Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e36382e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          J7zr8jrdy3zNYIII+1D546Q29x8SNmu5poirfiCnkFw=
Subject key identifier:   CF:10:33:30:23:A4:7F:9B:44:3A:53:01:53:05:DA:C3:EF:C3:97:B2
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       78BD7B77206AAC8C7FEE36A87268DA65E54323B3
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:21 +0000
ROA not before:           Mon 13 Jan 2025 14:12:21 +0000
ROA not after:            Mon 12 Jan 2026 14:17:21 +0000
asID:                     262988
IP address blocks:        179.125.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bd:7b:77:20:6a:ac:8c:7f:ee:36:a8:72:68:da:65:e5:43:23:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:21 2025 GMT
            Not After : Jan 12 14:17:21 2026 GMT
        Subject: CN=CF10333023A47F9B443A53015305DAC3EFC397B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:9b:f4:6c:da:1b:c8:95:21:8d:a2:3f:1f:
                    ee:ea:65:b5:e3:2c:b8:cb:d5:6b:23:16:14:44:f7:
                    09:fb:9a:bd:a6:c2:b8:ef:54:4d:74:f8:7c:56:e0:
                    87:6d:9b:02:11:33:08:9e:d6:51:93:0e:c2:e5:49:
                    62:22:31:1a:8d:75:3b:45:2c:c0:a2:ac:6f:9b:b4:
                    46:5f:00:a7:2b:64:a8:ef:55:5a:17:b3:7c:9c:ef:
                    db:39:67:71:51:e2:96:bb:95:1e:bd:58:3a:0f:aa:
                    5b:84:dd:b8:26:6d:19:a2:c3:88:89:2b:56:f4:f8:
                    65:1d:76:9e:1d:b1:00:d3:40:30:40:fc:3d:b5:05:
                    8f:6f:f8:d8:e9:a5:89:18:69:3c:e0:d0:c1:6b:57:
                    ec:a8:78:24:c6:60:ee:dc:f5:59:71:10:f4:c6:7e:
                    0e:97:27:58:36:7e:2e:b3:ea:d3:4e:ec:fe:ef:d8:
                    a2:08:77:14:50:e2:13:66:56:5b:d1:3e:3c:70:92:
                    63:3c:30:c9:a2:21:d9:a6:d1:0a:95:dd:65:ba:92:
                    0d:f7:7f:2e:f3:be:07:8f:ad:ba:1b:5a:8c:c9:02:
                    73:42:60:c7:cc:a2:6d:28:16:2a:20:62:42:f4:4b:
                    a6:71:29:b8:2d:ca:3c:d1:9d:f6:30:e6:bd:23:39:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:33:30:23:A4:7F:9B:44:3A:53:01:53:05:DA:C3:EF:C3:97:B2
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:a9:25:c4:1d:53:cb:4b:8b:7b:07:59:3c:e4:47:7e:44:
         8e:ac:a4:6a:89:e4:95:74:12:1f:4f:62:1a:77:9e:3f:1b:bf:
         c8:54:ba:15:52:fc:5e:b1:3b:6e:c0:73:48:5d:9c:0e:ab:9f:
         df:52:d0:36:6c:87:3d:b4:3f:e4:6d:f5:50:b6:1d:db:ee:37:
         3e:43:56:6e:12:a3:0e:67:10:f0:33:85:21:e1:1a:fd:16:8d:
         ba:b0:9e:d6:69:fa:63:25:92:0a:dd:dd:4a:96:52:93:74:73:
         d2:d6:a9:c7:6d:af:18:b6:d3:b5:11:89:fd:2f:1f:f2:4a:2c:
         56:08:27:21:78:5c:b4:f5:2d:5c:fa:3a:af:e6:c3:1c:af:de:
         56:cd:40:bd:25:a7:04:b5:a9:a3:42:1c:d7:e3:74:d6:88:09:
         22:f4:60:d9:17:04:0b:88:88:c4:76:16:63:24:7e:1b:67:2e:
         dd:5b:6a:cb:01:53:7c:55:1b:a2:ba:ae:fc:b6:45:7e:cd:7c:
         61:7d:33:ef:3b:b3:ea:4a:e5:e2:66:34:62:51:ac:23:57:b3:
         75:8b:83:07:41:fc:42:07:8f:ef:4f:3e:c3:d2:5d:e2:f3:95:
         04:cf:06:7f:f1:03:1d:ed:c8:f6:18:f9:96:2a:d4:2e:63:86:
         85:ab:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:03 2025 by rpki-client