Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
File:                     3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (raw, json)
Hash identifier:          p6ov0m7OpkWop07qezRslpLZ/WaoJRMTyv8pJ/DORis=
Subject key identifier:   99:C6:B8:83:F9:8B:CA:D1:6A:76:FB:1D:3C:BB:7D:75:51:76:1A:87
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       116C598415F82E7FB0F9E15EB98AC89FB0C91DDB
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
Signing time:             Sat 08 Mar 2025 16:03:31 +0000
ROA not before:           Sat 08 Mar 2025 15:58:31 +0000
ROA not after:            Sat 07 Mar 2026 16:03:31 +0000
asID:                     271448
IP address blocks:        181.174.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6c:59:84:15:f8:2e:7f:b0:f9:e1:5e:b9:8a:c8:9f:b0:c9:1d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Mar  8 15:58:31 2025 GMT
            Not After : Mar  7 16:03:31 2026 GMT
        Subject: CN=99C6B883F98BCAD16A76FB1D3CBB7D7551761A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:60:cd:2f:fe:06:10:39:c9:5f:c0:d1:68:
                    96:97:31:af:8d:e3:2e:f7:6e:31:f3:5d:52:88:12:
                    16:6e:6a:42:a0:30:27:c7:b9:eb:41:53:c5:0b:4b:
                    4e:72:f7:cf:59:f2:a8:f3:5d:3e:7e:ab:ea:6b:c4:
                    09:30:54:00:12:6a:c4:44:82:7b:23:9f:81:35:4f:
                    57:3d:dd:93:54:1b:0b:b0:a8:e9:48:ef:39:89:ed:
                    f2:58:19:22:ab:be:a7:e9:8e:3b:87:ec:01:6d:d9:
                    da:8e:5d:27:c6:56:22:d5:08:50:4f:8e:de:b3:58:
                    d8:94:33:24:ee:7b:78:17:b0:1d:24:fa:4a:97:e2:
                    ba:92:23:89:55:4c:cb:76:c1:da:8c:65:13:68:cd:
                    2a:26:00:d2:0d:ee:fb:61:43:71:fa:43:4d:c1:f0:
                    63:e2:f0:4c:2c:00:7d:12:ef:14:dc:35:7a:8e:fc:
                    72:c1:c5:58:80:38:57:a9:5c:5d:1a:e3:da:83:6f:
                    c2:12:74:86:44:9a:a7:c7:e9:21:ff:9d:00:c2:ec:
                    53:76:f7:61:81:e6:3e:00:0f:04:bc:3e:8f:21:a1:
                    4f:a3:db:e0:ac:11:72:44:52:38:3e:e8:8e:f0:ef:
                    33:2f:76:76:3f:74:a8:46:c4:73:ee:35:f0:51:41:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:B8:83:F9:8B:CA:D1:6A:76:FB:1D:3C:BB:7D:75:51:76:1A:87
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:cc:ba:8e:12:6d:02:27:10:a2:e3:e0:5d:a4:bb:cc:36:
         a9:07:ca:f1:bf:bf:19:0e:85:fa:ee:87:de:a8:2e:5e:d5:d0:
         0f:cb:92:45:62:0e:9f:3e:74:85:5f:63:3c:24:fd:7f:3d:c4:
         10:b9:56:48:57:b9:5e:a2:5e:d0:af:96:eb:b2:a2:22:9e:6d:
         db:83:ea:42:db:de:74:c8:1c:3c:ce:b2:d7:36:61:9e:ca:d1:
         97:ad:36:67:c8:9e:a2:ee:ec:76:f4:72:1f:a1:c6:dd:5b:07:
         ed:9a:d8:75:e0:2b:26:cd:36:c4:93:2d:34:4e:e4:4f:50:b8:
         ac:67:8f:64:80:c2:45:ed:e1:d0:8a:c9:40:78:0d:70:71:fd:
         91:37:ed:76:2d:35:cd:18:4f:98:76:90:df:57:18:63:9d:0a:
         24:6e:05:b4:17:f8:8a:34:f0:4a:c9:d8:b6:77:9e:4c:26:ce:
         69:ff:6d:23:b7:57:39:38:fe:65:59:4b:7f:df:c2:79:39:51:
         1c:f4:a2:a2:a8:73:b4:b1:68:3a:ca:3f:66:25:58:ee:98:0d:
         c2:ff:e6:d5:70:bb:f0:e5:87:95:95:84:af:47:62:8a:64:d1:
         2c:d9:17:96:75:88:02:8e:00:11:95:c5:5a:c2:d5:eb:a5:55:
         62:fc:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:48 2025 by rpki-client