Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa
File:                     3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa (raw, json)
Hash identifier:          e6e5Lg+QGVSi7TERvy2MUUKY8wIQe1UD2GuznUI7JH4=
Subject key identifier:   B9:85:A7:45:D0:4F:16:2A:C1:22:BD:C7:5A:FF:FF:62:F6:A6:1C:9C
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       4C2E172C62E5E01F6BE40C715EE25DEFB9E11177
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa
Signing time:             Tue 12 Nov 2024 01:00:38 +0000
ROA not before:           Tue 12 Nov 2024 00:55:38 +0000
ROA not after:            Tue 11 Nov 2025 01:00:38 +0000
asID:                     264562
IP address blocks:        187.49.176.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl
                          rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2e:17:2c:62:e5:e0:1f:6b:e4:0c:71:5e:e2:5d:ef:b9:e1:11:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Nov 12 00:55:38 2024 GMT
            Not After : Nov 11 01:00:38 2025 GMT
        Subject: CN=B985A745D04F162AC122BDC75AFFFF62F6A61C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:30:cf:3c:10:08:52:4d:83:d3:27:7a:99:
                    bd:92:3c:7d:b6:ed:08:ce:eb:40:07:f8:09:4e:89:
                    83:c5:14:8e:ff:c1:20:18:b5:b6:e5:2c:05:11:b6:
                    d9:80:95:92:1d:13:71:39:b2:4b:47:08:ba:6e:60:
                    cd:e9:6b:f1:88:ff:18:f2:ab:ef:66:06:3f:b0:80:
                    9c:ef:b1:ba:f9:11:62:a2:5f:9e:20:64:b2:aa:35:
                    82:1b:8f:6b:c3:ed:5f:e0:18:e7:85:cb:a7:4d:72:
                    1f:e5:c1:20:d2:bd:f7:05:61:d2:72:0a:01:f4:90:
                    fe:39:f9:95:37:08:8e:a9:5f:bf:6b:c8:df:19:d9:
                    6a:cc:28:76:44:91:9d:bb:d2:83:53:aa:81:b2:70:
                    91:7c:af:68:1f:8b:26:e3:a7:4c:c4:c1:fd:be:94:
                    98:ac:5a:e9:7c:26:da:1e:a4:57:eb:4c:8e:e3:0c:
                    dd:11:14:bb:05:1c:bf:44:ed:3b:24:bc:35:c5:ab:
                    a2:27:43:21:7d:d8:6c:57:c7:47:82:ad:17:be:ee:
                    5d:26:26:cf:1b:ad:44:13:6b:2a:75:4d:be:82:09:
                    af:df:d1:cf:8b:37:eb:9b:94:ed:18:a3:e0:84:d9:
                    f5:f2:96:27:55:b8:df:fd:3a:b4:fa:c4:0c:21:8d:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:A7:45:D0:4F:16:2A:C1:22:BD:C7:5A:FF:FF:62:F6:A6:1C:9C
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:e9:6a:1e:0b:02:0c:28:89:fe:9b:27:7a:a2:b6:6f:69:
         6f:89:1b:33:ae:97:af:a2:a0:4d:e9:6a:c8:51:81:fe:bd:19:
         44:64:23:13:a5:9a:95:b1:f0:96:6e:68:b5:d5:5f:dc:06:a5:
         92:b1:78:0d:38:7c:df:9a:1d:54:2e:cd:59:5a:9b:41:fd:f4:
         8e:18:d1:16:cc:8c:bc:4f:d3:51:7e:8e:d1:30:49:2c:9a:5e:
         b8:2f:f3:53:86:96:83:9d:76:6b:4b:b5:9b:89:31:7e:4b:8b:
         c7:10:66:e8:22:8d:06:6f:92:8f:4d:64:81:3f:57:55:a4:70:
         1b:40:49:f2:d0:32:72:a8:83:cb:b1:b4:f9:13:93:f1:4d:20:
         93:90:c0:a4:14:4b:83:6a:3f:a6:90:c6:1c:21:31:da:58:1f:
         d5:68:b7:44:f2:e4:2d:72:27:9d:0e:33:bd:c5:b2:0f:d5:43:
         ac:b3:86:6c:3a:51:cf:76:4c:be:23:8b:1b:83:7e:8c:ba:63:
         dc:3c:17:bf:0e:5b:25:91:d3:d8:86:a0:3c:e4:4b:af:0b:1f:
         b4:9d:8a:62:4c:9d:b3:34:0b:e1:bd:4a:e2:d4:dc:b3:48:4c:
         c0:b6:c2:73:ba:a8:4d:dd:03:c4:26:21:c1:fd:72:ab:79:39:
         cf:32:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:25 2025 by rpki-client