Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
File:                     3137302e302e3136302e302f32322d3234203d3e20323635303231.roa (raw, json)
Hash identifier:          Nf+wHkaoVEhqxWlG4QXQ+21G263T2YPZMwjYzPsSLLQ=
Subject key identifier:   A5:73:BD:2A:4E:2D:88:BF:10:F8:34:55:60:6D:02:23:CD:3B:87:6A
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       600E17D1C13E0EE10D68A5C4B75D4DAF5B366D5A
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
Signing time:             Mon 10 Feb 2025 14:32:07 +0000
ROA not before:           Mon 10 Feb 2025 14:27:07 +0000
ROA not after:            Mon 09 Feb 2026 14:32:07 +0000
asID:                     265021
IP address blocks:        170.0.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0e:17:d1:c1:3e:0e:e1:0d:68:a5:c4:b7:5d:4d:af:5b:36:6d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:27:07 2025 GMT
            Not After : Feb  9 14:32:07 2026 GMT
        Subject: CN=A573BD2A4E2D88BF10F83455606D0223CD3B876A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:2b:a1:2d:65:f9:74:ba:a3:3f:fd:e0:d8:
                    a2:65:79:bd:42:4b:5f:04:6a:fe:52:0c:f9:16:88:
                    22:39:6a:49:bc:31:10:bb:67:ca:8c:f4:01:69:8f:
                    dc:bd:39:a1:23:21:36:95:ea:f3:ac:06:81:15:2e:
                    5d:49:b1:ae:96:df:a0:85:29:a7:14:d5:43:58:71:
                    6a:71:79:38:ee:f4:27:eb:0f:c3:2d:cd:16:44:71:
                    60:b3:b2:5d:aa:11:4e:b9:0f:91:5d:42:77:f1:02:
                    65:10:bc:fc:1b:b8:55:f2:db:ba:c5:a3:89:ea:a8:
                    de:be:08:da:49:6e:7d:92:69:05:86:ee:76:60:d8:
                    64:66:b5:57:7d:2b:49:dc:45:3b:4e:da:ad:d6:c4:
                    7d:a6:c9:b5:ea:ab:c5:f1:1d:c0:0f:82:f9:3f:a7:
                    9e:dd:27:b0:64:e9:72:d7:7f:40:9c:de:bf:d9:f6:
                    bf:0a:93:09:d5:8b:70:a5:87:eb:2a:be:14:93:c1:
                    ed:1c:41:0b:90:3d:52:64:20:f5:85:22:83:47:25:
                    e0:ef:4f:0a:2a:26:37:3a:c1:14:e0:d8:d9:14:74:
                    d6:bb:d8:3d:5d:5c:be:d5:99:fa:f3:b9:49:a7:6f:
                    2a:8f:e0:6d:ca:b4:f0:1c:82:78:60:eb:ea:42:e9:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:BD:2A:4E:2D:88:BF:10:F8:34:55:60:6D:02:23:CD:3B:87:6A
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:83:8d:29:d0:2e:4b:92:cf:8f:2d:1c:68:d2:95:6e:64:99:
         26:61:ac:45:65:be:72:5c:0d:71:52:d3:79:9d:b2:e7:8e:d2:
         5a:d6:c1:b0:48:83:1e:da:15:d5:ba:c7:2c:d6:7a:39:d4:9f:
         8f:d5:36:32:3d:ce:d9:30:ff:b7:2a:9d:57:d3:6b:ac:5d:49:
         c9:4a:d1:a0:d3:16:88:0b:66:36:d2:40:f6:e0:bd:b4:91:7e:
         2e:15:35:6b:46:72:04:a7:b3:dc:96:6e:ec:e0:b6:51:b2:52:
         64:ac:90:ee:55:82:a4:02:60:af:be:9f:f8:8d:2a:3a:b4:58:
         09:d5:a9:01:3a:24:dc:6c:33:2d:d0:77:5a:8e:9f:c2:24:4a:
         92:22:0b:c3:62:13:df:06:8b:18:6e:35:60:12:c6:fc:41:98:
         4a:3e:4f:2c:74:83:4f:79:9d:b3:86:e2:a5:cb:af:e4:f1:03:
         bb:9b:bd:57:7c:53:87:35:e3:f0:80:14:91:e7:ff:6e:92:c0:
         c6:70:31:dc:b0:b2:d6:c6:21:f3:2a:4a:d7:37:ad:90:02:4f:
         96:a7:85:61:63:32:61:14:61:3c:05:b7:f4:e6:62:d7:6b:33:
         ec:a1:7a:e0:97:bf:00:ec:47:54:4e:90:a3:a7:af:70:9d:dc:
         3a:31:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:19:03 2025 by rpki-client