Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134382e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          5q2kAzOEKuARqjMIGdiHnupPtivEZ3nKD/JsysutfK4=
Subject key identifier:   0D:D5:61:4F:D3:5D:D7:0B:F9:45:B4:6C:9A:A4:57:15:FD:EB:AD:7F
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       6EAC5DE766E560EEB218BFC602459681347D81BB
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:08 +0000
ROA not before:           Tue 24 Dec 2024 13:46:08 +0000
ROA not after:            Tue 23 Dec 2025 13:51:08 +0000
asID:                     52861
IP address blocks:        177.93.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ac:5d:e7:66:e5:60:ee:b2:18:bf:c6:02:45:96:81:34:7d:81:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:08 2024 GMT
            Not After : Dec 23 13:51:08 2025 GMT
        Subject: CN=0DD5614FD35DD70BF945B46C9AA45715FDEBAD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:e2:75:a5:d8:73:98:e0:00:82:47:e1:1f:
                    dc:c9:8e:9e:be:c7:e8:21:1d:3f:0e:b3:19:5f:d8:
                    5c:28:68:a9:9a:ed:a2:5a:79:36:d9:42:e9:d7:79:
                    ab:84:83:00:e7:bf:22:eb:2e:fb:e4:d9:81:49:90:
                    be:b3:53:fd:45:09:dc:23:fb:da:2a:41:bd:fa:5a:
                    aa:65:d6:b3:c1:d9:57:a9:1d:07:d6:4e:be:07:81:
                    80:34:52:b3:25:21:88:1b:3c:ee:c1:86:02:3c:6e:
                    0b:c7:35:4f:43:6d:92:05:80:81:30:e1:ed:f3:a5:
                    e2:7e:50:e7:58:2f:21:ad:ff:d7:d5:db:a4:81:60:
                    87:d3:8f:08:84:16:94:b8:d1:a8:bb:61:a1:87:15:
                    f4:05:51:4a:fd:c7:c0:04:38:01:54:51:26:38:5a:
                    f4:87:a8:aa:33:c9:86:b1:61:93:30:a7:79:7c:09:
                    57:3a:cd:8b:1b:f4:ce:aa:0e:46:d2:a9:63:45:76:
                    fd:41:45:24:d2:3b:46:a8:b8:46:09:17:82:78:7e:
                    97:da:89:52:ff:2a:7b:ca:de:db:f5:dd:3a:a3:a7:
                    24:84:46:d1:96:95:53:48:32:5c:95:79:55:4d:48:
                    cf:e1:b3:94:2b:5a:3c:a3:31:c7:a7:74:dc:08:3f:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:61:4F:D3:5D:D7:0B:F9:45:B4:6C:9A:A4:57:15:FD:EB:AD:7F
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:fa:28:69:fa:16:31:33:02:18:e1:0c:7d:e8:71:12:00:
         78:8c:c2:1b:21:5e:ef:62:d9:2e:4d:e1:f7:85:ca:60:01:96:
         a8:6b:9b:2c:78:ca:f0:f4:eb:b6:44:39:01:1e:3b:f5:c1:e7:
         56:39:35:79:97:30:c0:72:b0:fa:0e:11:b6:14:f1:db:70:93:
         a7:46:64:12:5a:29:c6:e0:75:dd:1c:d7:19:97:cd:c0:3a:29:
         62:c8:eb:f3:a9:94:0e:37:6e:f8:15:52:85:9b:48:57:d1:49:
         1b:45:ec:3e:d3:33:2c:a7:9a:d6:d8:b2:d3:48:88:75:6d:6a:
         d7:f1:37:44:77:46:a8:ac:21:d1:ea:13:07:09:e9:9b:bb:3b:
         c9:2e:6e:64:6d:46:b8:cc:25:f0:3c:7d:ea:ab:fd:e0:8a:b5:
         ad:e8:cd:dc:b5:9c:c0:a5:cd:e7:8c:16:b2:f3:f9:81:25:0a:
         30:70:ef:e8:d3:e1:11:ad:e6:40:85:57:9a:d0:5d:1d:92:4a:
         9a:87:c3:70:96:e8:07:0d:00:7c:eb:34:8f:53:b6:58:87:2f:
         9f:31:f8:a0:f6:4d:c5:e2:ae:a1:6b:a9:ae:93:d1:90:74:71:
         6a:bc:a3:00:f9:28:fa:0d:d7:13:ea:08:b0:94:bd:17:50:52:
         a5:81:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:54 2025 by rpki-client