Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
File:                     3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa (raw, json)
Hash identifier:          FZn7RwFalWwiEYjnrjs2GQe/mpYMAryi46R2JCmMdHY=
Subject key identifier:   34:D0:53:95:6F:B5:78:A5:E9:09:5B:D6:46:FA:80:EE:58:DB:BE:D5
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       7D2FA946A6CAF9CFA3A555648E9E62A64FA931E9
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:40 +0000
ROA not before:           Thu 04 Apr 2024 03:55:40 +0000
ROA not after:            Thu 03 Apr 2025 04:00:40 +0000
asID:                     52858
IP address blocks:        177.125.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:a9:46:a6:ca:f9:cf:a3:a5:55:64:8e:9e:62:a6:4f:a9:31:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:40 2024 GMT
            Not After : Apr  3 04:00:40 2025 GMT
        Subject: CN=34D053956FB578A5E9095BD646FA80EE58DBBED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:20:4a:b1:e3:0d:67:77:7f:fe:91:f9:b1:
                    f6:59:73:f0:9c:20:4c:36:5e:f8:bd:da:e6:83:10:
                    01:7d:0b:b9:e2:de:89:ce:73:41:0e:ea:ec:0f:85:
                    d2:78:c6:d4:18:91:27:8e:fe:a1:a5:39:d5:c5:88:
                    16:76:8f:59:85:74:55:c6:f6:1e:2d:ba:e9:48:b1:
                    28:19:73:4f:53:cc:3f:2e:7c:8a:58:46:67:6d:1b:
                    68:aa:68:4a:f8:d8:ba:d6:c2:25:e9:a3:e9:d5:24:
                    4a:25:02:a7:b6:cc:d9:ba:ff:69:2e:be:a4:c2:39:
                    76:5c:bc:c7:8d:ab:d0:41:69:12:10:30:fd:76:04:
                    58:2b:19:45:49:46:bf:28:5b:16:0e:a2:f4:0e:1e:
                    83:8e:35:7f:50:40:52:f4:8c:6b:5c:f4:3f:39:86:
                    8c:12:82:80:0c:bd:a1:37:e8:ad:0e:e7:82:83:2e:
                    a2:50:65:78:38:7a:cc:1d:01:62:59:75:80:11:e6:
                    98:66:54:86:8b:d0:3d:89:af:0e:19:fb:a8:29:ec:
                    c4:4b:ce:a5:36:dd:ca:69:1f:76:41:55:df:74:5a:
                    7b:df:94:04:9a:8f:a8:04:b7:b5:ce:cb:58:fb:52:
                    71:10:53:6b:12:e7:7b:f2:29:ba:b6:d8:0b:89:77:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:53:95:6F:B5:78:A5:E9:09:5B:D6:46:FA:80:EE:58:DB:BE:D5
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e3132352e3234382e302f32332d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:6a:7c:df:15:a9:5b:c5:4c:cb:91:97:d4:9a:91:05:90:
         ab:df:e7:2c:82:6d:ca:76:9a:9f:b5:58:c2:13:99:56:8f:fa:
         49:20:2f:2e:6f:da:01:80:3d:08:5a:45:7f:7b:db:10:69:6c:
         97:62:86:ac:82:e9:eb:48:d6:f6:4a:8b:fc:45:61:94:4f:f9:
         e8:69:70:16:4f:76:92:23:da:07:7c:5c:65:99:56:74:5a:05:
         95:9e:fa:1f:c2:0b:89:1d:34:24:d5:c4:ec:94:1f:b3:22:31:
         62:1c:23:05:a8:c1:97:7d:39:ab:7a:21:8e:83:ad:f6:e2:3b:
         59:25:6d:6f:3d:14:13:3b:da:35:6e:c5:74:c8:a3:c6:f5:58:
         37:38:d0:df:6e:1c:b8:d3:db:71:b3:f8:63:b1:48:e1:cf:e1:
         6a:21:ad:cb:80:bb:02:1a:f7:1f:95:a5:44:e5:b1:67:30:ce:
         37:f7:6e:b1:92:ab:f8:68:f3:a3:fa:af:2e:5b:27:f6:fa:18:
         41:01:7b:1e:a7:77:77:08:47:7b:80:61:28:ba:64:42:09:6a:
         2a:96:6c:70:00:c4:5e:35:2b:6b:68:45:a8:d1:45:48:bc:83:
         d3:ae:f4:aa:68:07:b4:17:fd:00:22:b5:a6:b3:8f:8b:52:64:
         f0:58:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org