Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
File:                     34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa (raw, json)
Hash identifier:          7dksy9QDhsAaxrV8+daJeKkfcYVxd8Kpc7iyxx1radU=
Subject key identifier:   F7:84:CA:0C:59:F6:78:CB:C3:10:7A:21:4F:94:07:F3:69:9E:E6:5F
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       526B8002B77709859ADF4388D5738017A5ACBB34
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
Signing time:             Mon 10 Feb 2025 14:36:21 +0000
ROA not before:           Mon 10 Feb 2025 14:31:21 +0000
ROA not after:            Mon 09 Feb 2026 14:36:21 +0000
asID:                     269489
IP address blocks:        45.187.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:80:02:b7:77:09:85:9a:df:43:88:d5:73:80:17:a5:ac:bb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:31:21 2025 GMT
            Not After : Feb  9 14:36:21 2026 GMT
        Subject: CN=F784CA0C59F678CBC3107A214F9407F3699EE65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:5b:dc:09:66:ec:f0:15:36:7e:a7:4a:b4:
                    c6:0a:fd:ea:8d:10:25:a3:41:04:64:94:4f:5c:4d:
                    73:e5:13:96:0f:b2:61:cb:45:8a:69:be:4d:25:64:
                    f9:1c:7f:bc:b1:2f:9d:de:3f:af:db:d5:bb:84:4c:
                    ab:ca:c5:03:d9:64:b1:97:30:6a:fc:b1:01:53:05:
                    02:d8:c7:3d:47:b4:a1:56:dc:ca:12:6a:b5:82:a4:
                    bd:8a:d7:53:d0:39:52:9d:fd:40:41:f9:8e:d5:dc:
                    a8:e2:17:e3:36:62:df:30:75:f6:53:38:fb:b1:92:
                    47:79:a0:cb:50:f1:27:e0:e4:4f:39:5c:75:74:6f:
                    d9:ea:34:0f:8b:b2:86:97:6e:03:37:63:6a:7f:ab:
                    57:4a:b3:79:f0:44:2a:56:5f:20:6d:5a:de:5c:b2:
                    a4:0e:31:ba:98:a1:e9:9c:19:e8:f5:ab:07:2c:a6:
                    b3:1b:57:ef:87:b0:cd:a6:a5:5b:20:22:8f:85:99:
                    39:f3:11:48:5d:9e:bc:14:12:03:0e:53:ce:07:2f:
                    a1:c7:7b:08:e1:d9:50:33:5b:d5:eb:04:0c:c7:78:
                    62:ad:a8:f6:c7:cd:72:41:54:f9:54:81:af:35:97:
                    3b:9d:49:3b:39:f2:d4:0f:fe:91:2b:8c:97:eb:fa:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:CA:0C:59:F6:78:CB:C3:10:7A:21:4F:94:07:F3:69:9E:E6:5F
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:d4:db:c1:85:9f:62:da:0e:46:6a:94:e0:31:58:0f:6f:
         c7:47:32:dd:0e:1c:5d:3a:d1:ff:28:6f:ec:95:8f:77:04:07:
         5b:f2:4b:96:f9:55:bf:09:d1:94:61:1c:dc:9d:d3:33:38:74:
         61:fc:d6:7a:bf:e9:5c:91:42:db:8d:1e:c4:6e:82:91:2e:9c:
         a0:2b:32:5d:c6:86:38:7e:12:20:13:12:54:04:f3:07:8d:89:
         62:34:3c:ee:bd:2c:39:6b:dd:b3:ce:0a:2c:fb:c0:d9:72:0b:
         48:aa:d7:58:3b:a2:93:25:a8:88:27:bd:f2:ad:05:31:56:9a:
         1c:f8:9f:5d:42:d5:64:b5:13:8e:6e:cd:9e:d4:0f:c8:5d:26:
         f0:77:cf:b5:d5:07:9c:7f:78:d1:b0:f3:51:52:1a:67:1b:11:
         4f:b3:7c:5a:4a:8c:eb:7c:b3:fd:1a:1a:87:72:09:6b:af:31:
         36:65:c9:5a:d3:5c:1f:95:aa:29:49:26:3f:df:dd:ca:8c:5f:
         65:18:55:0c:2e:9e:cc:a4:08:86:7f:75:b1:25:8b:79:8b:73:
         50:85:f3:06:05:20:97:9c:76:dc:4e:4f:14:9e:ab:c8:28:ce:
         63:ea:ad:ba:bb:e3:66:ee:74:47:c3:a2:9d:4b:cd:41:16:a9:
         dc:9c:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:54 2025 by rpki-client