Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa
File:                     3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          XOxPcsXvoweHmhqdboYgcSsqyo6M2+4sEst/bw7u5Mo=
Subject key identifier:   FE:EE:A0:A3:EF:72:0E:4E:86:CB:CF:3A:F7:A1:90:57:3B:C2:19:02
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       459950493CA187F94B6A61E68D3537AAC7DA4292
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa
Signing time:             Mon 10 Feb 2025 14:34:03 +0000
ROA not before:           Mon 10 Feb 2025 14:29:03 +0000
ROA not after:            Mon 09 Feb 2026 14:34:03 +0000
asID:                     267484
IP address blocks:        187.85.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:99:50:49:3c:a1:87:f9:4b:6a:61:e6:8d:35:37:aa:c7:da:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:29:03 2025 GMT
            Not After : Feb  9 14:34:03 2026 GMT
        Subject: CN=FEEEA0A3EF720E4E86CBCF3AF7A190573BC21902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:5d:e9:74:eb:4b:d3:1b:cc:d2:a0:50:1f:
                    e9:2c:08:75:47:b8:34:13:18:12:0c:a3:02:5e:c9:
                    d1:d4:83:a0:e1:9c:37:e8:ea:cd:2a:2d:63:bf:7a:
                    5b:0b:d7:6f:91:0e:f6:1f:08:9a:a2:00:9f:b0:5d:
                    8a:e0:0f:15:9b:fa:0e:81:48:1c:2a:22:59:03:14:
                    87:b3:5b:5a:81:db:e0:67:78:e2:53:f7:6c:08:51:
                    f8:1e:d8:61:f1:57:5f:c7:57:ce:56:df:69:72:7b:
                    b2:4a:8b:bf:fe:43:76:ee:1f:8f:25:5d:f7:c4:76:
                    f8:60:03:67:13:be:8a:e4:51:20:a3:fd:23:64:e6:
                    1e:ef:36:bf:27:70:b0:3f:d1:0d:8a:22:e0:09:6c:
                    b9:f1:80:b3:13:ea:01:f9:ac:fc:37:f0:f0:12:ba:
                    f8:ef:6c:aa:5a:45:cc:d8:1e:a9:de:03:9f:5d:c4:
                    f9:f5:75:23:de:a7:02:10:b9:7d:c7:38:35:d7:54:
                    65:18:41:40:59:cc:b4:a7:e4:1c:fa:0a:5c:de:fb:
                    43:91:9a:04:56:8e:5b:bd:51:2c:f2:55:7d:b8:4c:
                    72:f5:d1:03:c0:de:0b:e7:5e:44:4b:12:30:cc:a7:
                    7a:df:9f:54:da:5c:e8:89:2b:d6:19:ba:bd:ac:4c:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:A0:A3:EF:72:0E:4E:86:CB:CF:3A:F7:A1:90:57:3B:C2:19:02
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:3f:5f:54:47:2d:6a:25:f4:31:08:27:67:6c:0b:37:9c:
         67:da:c6:8c:0e:19:b7:69:ed:c5:96:31:9f:44:37:ea:25:4f:
         20:87:19:63:a4:66:c8:38:f1:dd:ee:c3:40:23:45:4a:d2:f2:
         f8:08:b3:fd:bb:98:92:29:f4:7b:48:10:78:6e:cd:f5:14:85:
         ad:78:7d:9e:16:1a:6d:8c:dd:fa:4d:85:9d:8b:31:c4:44:39:
         be:af:eb:e0:56:9f:6b:01:10:3a:a3:83:02:04:a2:ca:d2:79:
         fc:cf:0f:0e:84:a8:dd:62:c1:11:2c:79:10:06:82:82:a9:3b:
         95:13:6f:f7:51:b7:5c:9e:2c:71:72:03:21:ea:8c:18:56:a2:
         8d:74:4f:78:65:8c:55:ab:98:c0:4a:55:14:34:78:7d:9d:5c:
         3a:73:3d:72:8c:bd:60:20:72:29:ac:4f:31:10:d1:0e:86:08:
         77:47:94:f6:81:b7:59:44:27:16:4e:90:a7:76:ae:c9:f9:8f:
         de:b2:8a:58:2c:82:b8:8c:63:ed:50:d3:b2:46:e9:44:e1:c5:
         8e:a2:31:60:12:72:8a:d7:b5:16:e9:0c:17:92:a6:c3:f8:4d:
         1c:9e:bd:a5:ab:df:fc:42:74:81:b2:a6:cd:08:a0:50:49:2f:
         00:ac:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:24:29 2025 by rpki-client