Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38382e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e38382e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          va/TlniXnwx+CZGThFnmYN3RLG94NscYsWbN3oLD7IM=
Subject key identifier:   48:46:2C:22:79:DB:F6:BF:80:01:26:B7:6A:C0:0C:DD:84:EB:FA:9E
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       3A922BC4975EBCE671E69A93EB0EA9FB25088E6D
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38382e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:22 +0000
ROA not before:           Mon 13 Jan 2025 14:12:22 +0000
ROA not after:            Mon 12 Jan 2026 14:17:22 +0000
asID:                     262988
IP address blocks:        179.125.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:92:2b:c4:97:5e:bc:e6:71:e6:9a:93:eb:0e:a9:fb:25:08:8e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:22 2025 GMT
            Not After : Jan 12 14:17:22 2026 GMT
        Subject: CN=48462C2279DBF6BF800126B76AC00CDD84EBFA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:27:f0:45:3c:88:a8:21:e6:cf:a1:5a:6d:
                    0e:59:67:df:66:e7:71:e4:13:4b:3c:6f:5c:c5:6f:
                    fc:21:28:a3:4d:0e:c8:69:15:bf:d3:59:c1:2d:05:
                    3e:61:43:1b:3d:6d:93:b8:e7:54:10:2f:02:b5:90:
                    ff:08:15:6e:87:76:f0:ce:8b:c7:44:4e:e6:fb:9e:
                    bb:01:72:5e:95:b5:9e:01:30:43:a0:eb:87:96:c9:
                    e2:e1:ae:9e:01:43:e9:03:aa:31:b6:7f:92:84:f9:
                    d2:6f:99:07:d1:9c:be:c8:4b:0e:fc:40:b3:00:4a:
                    37:70:6b:c9:10:00:94:36:ab:8f:db:5a:a6:d8:af:
                    80:4c:27:bc:92:77:cb:82:67:84:11:61:db:70:78:
                    df:fb:55:2b:e0:46:2c:9e:a3:f3:17:7b:a3:5e:47:
                    2b:82:8b:95:5e:9e:2e:10:69:0d:8a:41:39:05:eb:
                    65:e9:d1:38:45:21:54:8d:60:60:37:59:51:a9:d2:
                    f8:b9:e2:15:c6:46:b6:37:e4:64:39:c3:c6:46:25:
                    7d:08:80:5b:6e:0d:66:c0:33:7e:1b:af:93:53:f1:
                    45:7e:5b:e8:5d:4b:e0:c9:56:2f:4e:51:9c:d5:ca:
                    60:c9:00:36:0b:1a:63:57:f4:d1:8f:98:9a:7d:1a:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:2C:22:79:DB:F6:BF:80:01:26:B7:6A:C0:0C:DD:84:EB:FA:9E
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38382e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:32:3f:25:a4:3d:6f:b0:d2:66:0c:98:b8:83:a1:7c:ba:
         1a:4c:0d:e0:7f:d8:ab:6d:29:01:ab:16:2c:dc:64:55:e6:25:
         a7:25:49:f5:14:d9:fa:68:83:33:fd:c7:34:d0:e3:05:af:19:
         31:30:48:4c:ce:65:4d:7d:13:ed:08:2b:60:14:c0:02:09:bf:
         f5:39:f0:77:f3:54:b9:87:e6:95:7f:14:de:97:1e:d1:54:24:
         91:8b:d9:19:e1:5b:e5:c1:c1:f6:13:83:1d:72:ee:d5:22:ff:
         df:1b:96:1e:4a:a2:82:4e:8d:b4:4e:af:37:64:72:78:04:da:
         e5:95:17:cc:b3:30:ba:42:73:b1:4a:3e:ad:9f:b4:c0:72:c6:
         1b:1a:50:e8:ba:0f:55:d6:27:55:08:bc:64:64:ac:d8:7c:ef:
         1b:19:e2:e3:6c:62:26:f9:01:7a:a0:26:7d:2f:d0:b9:d7:cb:
         7f:50:21:0f:e9:8d:e0:e6:d3:e4:71:08:e1:87:b1:5c:54:92:
         c9:80:43:9c:60:db:a6:06:b0:cd:6e:92:80:a5:fd:78:18:5a:
         e1:92:0c:0b:2e:66:38:ab:43:5a:1d:fd:d7:40:4a:f3:0a:9e:
         e9:42:8b:ae:71:3c:3b:e8:9d:c3:17:bf:a7:03:eb:02:cd:09:
         14:bd:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:16 2025 by rpki-client