Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
File:                     3137372e3132342e302e302f32312d3234203d3e20323632333131.roa (raw, json)
Hash identifier:          D2e3vUPo1AuVW0lvksa9k9rlYcFaKR8MsWLS9Iaxla0=
Subject key identifier:   6B:59:53:1B:F4:2D:58:69:D4:6A:6E:D5:B7:E4:99:D4:DE:2A:3E:AF
Certificate issuer:       /CN=8B49F9344E05C9F966C6027F79FC469130EC971D
Certificate serial:       53F8695DFC4633C1AF3BEDE8BECA40EE1A728D2C
Authority key identifier: 8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
Signing time:             Thu 06 Mar 2025 01:16:34 +0000
ROA not before:           Thu 06 Mar 2025 01:11:34 +0000
ROA not after:            Thu 05 Mar 2026 01:16:34 +0000
asID:                     262311
IP address blocks:        177.124.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl
                          rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f8:69:5d:fc:46:33:c1:af:3b:ed:e8:be:ca:40:ee:1a:72:8d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B49F9344E05C9F966C6027F79FC469130EC971D
        Validity
            Not Before: Mar  6 01:11:34 2025 GMT
            Not After : Mar  5 01:16:34 2026 GMT
        Subject: CN=6B59531BF42D5869D46A6ED5B7E499D4DE2A3EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:8b:44:52:a6:68:3c:74:ed:9d:d0:43:78:
                    8e:91:10:ee:49:10:07:7d:32:41:d4:79:ba:59:b5:
                    46:60:19:1e:31:e1:0b:96:3b:39:5c:ed:3b:7d:a6:
                    11:e5:f3:95:3c:2a:be:5a:0d:61:aa:97:c6:e2:8f:
                    29:98:df:18:78:19:38:23:97:c1:3f:31:f5:b9:30:
                    0b:b5:a7:2d:06:8c:c9:ea:9f:4d:7c:ed:72:14:4d:
                    72:bc:77:50:aa:12:f1:82:a7:23:d2:42:2b:8a:33:
                    2d:4e:a9:db:ce:66:93:1e:13:5b:31:b9:62:18:7c:
                    36:1b:86:c1:7f:61:4f:d6:a4:d1:dd:d9:b6:dc:c5:
                    33:84:bd:b5:4f:9f:f5:6e:2e:38:48:d8:19:56:02:
                    cf:59:fe:e5:39:3c:f4:86:ef:e5:c6:bc:49:10:55:
                    59:68:9d:89:85:d2:a1:1a:a6:c3:a8:8e:86:9c:c4:
                    d2:94:fd:ef:b5:84:78:1c:5b:8e:db:b3:b3:15:49:
                    98:87:f7:21:a2:9f:a4:5c:75:f4:c2:ae:71:8c:6e:
                    15:d2:64:7b:bb:d3:89:63:21:83:2a:cd:75:d3:a7:
                    ec:b0:16:bd:47:01:d6:26:24:9e:52:09:55:48:d3:
                    a4:d9:37:28:dc:3c:02:d8:3f:ca:f8:58:1a:f2:3f:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:53:1B:F4:2D:58:69:D4:6A:6E:D5:B7:E4:99:D4:DE:2A:3E:AF
            X509v3 Authority Key Identifier:
                keyid:8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:89:05:c7:c2:1c:38:b0:03:39:a4:c0:12:2e:c2:2a:9d:
         2c:1a:91:ba:27:8f:bd:92:ae:7e:85:24:76:17:17:d8:39:58:
         88:b9:ca:0d:0f:5c:18:92:6a:3b:f0:7b:05:20:f9:33:54:ad:
         a2:ae:a6:dd:1d:f4:8f:3f:af:af:0f:0d:99:7f:0c:3c:91:e4:
         58:a2:34:e2:67:6b:72:26:b0:53:20:98:bc:3f:15:d8:bf:50:
         45:61:04:b1:5b:c1:15:64:52:3f:3f:18:b5:ca:1a:7f:ea:63:
         11:ee:9e:3a:4f:28:22:69:9f:2b:31:3e:11:aa:c7:fe:2b:74:
         23:25:cd:fd:4b:e1:e9:3d:aa:83:bf:59:74:b9:4b:26:bc:e3:
         19:99:54:32:e0:5c:83:0e:6f:69:3c:eb:66:f6:ed:9f:c8:74:
         c3:6d:f8:be:df:9a:27:5a:6c:5d:e2:ce:b2:99:54:5c:06:80:
         64:ca:63:0e:82:fb:f0:25:44:33:0d:fe:b9:14:1f:37:ae:34:
         02:d3:74:f7:09:5f:e8:5f:a8:70:aa:45:58:74:b5:77:81:a3:
         7c:4c:f9:30:cf:35:3a:a2:4d:db:a1:fe:5a:b0:7a:1c:a4:73:
         7a:b6:58:30:fb:dd:e3:58:de:58:60:5c:14:04:3a:af:bc:87:
         68:5d:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:24 2025 by rpki-client