Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32322d3232203d3e20323632393838.roa
File:                     3137392e3132352e38302e302f32322d3232203d3e20323632393838.roa (raw, json)
Hash identifier:          hUYyV9TsSjwI5plQ+qgiOTHZ9wXT1EjbQ54FNDndDE4=
Subject key identifier:   06:46:CD:BD:84:01:23:98:83:D7:86:E2:C1:13:90:C0:21:10:47:E9
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       5EEDF5BEF7FCB5AABD396065E8A21775FDC6D2A0
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32322d3232203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:26 +0000
ROA not before:           Mon 13 Jan 2025 14:12:26 +0000
ROA not after:            Mon 12 Jan 2026 14:17:26 +0000
asID:                     262988
IP address blocks:        179.125.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ed:f5:be:f7:fc:b5:aa:bd:39:60:65:e8:a2:17:75:fd:c6:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:26 2025 GMT
            Not After : Jan 12 14:17:26 2026 GMT
        Subject: CN=0646CDBD8401239883D786E2C11390C0211047E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:c3:21:dc:62:47:42:b5:5e:c0:44:86:9e:
                    5c:bf:44:db:22:3b:83:da:fe:9f:23:f5:6d:cc:9d:
                    c9:9b:54:11:dc:b3:7f:81:16:2d:30:f2:41:4d:60:
                    28:27:4a:0f:3b:35:8d:b9:17:23:ff:73:ee:ba:f7:
                    7e:2c:65:aa:fd:77:29:27:0c:7a:54:78:50:27:ee:
                    cd:f7:11:9a:b6:38:ba:88:10:89:68:0e:93:7b:ed:
                    28:a1:fe:d6:a6:42:b7:97:e6:bb:f2:69:11:1c:58:
                    2b:63:d7:c0:2b:35:78:4a:b5:20:70:12:5d:b3:88:
                    8b:35:ed:61:f8:62:ba:43:6c:95:e5:70:a9:f6:00:
                    ff:19:cd:d2:de:89:f4:c2:23:fb:a8:6a:fe:de:b5:
                    34:c4:f1:7d:8f:3d:9e:f6:84:fa:a7:32:55:4d:91:
                    e2:ed:7f:bc:f7:19:05:1e:ad:65:b9:1c:16:c9:ef:
                    96:be:96:f6:8d:db:5f:fc:86:4d:9f:77:9c:4c:32:
                    22:95:3c:56:8b:17:48:2c:d9:fd:64:88:a6:9f:16:
                    81:3f:a9:cb:2c:42:01:4f:1e:6f:f4:af:46:83:66:
                    2c:3a:89:4b:9a:bb:0e:09:f9:b1:cb:e5:39:25:c4:
                    7c:a2:e5:87:f5:6c:94:76:30:c2:ad:9b:e8:e8:16:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:CD:BD:84:01:23:98:83:D7:86:E2:C1:13:90:C0:21:10:47:E9
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32322d3232203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:a4:5a:25:47:03:40:dc:17:b9:c0:e3:53:f7:14:b8:66:
         81:ea:8b:ae:dd:cc:b7:38:c4:5e:c7:37:f9:f6:17:6f:a5:9a:
         c9:86:79:4b:b7:18:d0:5e:55:04:49:25:6e:4c:ae:0d:a4:d3:
         f4:8d:ca:29:d6:c9:36:fa:12:46:ed:b2:98:d7:03:0e:e0:8a:
         1a:13:6e:d0:eb:21:dd:07:58:22:15:5c:ac:dd:30:2f:7b:25:
         96:4f:c8:88:42:41:61:75:6c:2e:29:70:e1:1b:21:6c:73:7e:
         95:14:0f:e5:90:a5:bd:e5:6e:d3:6f:98:5d:47:fe:56:3b:11:
         e6:a0:08:32:2f:f4:7e:99:95:bb:4d:b0:7d:b5:65:55:0e:8d:
         c7:f3:bb:19:ee:2a:25:ac:8e:7d:56:86:a6:3a:9a:aa:9c:12:
         68:25:f8:90:04:c3:94:1f:03:0a:cf:bd:03:7c:5d:e2:22:3d:
         00:a0:fe:1b:94:e2:f8:30:a8:80:1c:74:98:ba:10:b7:0d:ae:
         a4:73:86:43:4a:97:02:4e:3f:2e:85:ac:59:ed:d8:e4:60:64:
         aa:42:87:cb:99:b6:cc:2f:d7:0e:03:20:86:82:fd:62:84:c2:
         19:9f:f8:77:6e:a8:24:67:01:09:f8:7d:85:b4:c5:0b:82:d7:
         43:ca:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:09 2025 by rpki-client