Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa
File:                     3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa (raw, json)
Hash identifier:          +gijL34u95r5yJznPEdZ7rZonx8s0h1ozytTyOKmXJg=
Subject key identifier:   4D:E3:13:C2:7C:97:DC:E8:76:6A:BB:76:62:D6:51:B8:06:8E:D5:A5
Certificate issuer:       /CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
Certificate serial:       5AA7C6B12ACD5F962C9603698E1E12179AA8DC44
Authority key identifier: 51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa
Signing time:             Thu 30 Jan 2025 19:00:39 +0000
ROA not before:           Thu 30 Jan 2025 18:55:39 +0000
ROA not after:            Thu 29 Jan 2026 19:00:39 +0000
asID:                     273712
IP address blocks:        177.12.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.crl
                          rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a7:c6:b1:2a:cd:5f:96:2c:96:03:69:8e:1e:12:17:9a:a8:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
        Validity
            Not Before: Jan 30 18:55:39 2025 GMT
            Not After : Jan 29 19:00:39 2026 GMT
        Subject: CN=4DE313C27C97DCE8766ABB7662D651B8068ED5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:c8:eb:22:dc:7f:88:47:a5:28:54:52:b1:
                    87:9f:0c:a5:f4:c5:8d:50:26:1a:17:83:82:49:0e:
                    fb:8c:19:38:fe:2a:7c:ec:55:31:6f:d2:25:2e:bb:
                    cd:d8:bb:d4:a9:d4:7f:68:55:d9:b9:84:2b:fc:f6:
                    c2:47:c4:7b:45:c0:55:a4:4a:97:1c:e7:fb:f5:88:
                    49:1a:4b:1c:48:d7:1f:8e:2a:89:a7:56:93:9c:b5:
                    eb:ba:fc:67:1a:75:9a:a5:1d:cd:c7:39:c8:ff:e0:
                    52:64:d2:21:b4:cd:1d:ed:b8:6b:8d:ef:73:2c:f9:
                    55:95:e7:89:4d:ca:80:7f:1d:97:fe:15:c4:e5:b8:
                    e4:fd:63:c0:31:b5:2c:29:55:72:a5:1e:f6:ad:ce:
                    4d:b3:e0:14:47:fb:25:36:3a:9c:ed:e6:49:b4:66:
                    f1:15:b9:7e:86:01:b7:f6:da:65:6f:e3:fa:f3:01:
                    78:97:5a:b2:82:39:a4:e8:28:5c:61:66:d2:d5:15:
                    51:cb:d3:25:02:e1:41:cd:6e:35:38:f7:27:7a:c0:
                    0e:3e:5c:e5:9b:be:a2:aa:29:f2:ec:cf:bf:ed:88:
                    37:d2:b7:d3:35:6b:b9:bd:01:24:42:c4:69:8a:2f:
                    18:4b:05:d5:c3:1c:1b:c7:02:71:ee:ea:a1:23:8f:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:13:C2:7C:97:DC:E8:76:6A:BB:76:62:D6:51:B8:06:8E:D5:A5
            X509v3 Authority Key Identifier:
                keyid:51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:51:88:5a:f4:db:00:18:66:29:81:00:1b:07:b1:f7:73:
         76:16:ca:f9:da:cd:2f:7b:55:3a:a9:46:ae:29:05:ae:e1:14:
         00:31:b5:b0:66:c7:28:de:9b:0a:71:14:1d:78:5e:21:fe:dc:
         b6:59:61:b9:fc:4e:9e:90:75:96:aa:3e:87:1b:0f:d7:f2:f8:
         65:db:a5:54:35:b7:6d:52:e4:91:99:ae:a2:68:37:8d:5e:1c:
         23:bc:e2:86:ed:17:77:33:eb:a2:88:c6:2d:a1:4e:fb:de:45:
         5b:26:00:1d:a6:da:0e:84:cf:56:ed:84:31:93:29:36:0e:07:
         f2:13:a6:2a:62:34:6d:59:71:7b:9d:0f:e3:73:29:ac:b9:30:
         12:1b:b0:0b:63:ff:71:08:3d:cb:c5:83:9d:0d:ae:bc:cf:0f:
         42:30:b4:08:c1:2f:4f:5e:74:ab:2d:0e:bd:b8:6e:cb:35:7b:
         4f:8d:f4:a5:0e:f7:20:44:3b:81:c4:07:cc:f9:f9:a4:dd:d2:
         89:51:0c:e0:68:e3:dd:20:03:d7:11:7f:f2:25:3a:ae:da:8f:
         6a:61:51:29:f5:a9:90:dd:a8:41:13:2e:b1:3e:04:a6:7f:7e:
         95:4b:1b:08:08:20:b2:bf:12:f5:46:96:5a:95:c2:29:cf:a2:
         67:da:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:06:01 2025 by rpki-client