Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          znmXg/UDDM7+CI8a7ova2X0oOl6Sp3zqHOmkj2TG648=
Subject key identifier:   02:AD:84:EB:62:A0:03:E3:89:D5:B8:7A:FA:94:F6:D6:10:DF:03:B6
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       502F777968EC490646C978F8D8EA0BB585705C05
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa
Signing time:             Thu 06 Mar 2025 22:52:52 +0000
ROA not before:           Thu 06 Mar 2025 22:47:52 +0000
ROA not after:            Thu 05 Mar 2026 22:52:52 +0000
asID:                     265377
IP address blocks:        168.194.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2f:77:79:68:ec:49:06:46:c9:78:f8:d8:ea:0b:b5:85:70:5c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Mar  6 22:47:52 2025 GMT
            Not After : Mar  5 22:52:52 2026 GMT
        Subject: CN=02AD84EB62A003E389D5B87AFA94F6D610DF03B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:21:52:df:42:9d:89:66:58:b4:e2:2c:ff:
                    57:65:fd:1c:8f:72:79:af:68:1e:0b:07:f0:a5:cd:
                    b8:51:3f:bd:b4:4c:b9:1e:5c:46:84:f3:07:83:66:
                    8e:18:95:90:ab:78:a8:97:db:a2:46:03:8e:ff:27:
                    70:f2:8c:ea:eb:81:7d:bb:cc:6f:62:b7:14:7f:e2:
                    a4:b9:1b:52:0b:15:5d:f9:49:1c:7d:e0:e1:2e:63:
                    c2:b0:a3:51:5f:82:05:c5:1d:bd:49:52:4b:c2:ab:
                    ad:da:56:55:55:97:62:10:72:55:49:34:64:0b:8c:
                    08:c3:d3:4f:d1:0d:f9:55:e0:e5:c1:5e:4e:fe:b3:
                    d0:fa:75:d6:f1:2d:e9:af:b7:2a:71:2e:a8:16:91:
                    f8:71:f8:bb:e6:bc:17:4f:8a:f7:41:9f:c7:51:87:
                    33:9b:85:61:47:9c:94:42:27:b5:09:56:37:b7:58:
                    6c:6c:5e:83:fa:d5:ad:e4:c5:69:42:f6:45:9a:70:
                    0e:c5:41:d4:44:eb:8a:c3:5e:a3:56:3d:96:00:95:
                    b8:e4:8f:b4:0b:7e:92:41:74:a7:1f:4a:21:e2:61:
                    d5:b6:9e:91:5b:42:5b:08:ca:6b:db:a4:91:c6:c5:
                    af:41:43:dd:ce:f3:d5:19:be:63:37:5c:44:9d:df:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:84:EB:62:A0:03:E3:89:D5:B8:7A:FA:94:F6:D6:10:DF:03:B6
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:db:3e:37:26:bc:e9:3f:ce:61:53:5c:2b:f5:11:b6:97:ab:
         87:d2:64:d8:b1:48:50:27:1a:a1:10:bc:43:11:71:27:a3:2c:
         c4:a8:97:9a:98:7b:f9:64:7a:69:f3:15:68:91:ac:fe:f4:bf:
         3c:18:58:7b:f6:24:d0:a8:d0:d0:1c:68:20:b4:2e:48:ed:0a:
         e4:80:3b:a2:54:05:61:79:13:77:0e:dd:a2:96:5a:68:cf:21:
         6c:1c:87:ab:32:25:5f:a8:05:64:83:55:84:55:d3:6c:7e:59:
         97:0e:eb:e6:bb:09:85:69:9e:8e:e5:03:c5:62:64:92:45:92:
         41:5c:d9:3b:c4:13:5b:bd:d7:b5:af:8d:c4:e0:5c:d5:e9:bb:
         6a:e5:07:80:2e:cf:c1:71:91:47:b1:03:b4:37:0c:91:30:e3:
         cd:7b:97:84:62:91:1e:0e:5b:d0:71:15:01:2d:32:4b:8b:89:
         77:63:06:1e:b6:c4:16:4d:e3:08:6f:51:4b:e6:71:d6:41:b7:
         ba:bd:59:40:f1:da:2c:70:08:55:48:93:95:03:d8:2e:9b:81:
         8d:44:42:7e:99:d7:c0:94:b3:38:65:23:69:b7:05:af:f1:2a:
         3e:34:62:7b:7e:21:7b:da:e3:ed:cf:07:f2:f5:34:78:a8:ae:
         94:a9:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:37:11 2025 by rpki-client