Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa
File:                     3137302e3234362e38302e302f32322d3332203d3e203532363836.roa (raw, json)
Hash identifier:          oaTOVleLTQiWWytCt5iqkvLMd1CtY3S8XXEWO8PDP3Y=
Subject key identifier:   FF:1E:CC:CC:B5:6A:87:A5:DE:AC:1F:F2:62:7E:73:D9:6F:2E:31:41
Certificate issuer:       /CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
Certificate serial:       4E02872F690BE283C5F0C676B7ECB3C564234266
Authority key identifier: 58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa
Signing time:             Fri 27 Dec 2024 13:38:52 +0000
ROA not before:           Fri 27 Dec 2024 13:33:52 +0000
ROA not after:            Fri 26 Dec 2025 13:38:52 +0000
asID:                     52686
IP address blocks:        170.246.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.crl
                          rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:02:87:2f:69:0b:e2:83:c5:f0:c6:76:b7:ec:b3:c5:64:23:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
        Validity
            Not Before: Dec 27 13:33:52 2024 GMT
            Not After : Dec 26 13:38:52 2025 GMT
        Subject: CN=FF1ECCCCB56A87A5DEAC1FF2627E73D96F2E3141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:d6:12:68:e8:5e:78:32:e1:b2:a9:b1:e3:
                    dd:d8:e7:3c:59:53:f7:54:a6:c2:89:48:4f:3a:61:
                    38:a9:af:03:40:4a:64:9d:c2:38:63:0c:ff:04:9a:
                    32:0b:14:b3:cb:51:04:f9:9a:a0:89:88:3d:d8:1e:
                    d4:77:a2:e1:fc:03:97:0e:e7:ed:2e:3b:7d:ae:e5:
                    45:2b:3d:3f:6c:6c:51:10:d0:a5:31:9d:d8:b8:54:
                    47:fb:a3:21:d0:ae:b6:10:4b:37:4d:ca:62:1d:72:
                    72:e0:8b:31:8a:b5:23:76:d9:20:78:63:d9:6e:2b:
                    f1:72:24:0c:9a:b6:b8:73:ed:7f:fd:2f:cf:32:c0:
                    53:fa:2f:03:8a:0f:62:ce:ec:1f:68:fa:b9:e5:84:
                    7b:74:a6:f1:3c:bd:a6:0f:1a:f4:90:cf:97:3d:a6:
                    2e:43:ea:0d:66:3c:3b:8a:e0:09:e8:e4:ac:86:7e:
                    ad:81:10:88:15:c9:81:b0:91:68:e8:a8:70:b1:71:
                    25:8b:06:a3:23:5f:50:7c:7b:0b:39:f9:28:ea:4c:
                    74:da:ca:dd:41:0c:30:3f:6e:dd:f6:65:a1:01:cc:
                    f5:9a:e1:65:74:d7:e9:ff:62:35:1c:35:a0:bf:8a:
                    da:03:a6:b9:75:f5:fc:1f:34:a0:a4:f1:83:91:e8:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:CC:CC:B5:6A:87:A5:DE:AC:1F:F2:62:7E:73:D9:6F:2E:31:41
            X509v3 Authority Key Identifier:
                keyid:58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:10:78:26:f0:4d:d2:85:da:c0:a2:0e:7b:45:2c:18:9d:83:
         49:eb:41:34:bf:3f:93:2d:40:b2:dd:00:6f:ef:af:32:24:a1:
         49:b3:11:aa:0d:98:f9:82:bf:95:1d:b0:f0:a3:2e:18:c1:8b:
         d0:bf:53:07:16:ef:15:6d:aa:b6:a6:d3:0b:4a:df:1a:1d:01:
         cf:2d:fd:02:84:fc:27:24:46:d6:aa:d1:90:93:c8:9b:50:5e:
         4b:d7:a8:27:ec:1b:b8:43:0c:b6:39:1a:43:aa:08:6b:aa:a9:
         9f:98:49:d4:b5:90:e2:83:ee:4d:da:c5:9f:be:f4:19:ec:18:
         9f:bb:5c:8a:c6:13:c4:a2:5c:f5:66:da:44:33:c1:99:1f:96:
         9b:41:a2:e8:13:3c:bc:29:32:3a:e7:52:5b:1c:f0:3b:57:d5:
         71:ff:bd:38:55:ac:6e:c8:2b:bb:8e:af:c1:e8:4d:ec:f5:49:
         42:e8:3b:91:49:f2:4e:73:98:e9:c1:d6:31:8a:49:25:81:f8:
         94:41:a7:da:63:ea:5f:93:0e:33:38:e5:42:4c:54:6c:a8:9c:
         ba:68:18:02:83:f1:b2:8e:0e:06:b9:05:97:6b:8d:bc:9c:29:
         8b:5c:4d:cc:20:f8:98:a1:5d:dc:1d:e4:60:ef:f4:54:78:05:
         c6:f3:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:37 2025 by rpki-client