44:04:e3:7e:b1:22:fe:ce:81:
                    7c:94:9b:6c:4f:8b:30:7b:74:93:99:6b:ee:d6:8d:
                    97:e4:fe:c9:54:f4:17:c1:20:30:0a:3d:e0:d1:d9:
                    2c:d5:b8:0b:9f:50:7a:f8:30:77:12:91:d3:47:6b:
                    33:96:eb:80:89:95:ba:85:83:09:68:0f:c1:85:c9:
                    95:79:ff:b1:76:65:08:da:6c:fc:87:53:30:e3:43:
                    b8:03:7b:a7:e3:ce:56:62:c5:52:db:f2:c0:48:b3:
                    5b:82:a2:78:51:20:d3:d8:af:45:59:45:ca:ac:33:
                    26:15:42:7f:60:6a:fb:21:bd:aa:7e:1f:12:69:1c:
                    9d:c7:76:11:16:05:e4:87:cd:b0:81:99:10:a8:09:
                    a3:52:7e:e1:7d:df:f6:67:d6:52:45:54:65:5c:3e:
                    60:bd:a3:53:91:d4:aa:a2:8a:95:d9:d1:4d:73:62:
                    41:fa:05:1a:be:d5:7f:c6:99:e9:aa:a7:d9:e3:e2:
                    f2:65:54:3a:e9:ae:ad:66:da:d1:7b:3a:8b:3b:14:
                    da:c3:51:21:82:9d:a8:68:33:a6:4e:21:1e:26:5d:
                    b5:74:3b:5d:3e:14:97:9f:a8:23:43:75:54:84:5e:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:44:15:E2:EF:AF:91:B1:57:C3:87:94:75:D1:5A:04:76:8E:65
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:32:15:15:be:0c:e7:29:5e:1d:86:29:a1:2f:68:84:27:
         cf:06:c8:07:f5:ac:96:0c:57:d9:63:fe:f8:61:c7:d0:29:82:
         c1:92:e2:a9:6e:4b:14:85:df:e9:3f:77:e3:56:98:1e:80:3c:
         5f:31:4f:e4:e9:eb:88:4a:b9:c9:53:28:06:61:1c:8d:45:15:
         68:42:0f:a1:77:00:f2:74:54:aa:da:2c:64:5e:9a:f8:78:a2:
         af:73:f1:ea:bb:84:4d:22:e9:de:c5:34:1e:3e:4a:c6:d1:5b:
         9a:11:52:06:d6:2c:9e:0e:3d:c1:80:21:42:e9:01:02:67:5e:
         9e:cb:dd:e7:2a:74:4b:c5:97:e3:9f:c3:28:8a:dc:4e:30:32:
         e5:eb:19:06:92:b4:b7:82:ef:2f:e4:8f:4a:40:c9:94:fa:f8:
         24:9c:a8:0e:20:ee:5a:be:e7:fe:5e:90:10:87:24:01:bd:9d:
         55:8a:b6:27:de:1e:a3:c9:65:e7:17:cb:a1:b1:b0:70:5b:0f:
         32:95:e1:91:d4:39:c9:26:ff:7b:17:33:e9:27:82:e8:79:36:
         e0:ce:12:1e:9e:64:e6:60:fe:82:6a:7e:f3:7c:e0:24:d0:6d:
         89:31:fe:54:fb:ea:d8:05:b5:85:7f:be:26:19:f6:7c:d4:7e:
         01:34:a0:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBiU2rthvUbINa6t8TOBJNDFiXDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFDQkU4Mzc5NjRBMTgxMDEwRTVFQkNCQUJENzdFNzI3
RUJBMEE3MTAeFw0yNDA3MTMwMDM0MjhaFw0yNTA3MTIwMDM5MjhaMDMxMTAvBgNV
BAMTKENGMjA0NDE1RTJFRkFGOTFCMTU3QzM4Nzk0NzVEMTVBMDQ3NjhFNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI0MYutjg1WyMx6rCI+7NwGrq
0EQE436xIv7OgXyUm2xPizB7dJOZa+7WjZfk/slU9BfBIDAKPeDR2SzVuAufUHr4
MHcSkdNHazOW64CJlbqFgwloD8GFyZV5/7F2ZQjabPyHUzDjQ7gDe6fjzlZixVLb
8sBIs1uConhRINPYr0VZRcqsMyYVQn9gavshvap+HxJpHJ3HdhEWBeSHzbCBmRCo
CaNSfuF93/Zn1lJFVGVcPmC9o1OR1KqiipXZ0U1zYkH6BRq+1X/Gmemqp9nj4vJl
VDrprq1m2tF7Oos7FNrDUSGCnahoM6ZOIR4mXbV0O10+FJefqCNDdVSEXphpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzyBEFeLvr5GxV8OHlHXRWgR2jmUwHwYDVR0j
BBgwFoAU+svoN5ZKGBAQ5evLq9d+cn66CnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWhGNUZZcTNUaVJWWE1ORER6RUpwOW5FTEdETDFDdjdRVndoRjg2d1hS
QTUvMC9GQUNCRTgzNzk2NEExODEwMTBFNUVCQ0JBQkQ3N0U3MjdFQkEwQTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQ0JFODM3OTY0QTE4MTAx
MEU1RUJDQkFCRDc3RTcyN0VCQTBBNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVoRjVGWXEzVGlSVlhNTkREekVKcDluRUxHREwxQ3Y3UVZ3aEY4NndYUkE1LzAv
MzEzNzM3MmUzNTM1MmUzMTM2MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxN6UwDQYJKoZIhvcNAQELBQADggEBABUOMhUV
vgznKV4dhimhL2iEJ88GyAf1rJYMV9lj/vhhx9ApgsGS4qluSxSF3+k/d+NWmB6A
PF8xT+Tp64hKuclTKAZhHI1FFWhCD6F3APJ0VKraLGRemvh4oq9z8eq7hE0i6d7F
NB4+SsbRW5oRUgbWLJ4OPcGAIULpAQJnXp7L3ecqdEvFl+OfwyiK3E4wMuXrGQaS
tLeC7y/kj0pAyZT6+CScqA4g7lq+5/5ekBCHJAG9nVWKtifeHqPJZecXy6GxsHBb
DzKV4ZHUOckm/3sXM+knguh5NuDOEh6eZOZg/oJqfvN84CTQbYkx/lT76tgFtYV/
viYZ9nzUfgE0oHM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:50:03 2025 by rpki-client