Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33322e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          +rrx2tasNNskOIMpYiz6G+zkVbiDA16Qm+O5FQSfoV0=
Subject key identifier:   EE:98:88:40:C7:9A:F9:77:D8:55:FD:83:25:FD:9F:85:2A:94:99:D1
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       540B87FB3784A8C8FD66667AB6180F13C886962F
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:07 +0000
ROA not before:           Tue 24 Dec 2024 13:46:07 +0000
ROA not after:            Tue 23 Dec 2025 13:51:07 +0000
asID:                     52861
IP address blocks:        177.124.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0b:87:fb:37:84:a8:c8:fd:66:66:7a:b6:18:0f:13:c8:86:96:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:07 2024 GMT
            Not After : Dec 23 13:51:07 2025 GMT
        Subject: CN=EE988840C79AF977D855FD8325FD9F852A9499D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:49:58:08:3f:dc:ab:0e:fb:a4:f7:65:eb:
                    85:f5:8e:8a:db:40:e3:26:ef:d0:26:fe:85:93:d3:
                    55:ab:b6:19:1b:3f:35:a7:c2:6f:3a:44:7a:d1:21:
                    c1:57:92:37:20:76:7e:2b:e4:52:65:5a:c6:ff:57:
                    b1:08:22:08:ef:e4:d2:99:11:78:07:ef:a0:b2:14:
                    1e:af:6e:d2:d5:16:cb:75:da:4d:2e:2e:c2:18:a5:
                    d4:90:ad:25:a5:1e:e0:1a:c6:27:59:6f:87:75:18:
                    58:5c:0e:7d:f7:cc:d5:73:8c:5e:4b:1a:4e:0c:21:
                    66:d4:02:f1:96:e7:b3:b9:5c:0e:6e:20:92:ff:6b:
                    74:b9:8e:5b:37:cd:bc:07:3e:10:1b:b4:ad:31:ec:
                    21:8f:36:c8:08:6d:c3:3e:ab:b7:0b:4d:b5:95:e2:
                    e9:c0:79:98:bd:55:a4:87:1a:8c:f3:30:bf:12:f8:
                    e0:18:db:5a:70:20:8f:aa:27:48:81:8f:fe:64:a6:
                    63:f7:9e:15:f0:4d:e0:7c:63:f9:c5:90:c0:a3:b1:
                    57:f8:9a:0c:36:36:8e:6a:81:d2:f1:25:04:4b:4d:
                    ed:9f:29:78:9d:17:3f:97:93:0b:d9:45:d1:9a:da:
                    72:98:f7:b2:54:7d:42:54:a6:a8:44:31:c9:a2:71:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:98:88:40:C7:9A:F9:77:D8:55:FD:83:25:FD:9F:85:2A:94:99:D1
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:2e:5a:1e:e7:28:66:0f:d3:1b:9e:92:2e:bc:78:d3:ae:
         ad:ed:02:f5:e0:e6:e6:02:54:6a:60:d1:a2:30:ed:22:90:f5:
         16:15:1a:d8:52:08:d9:16:7f:e3:c7:50:83:68:ac:6a:f9:bd:
         e0:00:a7:35:ac:53:24:51:7a:58:3a:11:8d:4d:56:14:20:90:
         48:94:3c:3b:9e:6e:84:63:f1:a2:0e:b5:8d:f2:40:6d:5c:84:
         7c:66:0b:15:c7:7b:a9:3f:72:df:61:48:0b:83:08:d4:bd:8b:
         17:fa:80:5d:fd:2c:5a:de:1e:be:b0:b5:c1:f4:a3:da:e2:99:
         d7:aa:bc:b1:6b:7c:25:15:62:85:35:d4:e7:44:6e:40:61:33:
         a5:66:2f:17:31:9c:97:a4:66:2c:5b:14:95:c8:bd:df:6e:64:
         26:ef:fd:66:fd:50:a0:15:bc:6d:b1:81:82:a5:55:8b:fc:58:
         b7:fa:c7:a1:91:13:3e:87:1f:6a:85:4b:e8:78:7d:31:74:c0:
         90:0b:45:50:65:c4:54:b3:3e:c6:94:46:ad:59:eb:1c:75:7c:
         19:c9:d5:3b:35:00:89:d0:ab:50:6d:34:8b:cc:3b:a5:0a:01:
         13:76:35:39:63:1c:b5:22:43:30:cb:f8:fd:59:80:14:e9:7a:
         9e:c8:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:36 2025 by rpki-client