Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa
File:                     3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa (raw, json)
Hash identifier:          TuGeo2AvphUcGXZBCllQPM61TOAg49MI1k37GUC/1k0=
Subject key identifier:   96:EE:6C:AA:41:92:E7:0B:63:AC:AB:98:38:5D:CF:5D:67:63:F2:45
Certificate issuer:       /CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
Certificate serial:       0E6E018C63B40A897A9CE46704EDDE39D902376F
Authority key identifier: 9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa
Signing time:             Wed 29 Jan 2025 18:54:49 +0000
ROA not before:           Wed 29 Jan 2025 18:49:49 +0000
ROA not after:            Wed 28 Jan 2026 18:54:49 +0000
asID:                     52864
IP address blocks:        177.124.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:01:8c:63:b4:0a:89:7a:9c:e4:67:04:ed:de:39:d9:02:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
        Validity
            Not Before: Jan 29 18:49:49 2025 GMT
            Not After : Jan 28 18:54:49 2026 GMT
        Subject: CN=96EE6CAA4192E70B63ACAB98385DCF5D6763F245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:8a:24:26:ab:72:82:6f:a5:b0:39:d2:f2:
                    43:22:63:eb:3d:31:70:f8:1a:b6:a8:30:41:38:32:
                    0b:54:95:99:e6:8b:1f:2e:db:9a:70:43:86:e9:f7:
                    b2:2c:e0:64:15:d5:06:b1:68:42:65:a6:a4:c8:d7:
                    59:b5:37:73:8a:96:e0:cb:bf:16:97:58:e9:fc:62:
                    b2:ab:c2:9f:ab:ff:22:b6:75:62:73:58:c6:30:0d:
                    3e:a7:01:70:91:e9:e8:1c:9c:47:6a:0c:e6:93:ae:
                    18:16:0f:1a:64:ee:c4:67:96:9b:a3:f0:e0:14:07:
                    18:dd:9d:4e:75:df:e4:b7:e8:11:e2:34:b5:e9:ab:
                    34:e1:e1:09:0f:3c:c4:e5:57:f0:95:ce:f5:ba:3a:
                    c3:68:a4:2b:f9:db:30:8d:ef:44:ad:40:4d:4d:66:
                    8a:9a:90:b3:e2:a1:d4:0d:c9:39:b2:21:8b:cc:3c:
                    b5:21:e8:97:7b:41:1f:0d:4d:87:5f:8e:e4:a4:b6:
                    10:eb:99:f8:5a:a7:34:bc:61:51:86:2d:cf:69:7e:
                    72:5e:73:49:63:65:bd:05:3f:43:0f:3b:23:75:ba:
                    1e:05:b0:7d:f0:95:8a:0a:96:0e:6e:cd:90:00:fa:
                    b1:8a:2d:c4:17:0b:47:1c:fc:0a:4f:ca:6a:c4:d9:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:6C:AA:41:92:E7:0B:63:AC:AB:98:38:5D:CF:5D:67:63:F2:45
            X509v3 Authority Key Identifier:
                keyid:9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:2a:9f:d7:f1:70:a9:aa:f4:b3:05:eb:10:52:3c:4a:2e:
         a5:e8:d2:83:e3:a7:5c:6e:f8:be:ed:4e:3c:21:25:21:69:a4:
         f5:df:d6:e4:f2:91:db:88:1b:63:d2:be:fa:f8:a8:56:4e:9e:
         f2:13:88:66:45:81:7a:a4:2e:39:85:89:77:fb:b5:de:8b:27:
         fe:07:dd:a0:9d:68:5c:d5:10:b4:35:97:8a:a5:aa:41:42:54:
         61:9d:be:ed:05:a5:c4:c9:bd:3b:ee:bd:22:0e:8c:f8:ce:4f:
         2d:e2:c5:12:47:87:9d:fc:29:90:cf:10:0c:bb:d6:02:88:e6:
         ac:ac:65:89:bc:7e:55:0c:09:0d:af:86:5b:14:c6:d5:d3:78:
         ed:2c:c1:96:4d:b3:06:17:73:41:14:b7:65:60:60:75:ba:e3:
         05:56:ab:a7:87:2b:48:7b:0a:93:89:fc:c3:8e:c5:1f:a6:a9:
         a4:ab:03:b9:c0:8e:60:4b:27:17:cc:7a:d6:4b:f7:09:fc:fc:
         e9:55:4b:4e:e1:80:fb:9e:16:51:72:f1:4d:fe:47:65:b8:36:
         6d:b7:15:26:05:35:48:04:e0:38:d1:e3:13:95:45:6e:8c:f5:
         3f:37:6b:ec:74:bd:17:09:a2:0e:02:29:ac:f8:ad:e8:c3:be:
         0f:7e:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:52 2025 by rpki-client