Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
File:                     3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          DMFowxirDYgxwAmw8kv+r2fImhKq0mtZ3wS0bR8hLBk=
Subject key identifier:   3A:48:4A:DF:FA:AE:7C:3F:2D:84:15:01:C4:DA:70:40:BA:FD:70:94
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       09C1DC3D8D014A8E4EC07CF34A21ED76E7905351
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 10 Feb 2025 14:29:00 +0000
ROA not before:           Mon 10 Feb 2025 14:24:00 +0000
ROA not after:            Mon 09 Feb 2026 14:29:00 +0000
asID:                     28349
IP address blocks:        189.126.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c1:dc:3d:8d:01:4a:8e:4e:c0:7c:f3:4a:21:ed:76:e7:90:53:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:24:00 2025 GMT
            Not After : Feb  9 14:29:00 2026 GMT
        Subject: CN=3A484ADFFAAE7C3F2D841501C4DA7040BAFD7094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:c6:37:67:f4:0e:f7:9c:43:45:d8:eb:bf:
                    a0:16:1f:09:62:8c:1d:42:65:e9:57:5f:c9:e1:53:
                    39:21:e5:00:9c:32:25:ae:b7:c1:0e:a2:53:86:30:
                    1f:0f:98:7c:fe:46:ac:ce:99:75:34:d2:68:be:32:
                    57:7a:05:1f:7d:3b:66:03:73:dd:7b:9e:cd:2c:29:
                    1e:00:67:2e:58:dd:60:79:57:27:6a:aa:39:bc:ff:
                    30:0c:e3:92:c6:e5:d4:d8:cc:b3:6b:f9:e6:6e:8f:
                    22:96:04:20:4c:13:38:62:0f:d1:94:91:d7:46:9d:
                    16:b4:a5:08:3c:54:1e:51:04:79:b7:63:5d:7a:9d:
                    66:93:b5:4e:4b:93:a5:45:66:4d:5b:99:b5:7b:42:
                    f0:29:91:57:00:ea:15:4f:3d:19:14:5e:a5:a7:0a:
                    8a:24:c8:e3:e0:0b:a6:ba:81:e9:1b:61:49:5e:e8:
                    0b:41:bd:40:77:77:19:77:a3:96:57:c7:d4:f3:ac:
                    cd:90:57:4b:69:18:31:a2:ad:f1:a8:f5:85:26:fb:
                    62:7d:8b:6f:7a:c2:dc:3d:78:fd:89:ba:a9:28:b5:
                    58:3a:42:b4:9e:98:2f:b8:81:87:bc:5b:41:1a:28:
                    fa:0b:16:8d:a3:db:77:5a:e5:b2:7b:2b:36:09:82:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:4A:DF:FA:AE:7C:3F:2D:84:15:01:C4:DA:70:40:BA:FD:70:94
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:86:47:08:16:69:a5:a4:37:17:93:33:f3:7c:20:4a:54:04:
         48:60:17:8c:4d:a4:96:46:45:ad:95:cc:60:6a:51:a6:db:6d:
         17:fa:2d:83:d9:66:bb:cc:53:8a:8a:15:84:0e:f3:64:7e:74:
         67:8e:a7:a8:82:d6:37:55:19:86:13:5d:87:27:e3:04:05:ff:
         c6:29:07:23:0c:4c:c3:68:7a:aa:a2:58:41:ed:cb:bd:a2:a2:
         f6:6f:5b:e2:75:c7:81:10:97:bb:18:cf:75:25:85:d2:2b:88:
         af:83:bc:a5:22:13:0a:c1:36:03:3c:ba:25:50:9a:55:18:76:
         da:47:7b:e2:87:91:21:a5:b8:7e:83:b1:78:c0:ef:60:c5:8b:
         f0:5f:e9:b5:b4:ce:24:52:08:bc:27:8b:7c:03:77:83:e4:7f:
         35:8e:96:b5:4b:5b:f9:e5:af:95:6f:85:4e:c9:49:4c:ad:76:
         be:ab:f0:f3:b7:60:97:86:a1:cc:d0:9a:7b:e4:4c:ae:24:6d:
         e1:3a:6a:74:85:d4:5a:d2:7e:bc:d2:d6:55:c8:d7:81:a4:a8:
         30:8a:49:65:e2:35:88:3b:e9:29:32:30:89:14:b2:99:9a:db:
         d1:cc:a5:57:79:5b:27:5b:b2:77:74:93:20:84:f9:f7:da:a4:
         bc:21:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:19:02 2025 by rpki-client