Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          c1yykIYYGfqIH2ukP5dF4qg6WKVzBaMGh91D7zsh5rM=
Subject key identifier:   AF:B6:48:64:C1:21:55:E6:CA:23:1E:0A:55:18:E4:84:93:C2:28:C8
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       60970827285F42C7B40AB1B0298038FAECC3561F
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     265379
IP address blocks:        168.194.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:97:08:27:28:5f:42:c7:b4:0a:b1:b0:29:80:38:fa:ec:c3:56:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=AFB64864C12155E6CA231E0A5518E48493C228C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:13:98:ec:df:bc:69:a2:06:ad:b0:02:ef:
                    37:dd:47:cd:82:5e:ca:61:53:55:e4:00:3b:4f:5d:
                    f0:69:19:b2:57:63:9f:c1:8d:3b:f8:ee:f5:ea:0d:
                    08:06:af:67:24:b7:ad:ab:ef:3c:b4:16:88:ad:65:
                    ab:93:7a:37:c2:e8:43:10:27:c7:f3:0f:07:19:c6:
                    1e:be:22:11:12:c5:86:76:87:e1:82:43:3d:b2:23:
                    91:ea:41:12:c5:06:3e:0d:fe:8b:15:a9:74:ae:9b:
                    98:9c:52:a0:bc:87:ac:c3:6d:02:64:3a:ca:34:43:
                    ac:e2:10:9b:16:fd:5d:d4:a6:44:71:61:93:32:bc:
                    1b:f4:9b:90:9f:41:b9:db:d4:c2:ea:97:be:d1:f9:
                    ba:25:a3:f3:d0:7d:83:a6:a8:ba:ee:f3:fc:8a:dc:
                    b7:9e:ba:e2:7e:f2:4a:27:2c:b5:34:9a:7e:8d:62:
                    5a:e6:87:91:f2:ad:2f:80:3a:40:cc:1e:8f:a7:b4:
                    e3:fb:78:76:8a:3a:39:bf:6a:53:c0:3f:98:9f:09:
                    c0:53:77:7c:51:81:6d:63:61:02:89:32:9a:2f:87:
                    7a:9c:6c:ed:9e:ef:51:7f:dc:ef:c3:c8:f7:4c:81:
                    dc:cd:c1:00:6f:3e:f1:8a:5d:b2:a8:ea:a4:b0:93:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B6:48:64:C1:21:55:E6:CA:23:1E:0A:55:18:E4:84:93:C2:28:C8
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:67:6b:34:d0:e7:ff:f8:2f:35:2b:1a:65:7a:00:f7:d8:09:
         6b:f3:9f:6b:3c:d5:32:bb:2f:0d:76:7b:85:27:7d:f4:69:fe:
         6e:90:e8:02:1a:bf:95:14:78:88:22:0f:a5:23:4c:5a:30:2f:
         39:c1:5b:44:a9:d8:8d:64:dd:ed:cb:d7:0e:2b:0b:91:d0:6d:
         a3:be:de:6a:cf:28:c3:f3:34:7d:a3:51:4a:6b:c8:dd:16:0b:
         37:5e:77:10:e8:a4:c8:59:81:b3:d1:57:71:1e:9b:cf:df:c2:
         d0:2a:28:de:22:61:ab:15:f6:0d:e2:7a:11:29:a1:c5:3d:f2:
         ab:fb:50:8e:06:53:0e:cc:b5:0c:cf:7f:fc:61:d5:be:c7:f3:
         24:a9:71:1d:a3:04:d4:70:b5:b3:ec:db:1e:12:bd:fa:cc:28:
         d3:cf:ce:a4:a2:e7:f1:05:67:d6:b7:d4:b1:42:97:88:02:7f:
         fd:98:69:77:0c:af:9f:04:1e:9c:33:8e:fd:9a:ee:a2:40:9c:
         87:57:db:c0:af:dc:e3:97:09:31:1d:4f:c3:a7:74:d6:e9:80:
         63:4a:8d:ea:47:34:0c:4a:bb:ba:d4:df:dc:10:f1:17:a5:44:
         ab:0f:bc:a9:a6:85:ca:38:71:ad:f7:cb:de:ea:54:91:68:2c:
         99:7a:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:32 2025 by rpki-client