Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          z2mnbm5RcPC+2dM4wRitdQyrDF6D+P+EhwkK2i2ifeM=
Subject key identifier:   63:56:5A:C4:AA:1B:88:D0:4D:7F:60:61:54:8F:2B:B1:AE:B8:BB:5A
Certificate issuer:       /CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
Certificate serial:       51FFCE8BFF6967E494DA3656507513A34AD279F0
Authority key identifier: 14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
Signing time:             Mon 10 Feb 2025 20:19:11 +0000
ROA not before:           Mon 10 Feb 2025 20:14:11 +0000
ROA not after:            Mon 09 Feb 2026 20:19:11 +0000
asID:                     270793
IP address blocks:        201.159.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:ce:8b:ff:69:67:e4:94:da:36:56:50:75:13:a3:4a:d2:79:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
        Validity
            Not Before: Feb 10 20:14:11 2025 GMT
            Not After : Feb  9 20:19:11 2026 GMT
        Subject: CN=63565AC4AA1B88D04D7F6061548F2BB1AEB8BB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:ae:49:a0:81:48:0f:c8:fe:42:cd:a5:81:
                    73:45:b3:1c:35:f4:a6:92:79:88:b6:56:bb:f5:e5:
                    db:37:0f:f0:de:74:d9:8b:e7:35:ba:01:3e:44:b6:
                    c1:38:fd:0e:6c:60:eb:05:5e:ca:35:3e:31:a2:6b:
                    b4:12:dc:db:53:35:c4:71:c0:c1:99:90:04:9b:c7:
                    73:80:62:a4:66:46:cb:9b:03:c6:c4:01:49:4e:81:
                    17:5d:52:e4:ba:28:93:a7:65:06:ec:fb:79:1a:b7:
                    98:cd:f6:a2:5d:25:e8:a6:e7:7a:44:4f:f6:32:44:
                    73:13:f0:45:2a:cf:67:5b:c7:c6:d0:a0:3a:b6:ca:
                    92:83:e1:09:31:a4:ea:0e:ca:ba:10:70:ee:d8:8f:
                    ec:d4:3f:e4:58:ec:56:1f:c2:40:f5:ac:02:88:cd:
                    77:ca:1a:d4:47:b7:f7:3a:1b:e6:27:ae:56:e6:c0:
                    10:40:01:7c:92:63:42:dd:f8:9f:7a:b4:03:e1:54:
                    5a:e3:88:94:a6:3c:25:35:63:52:cd:5f:dd:25:e4:
                    51:52:fa:86:32:d9:7f:6f:0a:b6:fd:c6:11:35:9e:
                    b4:66:e8:a2:ac:83:a3:74:e3:fb:3c:be:9a:ea:7f:
                    d4:1d:82:3b:fe:c2:54:3e:87:d8:db:e5:03:83:76:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:56:5A:C4:AA:1B:88:D0:4D:7F:60:61:54:8F:2B:B1:AE:B8:BB:5A
            X509v3 Authority Key Identifier:
                keyid:14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:60:f9:50:ac:fa:a6:32:26:df:1e:d5:8f:ed:41:a3:49:
         08:ea:bd:f3:18:6c:a2:e6:0a:76:2a:9a:ac:cb:e6:4c:98:25:
         13:35:c6:aa:7a:40:59:93:64:f3:ee:7a:49:41:f5:81:20:0e:
         94:8e:e4:0c:4d:b1:76:2f:28:eb:10:e2:a0:f5:08:6e:3d:26:
         8b:41:a4:4c:a1:c2:c5:7d:26:c5:d2:1a:4a:e4:c9:e3:ad:14:
         90:19:81:08:3f:19:07:27:15:7a:c6:55:2f:8e:0c:47:b2:89:
         53:ce:8b:42:48:db:ab:0e:ad:f4:26:dd:46:5d:c4:f9:36:8f:
         5e:5b:46:c7:db:8c:42:10:f5:27:3e:05:c4:39:e3:24:2f:0c:
         31:93:b5:ee:0f:4d:fe:85:63:bb:19:41:e5:54:77:d1:f2:99:
         e9:ef:00:5a:79:83:2d:70:99:7c:5d:71:be:4d:c6:da:a6:40:
         4c:46:3e:c9:57:da:9c:df:3b:55:28:d2:87:f7:35:05:56:e2:
         b4:f4:17:ed:c4:c9:dc:dd:2d:54:e2:d2:a1:02:1b:01:9f:8a:
         66:f0:7d:5c:0c:dc:93:c3:2e:8e:3d:a6:db:ac:a8:8d:e5:b8:
         9d:18:f2:8f:76:cd:2f:5b:43:07:c9:16:85:86:4e:44:c4:b4:
         25:f7:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:48 2025 by rpki-client