Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32302d3230203d3e203533303437.roa (raw, json)
Hash identifier:          88q5L0GsoEkTy9h4Bi7NqQyFLP5M4YSiV5g6zEKOUAc=
Subject key identifier:   47:74:1A:61:2D:A8:AD:21:A9:66:CB:86:B5:DA:5B:52:A9:D1:76:17
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0176463FAB404E6B6D8F9A870FEC8B2FEF2562D3
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 12:56:59 +0000
ROA not before:           Thu 05 Dec 2024 12:51:59 +0000
ROA not after:            Thu 04 Dec 2025 12:56:59 +0000
asID:                     53047
IP address blocks:        177.101.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:76:46:3f:ab:40:4e:6b:6d:8f:9a:87:0f:ec:8b:2f:ef:25:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:51:59 2024 GMT
            Not After : Dec  4 12:56:59 2025 GMT
        Subject: CN=47741A612DA8AD21A966CB86B5DA5B52A9D17617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:01:81:04:d2:87:04:27:af:d0:12:63:5f:
                    4b:88:83:79:f6:0b:a4:38:8b:aa:e3:09:a3:0d:80:
                    76:22:21:ab:b0:ad:8c:b5:b2:17:98:a8:83:19:d2:
                    b9:f0:13:e8:f5:02:b3:e3:b6:7d:36:7f:15:2e:f0:
                    1e:d5:52:66:ca:aa:8d:43:72:e4:54:82:5d:b5:66:
                    2f:32:45:fb:e2:31:03:f7:a0:0d:0e:2c:ca:e7:30:
                    22:f4:76:8f:f4:a9:86:09:51:1a:4c:94:ac:25:5b:
                    93:5d:8d:6b:f3:a4:ed:5b:96:cc:8c:ad:b8:59:33:
                    b2:e6:cf:53:35:73:f1:db:ee:e2:15:0b:ba:62:8d:
                    9f:fd:9c:10:c4:af:ea:b4:53:44:e4:3d:b5:9b:3c:
                    cf:8f:fd:d2:80:a5:b3:91:de:bd:5a:b2:7e:56:71:
                    a0:18:d7:a3:e2:f0:c1:65:75:81:bb:60:7e:26:a7:
                    94:cb:04:0c:d3:09:85:a7:ad:dc:d8:80:ab:59:3b:
                    f1:46:1d:85:af:f6:94:99:da:16:da:27:6f:01:3d:
                    aa:f8:07:46:c9:85:b8:5f:e6:ff:db:cc:07:25:e9:
                    92:b2:75:f3:1a:7c:ff:81:c3:b9:e8:73:75:0a:cd:
                    01:43:23:28:6e:9e:b8:3a:18:70:a7:90:c2:8c:9a:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:1A:61:2D:A8:AD:21:A9:66:CB:86:B5:DA:5B:52:A9:D1:76:17
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:35:36:1a:30:5f:8a:6d:b2:56:73:e9:7c:6b:cb:e4:7d:31:
         03:33:a0:bb:bb:c1:8b:fc:9c:87:a2:34:97:5b:33:aa:49:87:
         5f:c4:de:2a:3b:f3:5e:81:01:46:5f:e6:47:6b:a0:5f:2a:81:
         2b:15:b3:64:50:4b:8f:f3:f5:b0:c8:fb:cc:0b:f7:38:cc:4d:
         13:63:4f:08:b1:ab:4f:2f:8a:fd:e7:59:e5:e3:bb:2d:cb:48:
         79:08:bf:bb:58:1a:55:05:b4:ea:08:cd:b4:79:3b:13:5a:62:
         dd:a2:ed:ca:40:11:c6:34:5c:b7:28:28:e6:fc:44:e6:37:65:
         0a:21:b0:d2:c4:85:a8:45:f0:ac:07:74:15:ee:de:cb:3f:6e:
         84:15:bf:12:33:c9:cc:1b:3b:17:dc:a4:2c:38:0d:a0:ea:16:
         65:36:aa:80:1f:82:5a:f6:0f:41:fa:29:42:67:18:20:f1:23:
         17:21:ca:39:5e:50:45:e3:6f:73:ec:ba:8a:0a:a3:f8:0b:12:
         0c:9e:c7:27:d0:f4:94:03:db:c8:28:4f:70:5c:fe:44:f6:74:
         85:b2:42:5b:e7:16:68:f2:5d:b9:c5:2f:9d:ba:8e:f7:de:36:
         8d:37:b8:79:b9:88:a0:84:38:5c:87:f3:c3:00:c7:a2:d9:4a:
         14:e1:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:44 2025 by rpki-client