Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          c9F+zloqk/Jgr6T7heH7nfbvm6FYwYNFbAK3ADDutrk=
Subject key identifier:   AC:41:67:E4:A2:A5:64:58:87:A9:8B:F1:22:F4:10:5A:44:D9:50:0F
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       75A5E7853ABA1EB621106A0BDAB5D1BC11478ABA
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     265379
IP address blocks:        168.194.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a5:e7:85:3a:ba:1e:b6:21:10:6a:0b:da:b5:d1:bc:11:47:8a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject: CN=AC4167E4A2A5645887A98BF122F4105A44D9500F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:1f:a4:05:24:20:4d:2e:86:2a:0f:5b:59:
                    d9:97:39:cf:5f:3c:39:d5:bf:e9:e8:c2:15:20:9b:
                    e4:fe:b1:f5:c4:15:f8:d9:c4:a5:90:b7:cd:e6:bc:
                    56:1c:db:bf:46:b0:24:21:46:83:f1:79:0f:1b:11:
                    af:a9:62:b5:38:94:d7:d4:d9:c9:dd:65:89:47:e3:
                    38:bf:1b:00:e2:93:03:5d:51:ce:d4:df:61:1b:a7:
                    d6:83:2a:c3:b3:b3:33:72:5a:b1:9d:76:d9:e1:e8:
                    b9:69:76:ce:74:68:dc:1f:22:1b:ea:2e:dd:f1:ee:
                    9b:10:af:bf:77:88:a7:d5:30:84:c4:50:74:6c:23:
                    54:c0:e9:2b:83:e1:40:4c:28:f2:37:8f:c5:bb:76:
                    c3:47:1a:09:02:6a:b3:8d:91:64:fd:bb:1e:ba:55:
                    01:23:57:4c:28:21:5f:49:d0:8a:06:38:2c:7c:63:
                    34:49:35:73:bc:35:58:13:3b:f7:bd:a0:a8:70:c0:
                    7c:8d:b9:65:56:e5:c6:6e:88:30:25:86:8d:65:4a:
                    45:5c:05:25:7f:36:13:f6:c0:a8:5f:38:28:9b:5b:
                    86:61:e4:59:7d:85:13:a2:d8:e1:59:c0:e7:fb:da:
                    e0:0d:ca:c1:d7:96:1e:a1:ac:19:be:19:f3:6c:2a:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:67:E4:A2:A5:64:58:87:A9:8B:F1:22:F4:10:5A:44:D9:50:0F
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:e1:fa:b8:95:d4:2c:88:86:64:22:46:62:97:5a:9a:77:
         b4:e9:11:3e:5d:f9:33:e2:1d:0e:89:5e:1b:02:62:da:63:a6:
         07:4e:7e:cf:11:6b:c4:1a:8b:64:75:30:e8:39:b6:8c:28:d0:
         13:26:1f:10:71:27:5a:fd:2d:b5:34:ba:3d:af:ec:9d:68:75:
         d5:77:2a:46:eb:5f:54:51:da:e5:76:24:d7:0d:a6:25:94:78:
         7f:b1:22:ae:fd:3e:69:1a:b7:1b:fc:90:c6:48:18:1d:2b:a6:
         90:75:72:e7:19:61:64:a1:90:c7:63:a2:bc:54:7e:79:34:32:
         c5:68:02:92:82:be:1a:e1:f3:2d:85:96:c4:bc:18:bc:bc:81:
         2e:b0:37:da:e8:de:2d:b5:1f:bd:3c:0c:24:ee:0c:4e:4d:8e:
         1c:4b:8e:b2:59:69:01:27:97:00:96:ba:16:9e:5a:70:70:3a:
         88:79:e1:bc:df:71:16:dc:19:21:92:7e:f9:4f:8e:59:d9:d2:
         b7:1d:aa:cb:72:dd:92:d5:be:4a:9b:48:24:ca:c6:2d:65:10:
         a2:27:29:da:45:4c:dd:b8:5e:94:10:99:a7:3d:95:df:53:d0:
         bb:2a:61:27:cd:58:4f:8f:f2:11:64:df:b3:99:42:56:03:8e:
         96:7a:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:38 2025 by rpki-client