Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
File:                     3138372e38352e3232302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          JIZAR+LtGwfJSrM3xN0BQ244UlVCsc0oU1lRD7T8B7k=
Subject key identifier:   7D:22:F8:D1:F7:31:64:C0:6E:06:B1:AA:27:6A:93:64:D4:9F:61:9D
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       43A0AA79123E2F9AE7BFB06BA657C3D904B37D9F
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 10 Feb 2025 14:27:39 +0000
ROA not before:           Mon 10 Feb 2025 14:22:39 +0000
ROA not after:            Mon 09 Feb 2026 14:27:39 +0000
asID:                     28349
IP address blocks:        187.85.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:aa:79:12:3e:2f:9a:e7:bf:b0:6b:a6:57:c3:d9:04:b3:7d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:22:39 2025 GMT
            Not After : Feb  9 14:27:39 2026 GMT
        Subject: CN=7D22F8D1F73164C06E06B1AA276A9364D49F619D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:91:fa:c5:a6:83:b3:ad:53:b7:ff:af:18:8e:
                    24:47:89:8e:fb:74:8d:cc:e6:24:23:37:b7:84:91:
                    6d:93:21:42:7d:27:8a:e1:e8:86:68:89:70:fd:9a:
                    f5:eb:49:b8:4b:0c:ba:f3:f7:52:7d:51:54:5c:45:
                    3c:c0:6e:6c:43:40:0d:a9:36:8d:42:58:1a:03:5e:
                    ae:a5:5e:be:c7:9c:ed:e2:e8:76:c0:78:88:40:d0:
                    2e:b5:43:62:c5:b9:ef:dd:7a:68:83:dc:37:f6:0b:
                    ac:f7:05:32:e9:d6:0e:de:08:a0:64:37:0e:e6:cb:
                    12:3d:f2:26:d3:52:7a:2e:55:f8:c9:a9:63:23:82:
                    52:54:8c:fe:8f:82:9c:f8:ea:81:01:e8:1c:80:bd:
                    6b:51:8e:68:09:3f:f8:b5:b8:83:6d:c2:d6:35:47:
                    81:26:89:3b:aa:31:f3:b5:c3:8d:d3:82:12:48:57:
                    bb:d4:77:f9:2f:bb:e8:9b:9a:e4:a4:20:6c:4d:0e:
                    89:53:82:86:d1:1d:4b:d1:aa:d0:00:58:bb:d3:55:
                    4b:39:16:46:ad:e8:42:b2:e1:90:78:fc:d7:fc:23:
                    31:b6:37:49:34:4d:fc:03:5a:68:c0:ec:e3:41:cf:
                    cb:6d:14:0a:cc:da:f8:d3:46:f4:9b:4c:5d:e4:af:
                    5f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:22:F8:D1:F7:31:64:C0:6E:06:B1:AA:27:6A:93:64:D4:9F:61:9D
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:95:97:f5:29:8d:9b:e9:e1:af:ea:c2:9a:d0:6a:16:8b:02:
         d6:ea:59:5c:6c:86:7d:1b:3d:8c:85:9b:66:69:5d:f1:f2:23:
         12:29:4a:e0:34:b2:5a:1c:9e:ff:b1:1f:2a:b9:8b:20:3a:11:
         8b:94:14:0b:00:ed:fb:2c:e3:74:0d:ee:c3:c6:1f:dd:81:0e:
         69:26:2b:fb:6a:0e:c2:21:8f:59:b6:6f:a4:7b:3b:ef:c1:2f:
         f0:be:29:d7:83:31:66:57:0f:de:ea:6a:03:9a:85:54:25:8a:
         f5:4d:cb:ce:71:a2:cb:39:a7:c6:0c:0e:fa:4b:d2:4b:d3:74:
         11:7c:3d:e6:9c:20:d3:6d:ca:0e:1b:13:67:96:7e:f9:5b:dd:
         a5:89:cf:e9:7e:48:26:1c:af:fb:d0:d9:7f:94:54:f5:49:4d:
         6d:2b:07:35:dd:c1:03:c2:61:ea:63:9f:cb:4a:97:0b:d8:fe:
         46:14:92:ed:a6:6f:e1:d5:56:d7:fa:34:33:94:80:11:39:87:
         a4:a7:8e:26:0f:12:43:7e:3e:ac:46:ba:81:5e:9d:08:97:03:
         20:1d:bf:f7:8d:2f:dd:b5:5a:e5:85:8f:cb:59:50:71:1f:d5:
         a5:40:be:36:8c:df:21:cc:13:b8:da:5a:b5:1d:c0:23:85:cc:
         c8:53:8e:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ6CqeRI+L5rnv7BrplfD2QSzfZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDIyMzlaFw0yNjAyMDkxNDI3MzlaMDMxMTAvBgNV
BAMTKDdEMjJGOEQxRjczMTY0QzA2RTA2QjFBQTI3NkE5MzY0RDQ5RjYxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwkfrFpoOzrVO3/68YjiRHiY77
dI3M5iQjN7eEkW2TIUJ9J4rh6IZoiXD9mvXrSbhLDLrz91J9UVRcRTzAbmxDQA2p
No1CWBoDXq6lXr7HnO3i6HbAeIhA0C61Q2LFue/demiD3Df2C6z3BTLp1g7eCKBk
Nw7myxI98ibTUnouVfjJqWMjglJUjP6Pgpz46oEB6ByAvWtRjmgJP/i1uINtwtY1
R4EmiTuqMfO1w43TghJIV7vUd/kvu+ibmuSkIGxNDolTgobRHUvRqtAAWLvTVUs5
Fkat6EKy4ZB4/Nf8IzG2N0k0TfwDWmjA7ONBz8ttFArM2vjTRvSbTF3kr1+tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfSL40fcxZMBuBrGqJ2qTZNSfYZ0wHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM3MmUzODM1MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCu1XcMA0GCSqGSIb3DQEBCwUAA4IBAQCQlZf1KY2b
6eGv6sKa0GoWiwLW6llcbIZ9Gz2MhZtmaV3x8iMSKUrgNLJaHJ7/sR8quYsgOhGL
lBQLAO37LON0De7Dxh/dgQ5pJiv7ag7CIY9Ztm+kezvvwS/wvinXgzFmVw/e6moD
moVUJYr1TcvOcaLLOafGDA76S9JL03QRfD3mnCDTbcoOGxNnln75W92lic/pfkgm
HK/70Nl/lFT1SU1tKwc13cEDwmHqY5/LSpcL2P5GFJLtpm/h1VbX+jQzlIAROYek
p44mDxJDfj6sRrqBXp0IlwMgHb/3jS/dtVrlhY/LWVBxH9WlQL42jN8hzBO42lq1
HcAjhczIU45y
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:33 2025 by rpki-client