Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          Q+6zb8/52SCseUccO/k8n9a/FXB90wWY4SheKioGF5I=
Subject key identifier:   A3:29:F4:E2:64:D3:A2:6C:DB:7F:01:05:46:CF:D0:2A:6A:0E:57:07
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       513371DF6CA812C15C0AF4CA1C167422F1CB11F2
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 26 Mar 2025 15:07:02 +0000
ROA not before:           Wed 26 Mar 2025 15:02:02 +0000
ROA not after:            Wed 25 Mar 2026 15:07:02 +0000
asID:                     266374
IP address blocks:        170.80.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:71:df:6c:a8:12:c1:5c:0a:f4:ca:1c:16:74:22:f1:cb:11:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar 26 15:02:02 2025 GMT
            Not After : Mar 25 15:07:02 2026 GMT
        Subject: CN=A329F4E264D3A26CDB7F010546CFD02A6A0E5707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:67:47:b9:5d:17:a5:dd:b1:6d:89:c3:d2:
                    ef:49:7f:0c:46:6c:5c:94:dc:c8:5b:e4:e9:27:f0:
                    88:1c:e1:d9:a1:fb:75:ba:4a:bc:e0:43:4b:58:f1:
                    46:3a:24:2f:e4:2b:74:85:d6:12:ba:02:a2:f1:20:
                    39:07:77:10:11:fb:67:a5:6f:2b:27:06:79:e2:31:
                    ab:2d:82:b4:d8:28:2e:42:39:60:ef:48:3e:fc:8f:
                    4a:5c:4b:6c:08:30:af:7b:d9:8a:6f:9b:bc:f6:8d:
                    ee:97:20:c0:64:68:24:41:bd:9d:ae:14:1c:16:63:
                    db:c9:0c:4d:82:3b:83:f1:d3:93:81:53:6a:22:b5:
                    25:31:61:3b:c3:51:3f:03:c1:33:0f:17:6e:73:ff:
                    08:56:49:7a:ec:cd:e5:a5:28:0f:f0:4e:bc:7b:46:
                    73:13:9a:38:8e:0e:fc:f5:c6:5f:16:0b:93:53:52:
                    42:21:58:78:fc:91:f7:de:4f:07:75:77:b0:7e:da:
                    03:c4:3b:08:bc:65:67:14:e9:52:ec:5b:36:97:d1:
                    8d:fd:4b:8c:f3:97:07:36:89:2d:58:2a:6d:e4:b4:
                    bc:3d:40:21:bc:ca:52:96:34:ed:a0:f0:00:f1:04:
                    43:04:23:c5:ab:a0:29:92:d5:91:65:d5:23:c7:f3:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:F4:E2:64:D3:A2:6C:DB:7F:01:05:46:CF:D0:2A:6A:0E:57:07
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:d8:cb:6a:f3:e8:f2:11:d8:fb:85:5d:d8:a5:16:a1:e7:
         6a:91:88:82:99:a8:20:30:69:71:47:b5:fb:90:9e:91:0f:a7:
         2a:65:7c:7f:6b:66:1f:17:92:60:00:c8:b6:29:23:c7:fb:59:
         6c:04:02:92:35:58:68:77:c2:c9:90:53:82:d6:aa:89:3d:b6:
         c0:0f:87:32:9f:db:39:fe:8f:98:6f:0a:99:bf:05:1e:2a:08:
         76:d0:46:e3:f7:f6:36:82:4b:5e:3f:8b:e1:01:de:0d:fd:4b:
         1b:fe:52:68:9b:46:a8:01:c4:fd:31:a9:45:6f:ef:2c:a3:88:
         d8:a5:01:c9:72:d9:38:4d:93:c7:10:fb:71:98:f7:fd:46:5e:
         4b:06:a4:49:9f:a8:4a:5b:98:e5:ca:f7:b9:a5:d7:a6:87:3f:
         ab:e2:28:61:00:05:dc:af:c6:2a:5c:a7:93:13:5b:b6:4a:1a:
         68:2a:3b:b7:54:6e:43:c0:a7:04:d4:42:68:0b:2b:c9:28:b8:
         2d:ad:fa:85:50:7e:7d:92:54:9e:71:b6:34:51:63:39:ad:06:
         9a:97:5e:83:b5:40:49:ea:cb:1c:c9:22:62:e0:f5:cb:a5:38:
         ff:c2:cc:c4:f7:5d:cc:5a:39:a3:3f:2e:51:f8:ef:94:cf:d7:
         b1:53:4b:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUTNx32yoEsFcCvTKHBZ0IvHLEfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NzA4MzIyNTcwRDA3Q0E0QkU3NUVGNDg0QjY4MzE2
NjRGRTg2NDAeFw0yNTAzMjYxNTAyMDJaFw0yNjAzMjUxNTA3MDJaMDMxMTAvBgNV
BAMTKEEzMjlGNEUyNjREM0EyNkNEQjdGMDEwNTQ2Q0ZEMDJBNkEwRTU3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6GdHuV0Xpd2xbYnD0u9JfwxG
bFyU3Mhb5Okn8Igc4dmh+3W6SrzgQ0tY8UY6JC/kK3SF1hK6AqLxIDkHdxAR+2el
bysnBnniMastgrTYKC5COWDvSD78j0pcS2wIMK972Ypvm7z2je6XIMBkaCRBvZ2u
FBwWY9vJDE2CO4Px05OBU2oitSUxYTvDUT8DwTMPF25z/whWSXrszeWlKA/wTrx7
RnMTmjiODvz1xl8WC5NTUkIhWHj8kffeTwd1d7B+2gPEOwi8ZWcU6VLsWzaX0Y39
S4zzlwc2iS1YKm3ktLw9QCG8ylKWNO2g8ADxBEMEI8WroCmS1ZFl1SPH8+ibAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoyn04mTTomzbfwEFRs/QKmoOVwcwHwYDVR0j
BBgwFoAUD5cIMiVw0HykvnXvSEtoMWZP6GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMS8wRjk3MDgzMjI1NzBEMDdDQTRCRTc1RUY0ODRCNjgzMTY2NEZFODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOTcwODMyMjU3MEQwN0NB
NEJFNzVFRjQ4NEI2ODMxNjY0RkU4NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1cU5vdkxOTU1TTlFja1RpeXpTSGlSVWg5R2VhUUMyenpxMWR1S3FGZFNTLzEv
MzEzNzMwMmUzODMwMmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlAzMA0GCSqGSIb3DQEBCwUAA4IBAQA4z9jLavPo
8hHY+4Vd2KUWoedqkYiCmaggMGlxR7X7kJ6RD6cqZXx/a2YfF5JgAMi2KSPH+1ls
BAKSNVhod8LJkFOC1qqJPbbAD4cyn9s5/o+YbwqZvwUeKgh20Ebj9/Y2gkteP4vh
Ad4N/Usb/lJom0aoAcT9MalFb+8so4jYpQHJctk4TZPHEPtxmPf9Rl5LBqRJn6hK
W5jlyve5pdemhz+r4ihhAAXcr8YqXKeTE1u2ShpoKju3VG5DwKcE1EJoCyvJKLgt
rfqFUH59klSecbY0UWM5rQaal16DtUBJ6sscySJi4PXLpTj/wszE913MWjmjPy5R
+O+Uz9exU0tQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:30 2025 by rpki-client