Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38362e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          2b5t6bAsBuYAOjBeZ2Jmmv9l8gdDTqidzi3LBZLuCi8=
Subject key identifier:   CC:EE:42:B6:3E:F3:75:9B:50:EE:59:8C:E1:24:1B:4A:4E:B6:31:73
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       63F81D39BB4134799B5297E0C586E21B98B8893A
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:27 +0000
ROA not before:           Mon 13 Jan 2025 14:12:27 +0000
ROA not after:            Mon 12 Jan 2026 14:17:27 +0000
asID:                     262988
IP address blocks:        179.125.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f8:1d:39:bb:41:34:79:9b:52:97:e0:c5:86:e2:1b:98:b8:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:27 2025 GMT
            Not After : Jan 12 14:17:27 2026 GMT
        Subject: CN=CCEE42B63EF3759B50EE598CE1241B4A4EB63173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:93:ed:20:31:bf:3a:e2:42:21:b7:db:84:
                    fc:11:54:91:c0:b8:2d:9f:08:2d:25:0e:d4:a4:0b:
                    73:d5:c7:f0:e5:5e:3c:2f:94:05:94:c6:a2:98:7d:
                    73:a0:1b:9b:4e:30:c5:f1:02:89:14:09:9f:3e:ce:
                    26:a3:77:62:e5:19:1a:59:52:0e:d8:1d:53:3d:f8:
                    d9:b0:30:49:bc:d6:a6:f6:91:f5:b6:23:3b:ae:0b:
                    a8:2e:be:97:76:53:3c:69:f3:e7:ac:7b:fc:77:68:
                    2b:f8:bc:0f:61:18:23:c3:56:e6:2c:87:3e:df:36:
                    85:79:9a:e4:43:5a:4c:40:7e:2e:d8:ba:95:30:2d:
                    a9:33:8d:4d:80:fa:f5:a9:82:92:23:67:a5:59:b0:
                    da:a4:ac:97:4a:05:a2:99:e1:fe:73:43:be:5f:c6:
                    83:4d:d5:58:e4:9f:34:ec:85:f3:4a:cd:db:da:09:
                    9e:e6:8b:87:bd:e5:6c:14:a4:8a:4b:05:2d:92:55:
                    ee:a1:96:73:b7:d3:82:dd:2f:36:d7:6c:b4:25:25:
                    b2:f8:1b:f2:0d:be:da:04:e0:42:8e:15:6f:89:f6:
                    3f:d5:5f:ad:5e:2f:4a:83:17:3e:47:80:d2:ec:ca:
                    71:3b:3a:49:58:1a:c4:86:6c:c8:1a:24:ac:d1:55:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:42:B6:3E:F3:75:9B:50:EE:59:8C:E1:24:1B:4A:4E:B6:31:73
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38362e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:26:0e:e4:9e:fc:d5:d8:b1:b7:eb:38:1b:6a:b2:90:b7:21:
         7b:2c:cf:2f:fe:29:97:8b:82:33:d7:74:a6:81:fd:a9:bb:23:
         80:87:ec:6e:74:a1:ab:54:21:87:a3:13:45:93:a1:d1:f7:6f:
         bf:56:e7:4c:c5:27:bf:f9:08:21:ae:73:98:25:7b:6a:2f:48:
         34:ec:da:55:8e:e8:50:ed:99:5b:19:8e:23:89:7a:41:68:81:
         aa:f9:bc:14:6c:23:a8:83:ed:ed:36:42:0e:c9:54:e0:a2:70:
         e2:d5:de:a7:77:c9:e6:09:d4:b7:3c:91:5e:15:23:ac:51:4f:
         e7:f9:25:7c:3f:81:09:35:10:ac:7b:41:f5:ef:d8:8d:3c:68:
         73:0c:6a:71:c9:f6:80:02:7b:2f:21:15:56:68:e5:34:b3:b0:
         11:78:7a:e4:d2:f4:cb:ca:94:a8:88:ac:23:a3:cb:ea:88:7c:
         44:37:13:c3:95:4b:6b:6b:a4:af:60:20:08:0d:b8:2a:8a:da:
         6f:66:c0:7d:28:a9:36:15:b9:0f:e8:de:ae:e0:b5:af:fe:91:
         b3:5b:74:b6:f1:96:83:92:b6:ec:32:6f:3d:25:96:68:b2:a3:
         ba:30:18:64:8a:7c:48:0c:45:28:05:9f:6a:ae:3e:3e:a7:ea:
         ef:bc:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:07 2025 by rpki-client