Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa
File:                     3133312e3130302e36382e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          F9vepIHmyxxt5f40hTx+8Dyqv5cKYNW8fKuW+oUgcsU=
Subject key identifier:   A1:8D:C9:AC:95:92:9C:15:38:BB:FF:AC:64:AB:F8:0B:BE:56:50:D3
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       02FB8FCBBCFA20F98AAC12F26981BCFD57CCB1BA
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa
Signing time:             Mon 10 Feb 2025 14:30:45 +0000
ROA not before:           Mon 10 Feb 2025 14:25:45 +0000
ROA not after:            Mon 09 Feb 2026 14:30:45 +0000
asID:                     53143
IP address blocks:        131.100.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:8f:cb:bc:fa:20:f9:8a:ac:12:f2:69:81:bc:fd:57:cc:b1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:25:45 2025 GMT
            Not After : Feb  9 14:30:45 2026 GMT
        Subject: CN=A18DC9AC95929C1538BBFFAC64ABF80BBE5650D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:fc:37:7c:b1:1d:c8:84:85:79:ff:39:23:
                    1c:01:90:ff:ad:3d:75:e7:56:3d:e5:b5:f0:34:8b:
                    00:7b:4d:b6:2a:b6:0c:5b:99:0d:36:24:85:db:e8:
                    c7:41:9e:61:a0:7f:8e:60:20:d5:36:52:f7:08:fe:
                    25:bb:2c:3f:65:b8:6f:8e:8c:8b:1a:a5:08:7a:aa:
                    68:70:86:21:2c:4d:8d:57:b0:f8:98:be:ab:72:e2:
                    2e:56:dc:3f:32:41:dc:fd:50:99:7f:dd:7d:1f:a9:
                    e4:6e:16:78:7c:d6:6b:cb:99:18:16:96:94:91:63:
                    79:ee:e9:24:23:09:48:e5:97:95:ed:0e:75:7e:d2:
                    51:e9:08:93:88:4d:71:97:07:57:93:60:6f:37:7a:
                    33:94:e2:a2:14:14:d4:d7:b2:48:24:70:14:e3:7d:
                    ee:9f:e2:8f:08:15:ae:42:91:05:cc:c3:33:c8:bd:
                    8e:a0:d8:48:ac:63:2a:84:26:e3:ad:a7:8e:08:56:
                    70:d0:64:7e:52:43:f6:90:7d:ab:cb:ad:ef:81:bb:
                    c0:a1:ac:de:42:08:ce:ea:52:5a:ee:4a:6a:22:3f:
                    d7:17:36:e9:3f:ce:c2:97:b1:e1:e6:e2:30:8a:ce:
                    d2:e0:95:76:46:8b:be:5c:d9:1e:17:7c:ec:58:54:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:C9:AC:95:92:9C:15:38:BB:FF:AC:64:AB:F8:0B:BE:56:50:D3
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:ce:be:aa:b2:f4:00:cd:29:5f:e1:36:f7:c3:76:9d:47:
         bf:c5:0f:76:bc:2c:a6:a2:6c:85:49:da:4e:da:62:db:64:39:
         05:5f:53:58:35:3a:37:3f:04:80:b5:a5:99:a8:89:d3:13:b8:
         22:da:29:f9:02:9c:4f:16:e6:12:d9:d4:14:60:39:38:72:8a:
         e1:ee:41:a8:55:4d:a2:bd:bb:04:39:df:3e:19:23:ff:91:7c:
         72:89:11:db:b2:69:9b:53:82:56:7b:d2:33:4d:b3:54:ce:47:
         63:d9:35:08:ef:c7:a6:7b:10:e8:2a:92:30:28:eb:9a:ef:09:
         b8:b2:54:3c:f7:5d:18:13:af:01:cb:5e:e0:53:0c:72:d7:34:
         bf:60:64:d0:1b:76:84:a3:27:3e:3d:38:59:49:cf:c2:a5:7d:
         65:67:86:41:73:ff:5a:94:48:cd:a0:40:c6:85:2e:ef:88:09:
         9e:bb:fc:26:94:9a:00:d4:81:ae:7b:f8:25:a1:f4:08:82:2f:
         1e:9c:56:7e:d0:84:26:6f:8b:3d:ca:bc:49:bf:ab:ad:25:47:
         27:60:3e:86:57:42:cd:0d:b2:ec:cb:82:c4:56:3b:7e:de:6d:
         d2:b0:8f:21:af:5e:66:ec:46:08:33:08:18:b7:6b:84:fa:67:
         69:fa:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:59 2025 by rpki-client