Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa
File:                     3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          gs/crYWgPi35x+cAVuqVfMkTbVcaBzgTkQ1gkjd2O+o=
Subject key identifier:   28:AA:2A:CF:50:A6:E3:AC:B7:7F:EF:A2:28:92:21:F7:87:CA:64:28
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       0471393A2F6AE8BF430EB78E6448F2B76E0B5F4E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa
Signing time:             Mon 10 Feb 2025 14:34:14 +0000
ROA not before:           Mon 10 Feb 2025 14:29:14 +0000
ROA not after:            Mon 09 Feb 2026 14:34:14 +0000
asID:                     267484
IP address blocks:        187.85.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:39:3a:2f:6a:e8:bf:43:0e:b7:8e:64:48:f2:b7:6e:0b:5f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:29:14 2025 GMT
            Not After : Feb  9 14:34:14 2026 GMT
        Subject: CN=28AA2ACF50A6E3ACB77FEFA2289221F787CA6428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:10:12:78:22:ee:b7:73:ca:8c:5c:aa:d6:
                    a8:6d:0e:2a:51:ec:4b:d8:a8:40:16:a7:81:4c:e0:
                    e4:1c:12:3a:6f:fc:8e:e7:27:f6:b3:9d:be:9f:1a:
                    d0:79:b1:2a:6a:4d:b0:35:e7:ab:22:44:ff:c5:2d:
                    76:ca:5f:e0:3d:43:e2:33:59:59:70:30:00:7b:1f:
                    21:c7:1b:6c:e2:ee:b7:7f:6d:0e:fa:58:13:f4:a2:
                    c6:6c:1d:81:72:92:6e:e7:c1:18:5a:b1:1d:0c:0c:
                    36:a1:b0:38:0c:f0:67:1b:43:4a:43:62:fc:b2:46:
                    2d:3e:b6:da:d4:f8:91:4b:98:5e:b8:b7:b9:ec:a3:
                    e8:27:17:d2:db:ca:5d:52:92:f1:87:fe:41:a5:ea:
                    97:78:00:5d:e7:a6:b5:9d:da:d3:f1:a0:fe:cb:9b:
                    79:21:63:ee:04:28:86:97:b8:72:52:62:33:d4:2c:
                    2c:9c:55:a7:d9:0e:7a:c0:47:e5:24:57:3b:ed:e2:
                    5a:d6:00:fa:48:0f:71:1b:02:f0:57:38:da:f5:8e:
                    9d:ae:a5:36:75:00:d0:a5:64:51:82:a8:f6:b1:e8:
                    6e:53:06:69:49:c1:54:12:55:91:a1:08:7b:7d:c8:
                    25:34:14:bb:c5:85:60:c6:72:da:ec:79:c3:b9:52:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AA:2A:CF:50:A6:E3:AC:B7:7F:EF:A2:28:92:21:F7:87:CA:64:28
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:d3:f6:16:3f:ff:7d:a7:ab:49:13:a5:02:16:20:8e:12:
         2b:d1:d7:e5:3a:cc:14:f3:d6:9e:71:e9:f7:91:1a:87:d1:8e:
         a3:3c:75:7c:63:74:24:5c:5f:40:ca:fc:f6:4e:8c:ea:bc:05:
         a6:70:b2:b7:45:9e:10:1f:79:e0:d5:ab:dd:06:91:c5:8f:de:
         24:82:31:c2:9f:a3:93:b7:05:f2:cd:26:2d:ad:f2:3f:fc:ac:
         21:d7:dd:77:7c:76:f1:0a:a4:ce:41:d0:c6:af:e3:9e:61:62:
         ef:a4:91:90:92:a1:8b:df:8c:f8:9e:97:41:29:e6:03:06:47:
         a5:2a:15:fb:09:e7:78:41:dc:c3:cc:70:76:ca:cd:e6:b8:f7:
         7a:6e:cb:ce:0a:a9:18:d4:54:f1:60:56:98:9e:9f:26:46:34:
         02:45:ff:18:f2:d5:e6:01:9f:ca:44:98:c6:76:af:c7:47:88:
         bd:80:9f:89:d1:de:75:f8:e4:89:3b:0c:8e:ec:26:e4:6d:0d:
         cb:7c:63:8e:99:f9:a0:11:ea:68:5f:81:78:e0:e7:1e:ca:86:
         fc:96:ec:60:75:26:40:22:8e:d9:a0:28:ff:83:3c:35:06:2c:
         54:89:c5:e2:4c:4d:70:ed:86:f9:ee:fe:31:1c:bb:a8:50:0f:
         29:03:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:33:56 2025 by rpki-client