Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
File:                     3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          ZyMLVxBCpNonWLSQbRPG0YVKqtnFPE8jRm3gUFjB4Uw=
Subject key identifier:   91:85:90:04:1C:09:F2:6E:BB:82:7E:D8:D5:64:A6:C2:E5:B9:43:3F
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       3748F36C9D5C8D1AD3E9F23D522C5E36CDEE92F4
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
Signing time:             Mon 10 Feb 2025 14:30:49 +0000
ROA not before:           Mon 10 Feb 2025 14:25:49 +0000
ROA not after:            Mon 09 Feb 2026 14:30:49 +0000
asID:                     53143
IP address blocks:        168.195.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:f3:6c:9d:5c:8d:1a:d3:e9:f2:3d:52:2c:5e:36:cd:ee:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:25:49 2025 GMT
            Not After : Feb  9 14:30:49 2026 GMT
        Subject: CN=918590041C09F26EBB827ED8D564A6C2E5B9433F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:08:b8:45:a8:b7:54:b2:d1:ef:ad:c4:2d:
                    3b:96:7b:24:38:03:9c:c8:cf:58:a6:5f:c8:17:2a:
                    71:28:cd:3c:83:8e:66:51:83:35:79:a7:a4:12:51:
                    1b:10:ac:7e:6f:f2:54:80:d0:9b:27:31:de:6a:7d:
                    4a:8e:6c:cf:29:c3:75:54:b0:d9:26:ed:fb:e6:3a:
                    ef:86:9f:31:d0:2d:85:af:05:b4:ec:5c:11:42:3d:
                    9c:26:a3:41:16:a6:38:c6:7a:cd:85:a5:80:da:83:
                    e0:14:ec:b1:23:7a:e3:cf:c9:66:31:02:23:df:51:
                    5c:de:f4:4c:81:8e:e4:23:90:20:ed:4e:e5:02:4d:
                    bf:24:7f:95:a3:f0:36:a9:47:f3:d2:76:a9:1a:0a:
                    85:b0:b0:a1:80:fb:e8:3a:53:71:c1:c9:c2:19:04:
                    06:14:d7:ca:c7:f0:ab:95:2a:4d:78:b5:97:b7:b5:
                    a4:e8:0a:30:aa:61:60:ff:31:ed:cc:ce:97:da:ce:
                    5a:41:a1:33:5e:de:8d:78:19:a2:42:d7:0d:83:e0:
                    89:10:a2:12:a4:d0:ce:d1:1a:f4:26:ff:56:af:5b:
                    0b:28:e6:4d:0d:9d:e8:4d:62:2d:17:2c:16:bd:40:
                    75:b7:d9:7a:5a:f0:5a:a8:41:55:e7:55:f2:2b:85:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:85:90:04:1C:09:F2:6E:BB:82:7E:D8:D5:64:A6:C2:E5:B9:43:3F
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:34:24:c6:d0:e2:60:64:f1:28:24:1e:f7:f4:5f:df:9e:
         b9:c2:1a:2d:e1:da:bd:1e:7c:a2:c5:9f:44:5f:70:49:17:8a:
         94:b8:2b:7f:35:a2:8a:d5:03:c8:5c:21:48:f7:d0:3a:72:d9:
         c2:16:64:6f:b0:0e:b2:5c:a9:d8:f7:09:e9:3c:95:d4:83:ce:
         71:bc:26:6b:49:0f:7b:94:7b:8c:ba:7d:9d:83:5c:69:5e:53:
         b2:5b:d0:0a:8d:cc:f1:b0:7f:f9:79:66:3a:37:d8:e0:5b:2e:
         28:ff:6f:a8:48:c5:da:84:76:6a:c2:24:d3:f1:32:0e:a7:0b:
         60:96:81:a3:b1:ee:ae:aa:f7:13:5c:6b:0c:31:12:f0:c5:3d:
         68:a3:0b:23:9e:f1:dc:25:ce:07:63:55:de:06:b0:2f:5b:b7:
         8f:ce:46:08:cd:89:48:d9:26:1e:25:d8:7c:e8:b8:1b:5a:c6:
         41:42:17:70:bf:08:77:d4:e1:af:8b:3a:5a:fe:e7:a1:7b:ce:
         e0:24:f9:db:b2:69:fc:0c:5a:af:5f:10:27:21:64:1d:ba:b8:
         6b:27:3e:6d:dd:5f:93:60:98:46:cf:3f:22:b0:b3:59:0f:f5:
         d1:5e:59:7c:2a:8e:ab:66:c0:21:2f:60:27:96:80:9a:01:91:
         fb:45:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:28 2025 by rpki-client