Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
File:                     3138372e38362e3131322e302f32302d3234203d3e203533303637.roa (raw, json)
Hash identifier:          WBuvcGljvv3oZ++qzwOBHesuQ8TuvkhQwAQAyXeQfGQ=
Subject key identifier:   C4:59:D7:BC:CD:2F:C1:E7:00:76:04:B3:1F:87:5D:12:AF:52:13:11
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       261BC4F2374590AFA4E4745B6792BEBDBC916BCB
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
Signing time:             Mon 10 Feb 2025 14:29:27 +0000
ROA not before:           Mon 10 Feb 2025 14:24:27 +0000
ROA not after:            Mon 09 Feb 2026 14:29:27 +0000
asID:                     53067
IP address blocks:        187.86.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:c4:f2:37:45:90:af:a4:e4:74:5b:67:92:be:bd:bc:91:6b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:24:27 2025 GMT
            Not After : Feb  9 14:29:27 2026 GMT
        Subject: CN=C459D7BCCD2FC1E7007604B31F875D12AF521311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:2b:d3:e7:5d:cc:6d:ca:46:dc:e7:d1:4d:
                    e9:c4:6a:c8:fd:2d:7e:65:c3:d3:d8:e9:aa:e4:a8:
                    5c:1c:fe:04:35:dd:67:cf:83:64:1a:ba:d8:f7:f9:
                    fe:39:42:0b:5d:b2:00:71:a3:03:1d:1f:0a:35:9c:
                    33:ef:23:50:da:c7:be:a6:3b:49:8f:22:b6:1f:8b:
                    df:4a:56:b9:12:f1:6a:b3:51:8b:fc:45:bf:13:d5:
                    79:8b:bd:16:9f:02:2e:45:81:1d:28:41:d8:3d:6f:
                    a7:0a:5f:d0:16:e7:1b:7b:6a:39:ac:6d:41:e5:39:
                    57:fe:bb:45:4d:cd:44:87:ef:dc:8c:67:f9:5b:8f:
                    cc:fc:4a:cc:ea:ad:e4:3d:65:2c:bc:87:db:6f:5e:
                    c1:85:58:61:87:ae:58:0a:c8:4d:28:24:15:09:c1:
                    62:ec:a6:95:3f:5b:01:ae:33:d3:95:fb:63:6f:16:
                    be:2a:e8:c3:7f:48:84:55:11:b3:0e:e2:c9:f3:67:
                    cb:78:4c:95:ea:2d:c3:cd:00:3e:b7:92:63:24:0b:
                    75:97:dd:ed:c5:b2:f9:cd:30:63:cd:d8:97:d8:b6:
                    1a:07:37:8a:b8:60:13:fa:24:d9:bd:1f:a9:0f:5b:
                    38:f8:01:87:48:3a:77:86:c4:ba:48:c0:ce:af:cc:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:D7:BC:CD:2F:C1:E7:00:76:04:B3:1F:87:5D:12:AF:52:13:11
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:8b:a7:ef:27:d4:80:db:8d:96:49:20:7a:24:58:6c:81:
         29:05:cc:9e:a6:9b:3b:c3:14:7e:df:aa:60:a5:ee:e9:f7:fb:
         dd:48:93:43:ac:6c:c9:a8:82:65:ae:79:12:63:cb:86:0e:cd:
         40:01:d7:52:96:6a:9d:26:ad:bb:ab:69:29:da:aa:29:70:85:
         8e:25:18:13:8f:a8:0c:74:52:d1:9d:95:75:82:0e:92:32:8e:
         8e:1c:43:dc:11:72:44:6d:db:7a:b3:50:8d:13:37:15:66:d8:
         23:6c:38:91:9c:21:91:db:f2:91:0a:4a:49:5a:4a:69:c6:4c:
         21:55:94:87:31:1b:ff:a3:aa:a4:39:04:f1:5e:99:b9:97:55:
         1d:87:27:2b:5e:31:66:dc:3f:82:de:b6:b7:2a:f8:80:4c:c1:
         48:9f:27:79:ce:64:28:e6:ab:ba:e8:de:c6:84:d7:67:b9:2a:
         71:e2:ba:bc:ff:b5:c4:17:a3:1c:bd:e6:ad:c8:90:ab:da:9e:
         c2:0c:75:88:9a:76:19:dc:f8:8c:8e:f3:65:5d:43:25:f9:c1:
         56:6c:ed:2e:0f:42:34:f3:d7:58:d6:18:ea:f0:8b:0a:90:47:
         88:a6:19:1e:be:f7:76:98:10:1b:93:d0:a5:83:82:8e:14:e1:
         22:ef:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:45 2025 by rpki-client