Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
File:                     3137372e3132342e33322e302f32312d3231203d3e203532383631.roa (raw, json)
Hash identifier:          hIkNkt2N2IcYLNC+lhVq1pZkYESZJPSZEjq9aIz8WVA=
Subject key identifier:   C4:0C:7A:92:77:45:8F:46:09:75:C6:26:E1:0D:EB:18:86:4C:28:63
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       0D8E3F9F876786C3AED50D483F2FAB8305936E48
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:07 +0000
ROA not before:           Tue 24 Dec 2024 13:46:07 +0000
ROA not after:            Tue 23 Dec 2025 13:51:07 +0000
asID:                     52861
IP address blocks:        177.124.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 13:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8e:3f:9f:87:67:86:c3:ae:d5:0d:48:3f:2f:ab:83:05:93:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:07 2024 GMT
            Not After : Dec 23 13:51:07 2025 GMT
        Subject: CN=C40C7A9277458F460975C626E10DEB18864C2863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:9e:12:48:b6:23:6f:2d:c4:79:86:41:a1:
                    27:29:2d:b7:d5:9e:ca:79:61:76:8a:84:47:fe:09:
                    1b:a7:6d:44:a3:fa:e6:31:66:79:65:a9:f2:2e:57:
                    c9:df:aa:7a:29:24:70:40:2e:34:d3:8a:06:da:ef:
                    d9:d2:82:b7:24:2f:ce:39:a3:cf:00:c2:88:93:aa:
                    3f:71:ba:7e:e2:80:80:a3:5c:f1:3c:a9:ad:64:f5:
                    86:29:6a:45:fa:16:d2:19:4e:a4:0b:5d:d6:70:fe:
                    2c:a8:e2:c1:a9:98:f5:55:c6:8e:6c:35:4e:36:04:
                    22:58:d8:67:49:0c:86:81:c0:03:d8:ac:d8:1c:4b:
                    fe:85:cc:11:e5:eb:e2:72:13:94:c3:63:c4:82:f0:
                    ad:92:42:1d:00:c2:8e:ae:83:81:b9:d6:d5:40:ea:
                    51:70:f8:92:c5:da:63:0d:dc:6e:e9:61:2f:c7:ff:
                    c0:86:34:fd:3a:20:f4:cf:db:7e:af:0a:08:5d:09:
                    50:6b:63:94:35:e9:cf:ee:97:d7:61:56:96:f9:57:
                    87:d1:90:80:69:93:0b:c1:82:4c:1e:ea:2d:85:e0:
                    22:d0:6c:38:40:f2:bd:b5:46:8c:d1:8c:96:c1:99:
                    1a:ab:27:f6:e9:37:89:4c:de:c1:e1:3a:58:0c:bc:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:7A:92:77:45:8F:46:09:75:C6:26:E1:0D:EB:18:86:4C:28:63
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         dd:30:90:c0:8d:85:92:42:a1:11:46:7b:d5:29:f4:42:e8:ab:
         b8:af:a9:2d:96:17:52:73:ff:9d:be:7b:6c:2f:31:67:5b:bb:
         d8:63:5f:3d:56:7a:2c:e8:ea:e1:4e:a2:eb:f8:7b:bb:55:f2:
         b3:35:d7:86:07:09:de:67:17:2f:96:14:44:74:e7:c5:07:fc:
         85:f2:95:a9:c3:15:82:cc:88:15:69:ee:00:da:fe:f2:95:6d:
         34:46:3e:84:22:55:fc:0e:92:57:1e:95:bf:0a:b9:3c:f3:37:
         8a:3d:39:33:7a:0f:56:21:e7:fc:81:59:27:fb:ea:d2:c9:1e:
         bc:1e:96:dc:6f:e5:86:1d:be:30:d0:91:40:8a:ed:90:36:17:
         4c:49:51:c6:05:f6:60:a6:73:23:16:22:b8:b8:ec:32:5e:39:
         d3:86:c5:a2:b7:e9:04:05:1a:a3:c1:87:5d:75:6a:79:13:77:
         50:f2:7e:ca:a1:52:f8:98:75:98:40:fd:57:53:16:c8:59:d2:
         bf:36:f0:1e:00:92:b0:eb:f7:85:d2:ec:a8:00:6a:38:7a:5f:
         98:81:df:23:c0:b5:c7:5a:ba:04:51:f9:34:91:a9:f0:0c:79:
         27:07:63:9e:6e:f1:8c:92:44:f9:13:d6:6f:9b:86:b2:3e:3d:
         a2:48:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:23 2025 by rpki-client