Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
File:                     3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa (raw, json)
Hash identifier:          OPgvruOoDKUuzY4MJWqp2Hb3+PfjRZTgIBImUYKzACI=
Subject key identifier:   47:8F:BE:16:E8:D9:20:A7:C3:28:E1:A0:D6:3E:76:DF:71:E5:1F:96
Certificate issuer:       /CN=51A41F1275FF94CC496816F994B49E1F6B638B92
Certificate serial:       5D3D9D6BF20BF0F0D9C0F0F6E0244B0B0C07D2DA
Authority key identifier: 51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
Signing time:             Wed 29 Jan 2025 20:10:32 +0000
ROA not before:           Wed 29 Jan 2025 20:05:32 +0000
ROA not after:            Wed 28 Jan 2026 20:10:32 +0000
asID:                     265174
IP address blocks:        167.249.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl
                          rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:9d:6b:f2:0b:f0:f0:d9:c0:f0:f6:e0:24:4b:0b:0c:07:d2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A41F1275FF94CC496816F994B49E1F6B638B92
        Validity
            Not Before: Jan 29 20:05:32 2025 GMT
            Not After : Jan 28 20:10:32 2026 GMT
        Subject: CN=478FBE16E8D920A7C328E1A0D63E76DF71E51F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:37:76:bd:9d:5b:2c:67:c5:c8:14:29:96:
                    9b:2e:f5:2a:25:98:83:e0:d8:de:ad:a5:f9:29:97:
                    f4:89:74:a1:c4:61:a3:22:90:b4:bb:46:c3:5c:4f:
                    59:fc:22:c1:f5:c7:a1:83:9b:1a:ed:b7:20:29:1d:
                    3e:f5:60:37:bb:0d:e8:4c:7c:82:b5:5a:61:9c:76:
                    76:54:dd:83:81:0b:c3:f1:ea:29:98:dc:f2:26:46:
                    9c:6b:58:ca:b8:fb:6e:f8:20:a7:b2:d6:51:f9:d5:
                    0d:79:1b:32:94:79:69:cc:e5:81:1d:cf:39:65:63:
                    81:ca:26:c1:31:64:f9:28:9d:b0:d0:4a:e1:62:3b:
                    72:d5:36:4b:60:7a:1d:f4:38:5d:2d:42:9e:34:d2:
                    9f:fc:94:47:1e:74:87:f8:e2:39:76:36:b5:ce:63:
                    5d:99:cb:4e:6e:c2:67:fb:b0:b2:a9:92:8a:c6:0e:
                    80:39:4d:6f:21:bf:78:5c:91:80:86:f1:cd:fe:75:
                    0a:28:2b:76:51:0f:93:32:95:20:5f:26:f4:81:9d:
                    bf:55:b2:36:7e:7a:4c:76:5f:ae:f6:00:7d:05:ec:
                    8d:7d:30:5d:6f:44:13:4e:b0:0b:22:16:9a:4d:fa:
                    d3:18:1f:69:fd:42:bf:5b:b7:f7:00:31:b0:f1:f7:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8F:BE:16:E8:D9:20:A7:C3:28:E1:A0:D6:3E:76:DF:71:E5:1F:96
            X509v3 Authority Key Identifier:
                keyid:51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:85:58:5b:e2:56:cc:d9:4a:82:f7:fe:85:f8:1a:84:99:
         79:05:f3:44:7a:6c:28:8e:ca:27:58:87:d7:06:1d:e5:87:73:
         e8:5e:35:13:1a:d3:72:fa:26:cf:cf:9e:94:30:fd:0c:46:2b:
         dd:20:98:d0:b5:da:b2:8a:00:f2:fc:19:83:b2:be:92:0c:a5:
         2a:fe:ef:10:b4:4c:0c:aa:8d:c7:63:af:88:d6:81:af:c4:ab:
         3c:37:f9:52:96:f8:c3:71:d5:c8:2f:5c:8f:ed:bb:7e:46:de:
         f6:67:74:f2:46:da:78:22:70:2c:49:d8:e5:8c:d3:8b:09:b6:
         11:eb:87:30:09:0a:56:1c:2e:9f:56:c7:ef:89:6c:30:a2:99:
         4c:52:fd:e3:15:40:b3:11:9a:75:47:a8:5e:ac:bd:8e:3e:47:
         12:20:40:69:81:3a:fe:89:ee:61:86:2d:72:88:74:ed:6e:a9:
         e8:28:a3:b0:e1:dd:51:db:68:02:17:2b:58:28:cd:80:6b:8b:
         ee:7c:f3:7e:5e:21:6b:03:9f:42:19:a8:af:1a:8c:87:e9:db:
         bf:e2:97:71:28:ba:e4:44:a0:22:d7:07:ee:63:c4:a4:c8:32:
         d4:a4:09:30:cf:a0:a2:ad:32:a0:74:6f:2f:c1:d2:64:6a:c7:
         61:2d:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:37 2025 by rpki-client