Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
File:                     3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=
Subject key identifier:   83:6D:74:50:DB:D1:B9:85:88:2B:FE:8A:75:FE:FC:67:C7:76:2B:DD
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       0CD56632F41191DA0162CF6E4F23B1475E809429
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     28292
IP address blocks:        179.127.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d5:66:32:f4:11:91:da:01:62:cf:6e:4f:23:b1:47:5e:80:94:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:40:4e:67:1a:24:88:58:d8:b7:f8:df:80:
                    c7:3f:59:d1:ca:bd:45:d7:7a:80:08:62:da:75:92:
                    8d:da:a7:fd:a8:4c:36:db:d4:a4:7a:67:88:4e:f8:
                    82:59:54:89:ff:f6:bd:9b:45:aa:5c:3e:c6:e7:52:
                    43:8a:96:ae:d7:22:00:86:50:d6:4a:7a:3f:03:11:
                    1b:84:67:75:3a:27:47:31:dd:e5:27:8a:f8:9a:aa:
                    5a:b6:95:cc:a3:db:44:33:ac:95:0a:87:d8:54:40:
                    9e:02:3d:25:6b:99:7d:cf:ee:50:b8:f5:98:8c:85:
                    a1:21:fb:33:b8:83:96:c1:94:08:62:1d:34:70:e9:
                    c6:f0:a8:2a:9e:9b:dc:22:5a:4c:96:be:90:d3:45:
                    e7:34:66:68:6d:36:29:c3:e2:e5:d7:47:16:1a:ed:
                    a3:ee:e8:c2:7e:1d:6b:2c:42:53:26:34:e5:f9:d9:
                    fa:02:2e:7d:e8:36:08:21:ac:de:ae:9d:69:a6:8c:
                    96:c9:69:cb:c9:cc:86:e8:10:e0:7f:b2:b6:24:81:
                    9f:b9:97:04:60:83:e7:ee:6d:ab:09:8f:92:a7:b2:
                    e3:a6:b0:72:1b:0c:c7:9e:50:de:1b:07:c5:71:0f:
                    7c:74:f7:f4:f6:73:bc:e7:8c:36:af:97:ed:21:a7:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6D:74:50:DB:D1:B9:85:88:2B:FE:8A:75:FE:FC:67:C7:76:2B:DD
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:88:6e:9b:9f:3a:55:3e:fd:a3:4b:b0:56:ea:85:24:2b:
         07:d9:cd:39:d6:a0:91:eb:19:63:7d:a9:06:59:32:91:cc:9d:
         40:41:be:1e:0b:0b:a1:63:78:ae:0d:9e:18:cf:8b:ff:38:e4:
         a8:de:15:0d:12:7e:76:ba:56:2a:d5:ca:d7:15:37:b4:6e:3c:
         9a:9c:de:38:2d:88:46:34:ed:8c:51:27:5c:d7:e5:53:61:96:
         16:4e:91:8b:fc:e6:85:4c:8b:97:7f:09:bd:55:ec:27:a3:1f:
         63:77:d4:94:79:97:1f:e0:9e:90:e6:7c:a0:b5:a0:59:c2:7a:
         82:f4:df:b6:97:f6:d1:32:57:33:12:25:6b:08:dc:f6:0f:76:
         f3:a9:71:d7:70:d8:f8:85:0b:ea:bd:ec:c4:77:70:54:55:0d:
         55:21:27:04:f7:63:7f:fd:9b:8c:2e:0a:9c:e9:43:b6:f3:3a:
         67:ec:5b:0d:00:69:ad:4d:85:2d:11:97:e1:96:4e:36:31:1f:
         bc:ce:fc:51:19:a7:73:a1:33:70:73:3b:72:a6:22:b7:50:6c:
         fd:e3:24:ee:c8:99:12:19:55:3c:ee:34:52:71:03:4d:af:08:
         47:de:cf:b3:f4:b3:92:da:80:8f:9d:17:d2:1b:49:f9:24:4e:
         9d:49:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:18 2025 by rpki-client