Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35332e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          0REE58aIR+zbEweJHe7m6bJ8Ak1QPbRn0p0NuD30BCA=
Subject key identifier:   E7:66:B0:3D:F3:15:4F:85:DB:6E:9E:DB:61:D4:B3:4E:A2:F5:14:09
Certificate issuer:       /CN=191C80ED60706578C5B838B1955F974B67CB4E4D
Certificate serial:       0819AA28132EEEE13514FC59DABCEC14BD428CA3
Authority key identifier: 19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa
Signing time:             Tue 11 Feb 2025 13:58:38 +0000
ROA not before:           Tue 11 Feb 2025 13:53:38 +0000
ROA not after:            Tue 10 Feb 2026 13:58:38 +0000
asID:                     266375
IP address blocks:        170.80.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:19:aa:28:13:2e:ee:e1:35:14:fc:59:da:bc:ec:14:bd:42:8c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191C80ED60706578C5B838B1955F974B67CB4E4D
        Validity
            Not Before: Feb 11 13:53:38 2025 GMT
            Not After : Feb 10 13:58:38 2026 GMT
        Subject: CN=E766B03DF3154F85DB6E9EDB61D4B34EA2F51409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:82:81:ae:34:6d:71:88:23:7a:09:c4:35:
                    73:10:b3:7f:30:01:3d:88:83:43:f3:bb:a4:44:15:
                    48:20:7c:51:9a:5c:f2:27:7a:4f:86:13:67:a5:55:
                    ae:fe:82:ad:da:24:6c:83:e0:a4:c3:38:9e:ac:3e:
                    78:e5:60:7f:dd:f8:37:14:ba:2b:f9:1a:1b:12:2b:
                    a0:e3:d5:ac:b6:e9:3b:ca:0d:0a:d2:7e:0f:1a:fb:
                    e7:8e:0e:99:6b:81:7e:e2:14:21:6c:49:85:70:92:
                    e2:3b:a5:68:b7:a4:61:f1:83:45:4c:5b:08:41:f2:
                    d6:37:d9:85:2c:38:63:2d:c5:19:f0:16:60:3b:24:
                    33:8f:78:93:c8:96:80:4b:b2:2a:ef:33:74:6c:e1:
                    6c:86:90:c8:42:1a:40:41:6f:7d:6e:57:37:27:b9:
                    19:ea:cc:4e:39:31:f5:aa:a8:d3:3e:d3:ec:f7:6c:
                    89:69:87:81:3f:42:72:6b:98:64:c2:94:c3:4a:46:
                    16:a8:fc:04:40:0f:6f:9e:b2:ba:0d:76:c8:dc:d2:
                    51:f8:6f:15:b6:96:0d:06:5f:ef:95:4e:08:5c:98:
                    cf:5b:fb:d4:9f:4b:f1:a9:78:99:08:da:1c:45:41:
                    8e:be:3d:e7:5a:a5:8f:76:a3:ae:5e:f5:05:85:e3:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:B0:3D:F3:15:4F:85:DB:6E:9E:DB:61:D4:B3:4E:A2:F5:14:09
            X509v3 Authority Key Identifier:
                keyid:19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:0c:88:d3:bf:83:c6:ab:ab:30:ad:5e:85:de:c5:7a:e4:
         11:38:6d:94:d1:24:36:e6:c7:ba:1a:6a:75:61:7e:1f:a2:3c:
         85:eb:b6:b0:b8:ba:73:52:62:ec:f8:06:71:b2:09:06:dd:10:
         cf:3a:ac:d1:01:b1:00:1d:a4:f1:10:e7:5c:5e:66:3a:a2:8c:
         2b:40:92:9c:74:d0:83:c1:b1:01:e8:ba:af:25:81:d0:47:82:
         c4:1b:42:84:30:01:67:ac:2c:77:16:db:8d:1a:b7:df:a1:f3:
         d1:07:c7:16:05:62:8c:2a:d0:fc:34:01:40:18:27:a3:e9:3a:
         36:ef:d3:a4:06:c1:f8:aa:8e:0d:03:5e:0b:1c:3d:f6:6a:c9:
         62:f1:b1:a7:5a:0f:de:49:11:ee:d0:2f:e4:87:2c:a2:93:d9:
         ce:e4:24:a0:4c:f4:8c:66:1b:55:ce:25:98:0f:d6:7a:50:18:
         62:41:b5:7b:d9:4d:a1:04:e8:bd:f5:e4:b1:0b:46:b1:a8:97:
         39:54:e7:6d:5d:93:7b:ff:7b:7a:bf:19:0a:37:8e:b0:18:90:
         36:3f:80:45:c3:43:b0:5f:af:48:56:09:71:34:ca:56:18:10:
         af:8f:4a:11:98:cb:da:71:f9:a6:9f:2f:ca:4c:e3:21:a9:55:
         ea:39:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:19 2025 by rpki-client