Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
File:                     3137392e3130372e302e302f32312d3234203d3e203533313433.roa (raw, json)
Hash identifier:          XPYDvz906nTkKUSVrsIOIIm2XLvwHfpZdeGJ5P869q8=
Subject key identifier:   C7:68:CE:38:FD:0A:37:13:C7:A3:FA:49:86:2F:9E:F2:86:AD:37:C9
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       284672ED3A266D9A5BE80D2E6E964E194B3DEBD9
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
Signing time:             Mon 10 Feb 2025 14:30:53 +0000
ROA not before:           Mon 10 Feb 2025 14:25:53 +0000
ROA not after:            Mon 09 Feb 2026 14:30:53 +0000
asID:                     53143
IP address blocks:        179.107.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:46:72:ed:3a:26:6d:9a:5b:e8:0d:2e:6e:96:4e:19:4b:3d:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:25:53 2025 GMT
            Not After : Feb  9 14:30:53 2026 GMT
        Subject: CN=C768CE38FD0A3713C7A3FA49862F9EF286AD37C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:00:c2:68:5d:c2:82:40:b1:d8:e8:74:72:
                    70:14:30:00:94:dc:b0:29:bd:59:ad:11:6d:8e:71:
                    d6:7e:ea:fa:fa:58:1e:c3:70:84:39:c8:27:c9:b1:
                    c9:63:0f:4c:67:3b:5d:76:02:cf:46:83:28:e6:61:
                    b5:52:a1:22:4b:70:73:b9:aa:33:ab:99:59:06:1d:
                    26:56:17:b0:da:79:68:2a:1f:25:22:9f:17:15:dd:
                    b6:72:c9:e7:d3:80:f8:29:e5:23:f5:91:e1:87:54:
                    18:f1:7c:f5:1a:e7:be:0a:f1:e3:f3:fa:51:ea:29:
                    ec:9f:7e:9e:ea:23:36:83:1d:e5:a0:d9:80:68:1d:
                    e4:ac:cd:c6:12:c2:2c:56:15:83:5b:dc:96:b5:68:
                    a8:8b:5b:b6:83:77:3b:28:4a:a2:18:16:c6:5e:ab:
                    5c:f2:8d:b4:6c:38:62:06:7c:b0:36:2a:06:56:3a:
                    39:c4:f3:b7:79:89:5b:b2:c1:95:54:4c:6f:0f:da:
                    bb:d1:2c:94:7b:1e:6f:fb:d0:5f:a7:e9:4b:e2:0f:
                    cd:e4:2a:52:a5:28:1b:a2:5a:f1:e4:f6:ab:d5:44:
                    d5:10:f6:7a:38:18:8a:ec:c1:03:90:04:40:e6:dc:
                    ed:70:03:db:75:4e:9b:d9:8b:6b:19:40:cb:27:8b:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:CE:38:FD:0A:37:13:C7:A3:FA:49:86:2F:9E:F2:86:AD:37:C9
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137392e3130372e302e302f32312d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:3b:6a:fe:48:64:a6:bd:83:16:58:00:e2:a5:dd:e7:a5:
         77:f1:15:8d:1d:a5:a4:58:61:85:be:7b:26:f6:33:f1:5d:71:
         d4:77:fa:77:2a:a6:e6:d3:79:76:21:e4:20:02:48:75:de:ee:
         8d:dd:f2:ab:04:46:8f:fa:70:d6:53:ad:6a:38:ac:bb:f2:23:
         c4:f9:92:f9:e6:30:60:64:0b:d4:86:79:37:4f:ab:a7:eb:ca:
         60:1c:f1:57:7d:0f:e1:10:18:d7:8f:a2:eb:83:0f:5c:b7:4e:
         47:72:84:0d:3e:1e:d1:f6:d4:32:25:85:39:7f:23:1a:c9:b8:
         3d:a4:fb:6e:27:65:44:4f:09:57:9d:ec:71:c0:fd:0c:ea:c6:
         2e:08:90:5c:c9:f9:4b:38:3b:e3:b6:a2:46:49:ff:b0:ba:0e:
         96:fe:45:fd:c7:3c:06:7c:bc:63:82:71:68:e4:48:d6:0b:84:
         3b:b0:33:73:92:13:79:6c:cc:fd:bc:e1:97:3c:1e:9c:fb:a8:
         d6:66:6e:08:8c:13:1b:df:f8:68:ad:42:02:fc:ca:f4:f7:27:
         a4:e1:c1:c7:c3:ba:ea:76:c7:f1:f2:22:cc:3f:0e:cf:83:e8:
         7c:de:6b:70:6b:49:5b:02:d8:62:69:4f:7a:0e:3f:d1:ec:4e:
         de:b4:6d:16
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKEZy7TombZpb6A0ubpZOGUs969kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDI1NTNaFw0yNjAyMDkxNDMwNTNaMDMxMTAvBgNV
BAMTKEM3NjhDRTM4RkQwQTM3MTNDN0EzRkE0OTg2MkY5RUYyODZBRDM3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXowDCaF3CgkCx2Oh0cnAUMACU
3LApvVmtEW2OcdZ+6vr6WB7DcIQ5yCfJscljD0xnO112As9GgyjmYbVSoSJLcHO5
qjOrmVkGHSZWF7DaeWgqHyUinxcV3bZyyefTgPgp5SP1keGHVBjxfPUa574K8ePz
+lHqKeyffp7qIzaDHeWg2YBoHeSszcYSwixWFYNb3Ja1aKiLW7aDdzsoSqIYFsZe
q1zyjbRsOGIGfLA2KgZWOjnE87d5iVuywZVUTG8P2rvRLJR7Hm/70F+n6UviD83k
KlKlKBuiWvHk9qvVRNUQ9no4GIrswQOQBEDm3O1wA9t1TpvZi2sZQMsni1+lAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUx2jOOP0KNxPHo/pJhi+e8oatN8kwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzNzM5MmUzMTMwMzcyZTMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMzMx
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7NrADANBgkqhkiG9w0BAQsFAAOCAQEAhD47av5IZKa9
gxZYAOKl3eeld/EVjR2lpFhhhb57JvYz8V1x1Hf6dyqm5tN5diHkIAJIdd7ujd3y
qwRGj/pw1lOtajisu/IjxPmS+eYwYGQL1IZ5N0+rp+vKYBzxV30P4RAY14+i64MP
XLdOR3KEDT4e0fbUMiWFOX8jGsm4PaT7bidlRE8JV53sccD9DOrGLgiQXMn5Szg7
47aiRkn/sLoOlv5F/cc8Bny8Y4JxaORI1guEO7Azc5ITeWzM/bzhlzwenPuo1mZu
CIwTG9/4aK1CAvzK9PcnpOHBx8O66nbH8fIizD8Oz4PofN5rcGtJWwLYYmlPeg4/
0exO3rRtFg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:33 2025 by rpki-client