Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39322e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e39322e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          cEDN6VdrpupXeQq0ZRmGLSUhgnW1tT7uUcl7Q1G60s4=
Subject key identifier:   40:53:CE:54:F6:13:77:E5:A9:0B:BF:79:68:A4:0E:86:58:95:68:69
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       2F3AD67148D53877FA46B4E7D4B0D8349753DC3F
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39322e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:17 +0000
ROA not before:           Mon 13 Jan 2025 14:12:17 +0000
ROA not after:            Mon 12 Jan 2026 14:17:17 +0000
asID:                     262988
IP address blocks:        179.125.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3a:d6:71:48:d5:38:77:fa:46:b4:e7:d4:b0:d8:34:97:53:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:17 2025 GMT
            Not After : Jan 12 14:17:17 2026 GMT
        Subject: CN=4053CE54F61377E5A90BBF7968A40E8658956869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:da:94:d4:68:c0:0d:67:95:fd:76:c7:b4:
                    14:b9:9a:34:89:6c:fc:d9:d8:d1:74:00:63:f8:45:
                    db:74:d8:ae:82:af:0a:99:53:28:42:66:fa:53:97:
                    11:8d:69:4c:ea:93:46:3b:fc:46:a1:0c:82:84:24:
                    25:72:85:25:33:39:86:5f:ed:70:88:bf:dd:d2:7c:
                    23:e1:43:ed:0b:66:d7:dc:89:9a:88:05:ea:bd:90:
                    51:38:1e:5e:a0:dd:61:da:85:bf:cb:28:c8:96:80:
                    45:87:8f:9e:f3:74:62:5d:77:ae:e4:7f:3e:1d:6f:
                    2f:df:5c:22:b7:92:5c:9f:53:e1:17:96:8d:91:9b:
                    f5:be:08:c3:5d:52:5e:d8:2e:9b:c6:76:c6:4f:a2:
                    b0:a0:61:3e:76:71:e6:9a:b4:cc:81:5a:ed:8d:0c:
                    b3:0f:64:a7:5a:59:48:34:74:f4:8d:e2:37:25:fc:
                    4d:02:b5:39:33:8e:5e:4e:1e:81:43:eb:dd:62:43:
                    27:41:de:47:49:ba:b3:f7:cc:05:6b:8a:0a:3e:9c:
                    75:d1:c0:a9:25:59:d2:d2:86:37:5c:5c:cf:cf:b7:
                    fe:5e:dc:cb:75:61:96:71:a5:2a:f2:80:22:ef:89:
                    8d:f0:07:33:f1:5f:a2:0d:2a:95:9e:16:1a:4c:59:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:CE:54:F6:13:77:E5:A9:0B:BF:79:68:A4:0E:86:58:95:68:69
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39322e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:73:c1:ed:72:03:fb:1c:21:8e:9b:a2:7d:a2:a7:6d:af:04:
         8f:3f:ba:ea:88:d1:81:00:51:45:5e:29:07:e5:8a:db:e8:7f:
         4b:47:8f:74:2d:33:6b:4c:a8:de:ef:d9:40:f9:93:3d:b6:f8:
         bc:20:8d:99:ff:87:77:fb:ef:63:73:02:40:65:8f:64:9c:2a:
         e7:80:71:63:6c:56:4b:08:80:2c:6b:c5:88:5e:98:f7:c4:69:
         44:e7:26:be:69:f0:e7:9c:87:91:c8:7c:f9:d2:0e:f5:64:0d:
         8e:5f:af:16:23:67:61:01:c5:9b:d6:87:cf:f0:5d:f6:df:9c:
         68:ab:36:eb:9a:94:d2:a6:6c:e5:41:be:ce:19:16:e3:df:fc:
         61:e8:a7:16:61:5e:bc:df:74:d2:57:e8:d2:66:e6:2f:e7:67:
         38:b6:5b:2c:2a:91:93:e3:eb:60:e2:41:c0:8e:21:0d:16:58:
         f9:90:47:e6:49:a4:e9:b9:d8:c7:e5:f7:11:ed:e2:d7:41:ea:
         7e:ec:58:f1:d2:78:eb:1e:e2:29:84:2c:e9:a4:92:d2:f8:fe:
         e2:85:a4:7c:49:00:94:48:f3:3d:3b:29:32:59:26:ec:eb:d5:
         c1:c8:e4:a6:99:9f:f1:5c:99:af:ab:93:fb:e0:e3:b6:68:94:
         bf:38:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:23 2025 by rpki-client