Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          Q29ZOoe7hfv5t8jwaoxXYM2ZlTNxUO8wFLb8oeeD/fc=
Subject key identifier:   BE:02:EC:CE:39:15:74:92:20:30:9E:95:5E:9A:BC:B5:1D:22:11:00
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       399D0D77C492CCC23B48398DDE57058CB1EAE957
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:07 +0000
ROA not before:           Tue 24 Dec 2024 13:46:07 +0000
ROA not after:            Tue 23 Dec 2025 13:51:07 +0000
asID:                     52861
IP address blocks:        177.124.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9d:0d:77:c4:92:cc:c2:3b:48:39:8d:de:57:05:8c:b1:ea:e9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:07 2024 GMT
            Not After : Dec 23 13:51:07 2025 GMT
        Subject: CN=BE02ECCE3915749220309E955E9ABCB51D221100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:4e:60:1c:98:46:05:85:99:8c:72:bf:e9:
                    6f:8b:66:ac:ee:f5:df:0c:34:2a:15:9d:d1:32:f3:
                    4c:6b:3e:15:d8:47:78:3e:b7:86:8d:dc:da:31:58:
                    7f:de:fe:d3:e9:cd:f8:2d:fb:6d:31:c8:1f:d8:0e:
                    c5:38:ab:a7:17:17:8f:5a:c3:2d:f0:04:a1:f8:62:
                    1b:75:a6:71:8b:c6:8d:42:c7:6c:ae:93:69:d9:60:
                    48:47:8c:8a:9d:8b:7e:d6:6f:8b:3b:30:b4:a1:fa:
                    9a:f9:16:08:89:f8:01:96:cc:30:a0:b6:3e:c3:8a:
                    6d:2b:e0:c0:a2:6f:da:45:32:5f:3d:d0:17:b1:be:
                    4c:15:ca:d1:5f:0e:1d:ad:76:e0:01:ca:df:fe:cd:
                    1a:ed:34:e8:86:47:c4:a0:5c:89:a7:32:da:b9:10:
                    b9:35:ea:4d:da:55:50:aa:22:52:be:90:ad:b4:06:
                    46:84:c8:75:89:33:d9:f2:8c:8a:8f:e0:dc:eb:87:
                    ce:34:a9:07:02:bb:93:72:b7:e5:53:fc:ba:48:b4:
                    2c:88:ce:95:bc:8c:7b:92:01:cc:66:65:b0:3c:e7:
                    78:92:19:9a:44:b4:5f:69:4f:e4:53:63:b0:9a:f4:
                    56:12:53:64:96:47:fa:d5:a6:0a:38:18:53:9d:72:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:EC:CE:39:15:74:92:20:30:9E:95:5E:9A:BC:B5:1D:22:11:00
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:14:e1:7c:06:1b:7f:a9:84:41:d0:a3:e2:5d:df:a5:b3:
         7d:6a:87:b0:1e:3d:14:7b:f1:b1:af:cf:8f:ac:7b:f2:ed:48:
         02:3e:96:4e:ab:92:95:f6:89:1b:44:35:ed:26:8d:63:ca:1e:
         d6:39:91:ea:e1:8f:8a:17:7c:72:e7:f2:7b:75:3e:d0:36:65:
         c3:8f:79:e2:51:69:71:98:01:bf:bc:64:69:a1:bf:dc:fc:82:
         c9:a4:ca:20:7a:99:cf:2f:03:03:f3:0f:43:de:8b:fd:cf:a0:
         12:9b:af:36:14:5d:c4:b6:f2:6a:f6:3a:8d:56:36:1c:74:0f:
         c9:dc:6b:ea:f9:42:5b:7f:b4:8f:2f:97:76:3f:57:ae:54:98:
         f1:bb:75:32:1f:3c:b8:04:68:00:2c:bb:6b:0f:98:82:9c:5b:
         ed:32:b0:06:0d:ad:ce:a1:d7:b2:aa:40:21:68:ab:79:50:57:
         34:76:7a:f0:16:68:b0:4c:88:80:53:1a:78:9d:8c:2d:44:f5:
         3e:ef:99:c1:55:2c:8e:e6:10:11:b9:d0:47:42:91:64:a1:29:
         42:42:8a:3a:61:83:4a:02:53:0c:61:68:6a:16:3c:95:80:1e:
         09:50:c1:b1:a4:3d:dd:4f:69:f0:ae:50:2b:ef:67:9f:7f:13:
         10:69:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:22 2025 by rpki-client