Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          bIi4NxuiYuT4jTZ/01kUaFKK7ipRIs8GIEJRT8zjt04=
Subject key identifier:   F9:F8:B4:0E:E9:AB:B8:94:59:6F:17:1E:6D:D6:90:D2:54:A9:3B:0F
Certificate issuer:       /CN=191C80ED60706578C5B838B1955F974B67CB4E4D
Certificate serial:       77AC4D48439D9ABC6947636E1E74291BF146222D
Authority key identifier: 19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
Signing time:             Tue 11 Feb 2025 13:58:38 +0000
ROA not before:           Tue 11 Feb 2025 13:53:38 +0000
ROA not after:            Tue 10 Feb 2026 13:58:38 +0000
asID:                     266375
IP address blocks:        170.80.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ac:4d:48:43:9d:9a:bc:69:47:63:6e:1e:74:29:1b:f1:46:22:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191C80ED60706578C5B838B1955F974B67CB4E4D
        Validity
            Not Before: Feb 11 13:53:38 2025 GMT
            Not After : Feb 10 13:58:38 2026 GMT
        Subject: CN=F9F8B40EE9ABB894596F171E6DD690D254A93B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:88:a2:a3:84:f4:4f:27:e4:c0:7f:4e:d7:
                    38:53:ac:10:23:ac:c2:b2:61:c0:a4:c3:9c:ae:66:
                    27:bf:a4:88:45:89:0c:12:64:8b:07:33:50:24:21:
                    88:9f:b0:0d:aa:3f:f2:19:81:22:56:2f:07:a0:0c:
                    f8:2a:32:12:46:64:c9:4c:d8:3b:68:8e:8c:d7:b3:
                    6f:f5:7f:43:e5:e2:86:d7:f1:2a:b6:60:05:6f:d1:
                    81:ca:a6:dd:16:f9:ce:68:3b:c7:fc:f1:1c:dc:4e:
                    fc:a6:5a:88:de:da:df:f6:48:b5:7c:02:f2:a7:3c:
                    af:ff:80:b7:62:c2:55:fa:28:ab:a8:77:d9:6e:78:
                    93:0f:9f:a7:78:70:2e:8c:ad:a9:e6:70:c9:71:4f:
                    13:0e:85:c3:4d:02:7e:87:3a:da:97:99:05:6a:9f:
                    8f:9a:c3:37:12:5d:25:16:9d:ca:61:8a:bb:e3:e4:
                    78:82:a9:96:33:2b:ce:21:39:56:64:14:62:95:19:
                    d9:f7:11:7d:94:27:3c:79:24:f5:3d:f0:5f:d2:b9:
                    e4:ed:9b:d4:1a:6b:4a:68:a3:ac:ab:90:9b:23:fb:
                    b6:f0:22:1c:60:f2:66:2d:29:c7:94:ef:8c:53:1e:
                    63:5b:c7:92:e7:c1:8b:a2:7e:1e:c8:53:d2:5d:23:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:B4:0E:E9:AB:B8:94:59:6F:17:1E:6D:D6:90:D2:54:A9:3B:0F
            X509v3 Authority Key Identifier:
                keyid:19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:30:83:49:56:93:ba:3c:09:20:99:63:ec:e9:94:48:d3:
         a9:44:21:cf:01:9d:56:1a:b4:07:57:f9:9e:72:08:ff:d7:2a:
         af:11:c9:3e:95:99:26:e5:06:9b:34:d7:93:b3:af:ee:25:87:
         b3:30:1c:2c:2c:02:30:89:79:e2:47:07:6e:0b:d4:4d:2e:13:
         d6:45:52:82:65:83:5e:98:1d:bd:94:64:82:61:71:fb:66:04:
         34:6b:a3:07:da:23:dc:24:45:d7:52:95:9e:f1:f0:da:97:8d:
         3f:d5:b8:d1:44:d8:cd:c9:f4:46:62:cd:da:1b:74:a0:ca:08:
         cf:41:b0:fb:22:16:e7:a0:a9:ca:67:c1:d5:d4:6a:e9:67:66:
         de:ec:0e:fb:a6:60:37:72:41:ef:bb:31:7f:38:4a:96:bc:95:
         3e:ca:9a:65:8d:ff:d5:35:42:37:28:90:0d:e5:36:ad:f7:f6:
         ec:ad:f7:a0:fc:c4:e4:17:42:44:cb:86:e2:00:4a:dc:8d:41:
         a8:03:6b:e7:7f:ec:74:a0:e2:e4:22:3f:e9:28:d3:f5:29:36:
         3b:94:75:b9:47:70:6d:52:e6:7e:81:4b:01:ce:f7:04:e5:fe:
         82:45:e2:4b:9a:31:cc:a1:3f:1a:c3:00:de:b0:73:8d:89:8a:
         db:25:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:18 2025 by rpki-client