Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          3AICKEi1i2D/JgYGplsv16OvxEHc6nqh72jUzIYldWA=
Subject key identifier:   B7:7D:00:B0:88:D2:A7:CB:47:24:DA:59:55:47:98:6D:71:06:07:77
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       08A4493915EC4C8E84A6312F528CEC34A20DFF97
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 10 Feb 2025 14:30:03 +0000
ROA not before:           Mon 10 Feb 2025 14:25:03 +0000
ROA not after:            Mon 09 Feb 2026 14:30:03 +0000
asID:                     28349
IP address blocks:        189.51.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a4:49:39:15:ec:4c:8e:84:a6:31:2f:52:8c:ec:34:a2:0d:ff:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:25:03 2025 GMT
            Not After : Feb  9 14:30:03 2026 GMT
        Subject: CN=B77D00B088D2A7CB4724DA595547986D71060777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:df:2a:de:b7:7d:15:aa:c9:b6:d6:5b:01:8d:
                    b6:23:1a:73:2d:08:e1:c4:52:d4:fc:de:f6:e4:e2:
                    82:dd:c5:93:3f:32:30:0d:d9:81:4b:b1:71:91:b0:
                    86:a2:09:bc:ad:7c:8c:14:19:a4:b8:a9:19:ec:83:
                    47:c4:c7:fa:1c:67:b3:9e:23:75:b4:a3:d3:74:0d:
                    57:38:b7:d3:46:3c:c1:d5:10:3f:18:8d:09:2c:7f:
                    b8:3a:2b:0f:ca:47:43:89:c0:88:c2:c9:97:94:c5:
                    23:ca:49:05:a1:81:07:3d:e7:b4:08:29:9c:f4:8a:
                    b6:91:c7:0c:7a:25:eb:ad:92:41:57:5e:95:8d:c1:
                    4e:c1:fb:85:21:83:6f:91:cb:85:8e:ce:d8:f4:1d:
                    24:97:15:9d:bc:0c:c6:64:0f:8a:8e:c5:29:f6:99:
                    7b:f3:fa:31:37:cb:9e:f6:b2:be:9b:c0:93:15:9e:
                    97:60:c6:04:26:44:76:1d:eb:38:41:4d:6e:69:ff:
                    16:66:39:e3:35:6e:4f:b6:73:43:db:64:dc:15:35:
                    1a:87:44:83:3f:54:f6:92:01:bf:21:27:45:cd:06:
                    39:c3:f0:d4:65:69:ba:e0:18:4b:66:30:13:d0:6b:
                    9e:5d:5c:de:01:67:d4:13:8f:5f:94:24:57:08:03:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:00:B0:88:D2:A7:CB:47:24:DA:59:55:47:98:6D:71:06:07:77
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:b7:54:cc:fb:e5:a0:3b:0d:01:4d:c3:25:fa:a2:fb:86:
         3f:34:b2:d2:97:1a:b6:4a:a6:9c:71:cc:f5:94:d8:ca:ab:cf:
         41:ae:21:c7:02:d8:20:35:28:04:89:29:56:ae:df:95:73:55:
         7d:c7:6b:2f:62:f7:a2:85:0a:af:06:56:ce:91:20:9b:a6:c4:
         3a:7e:1c:f7:6c:fe:e2:15:82:3b:e9:92:ae:93:06:78:63:32:
         27:8d:0f:40:f5:26:ee:09:f8:07:19:77:0b:1a:13:b2:d6:b7:
         25:dc:78:c6:fa:ba:c1:55:61:39:e9:a0:9b:f9:0e:6b:20:1a:
         2a:1c:09:4e:01:94:47:96:0b:82:1c:1d:89:28:10:60:e3:cd:
         a7:da:a6:44:e0:61:b4:9f:7d:cd:73:45:6b:32:29:bd:c6:69:
         60:42:12:cb:e8:e0:5c:95:02:7b:37:13:7a:7c:c7:b0:cb:6f:
         b5:a9:88:28:dc:a0:c7:37:97:5d:b3:5c:e3:9d:93:fd:14:f4:
         9d:de:ed:f2:8a:63:74:bb:93:eb:66:de:8e:9e:29:7e:e4:42:
         08:3e:5a:d1:05:6b:97:a7:2a:6e:9f:08:bf:b2:8d:48:ef:4a:
         3c:16:e2:66:80:73:6e:29:27:c3:38:51:d0:fc:9f:5f:16:82:
         27:49:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:44 2025 by rpki-client