Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa
File:                     3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa (raw, json)
Hash identifier:          e/HN9/Y2yFV2dE2sqgr9XAhmG29lg/NI0BqkyZRxpHY=
Subject key identifier:   04:F3:DB:1F:70:A5:6F:94:36:F1:74:0F:B7:A4:57:00:79:8A:7D:52
Certificate issuer:       /CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
Certificate serial:       4ED08A0DAFDD34470A6D9F2F6EF8147A4322A147
Authority key identifier: 4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa
Signing time:             Thu 13 Feb 2025 19:03:48 +0000
ROA not before:           Thu 13 Feb 2025 18:58:48 +0000
ROA not after:            Thu 12 Feb 2026 19:03:48 +0000
asID:                     270918
IP address blocks:        187.121.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl
                          rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:8a:0d:af:dd:34:47:0a:6d:9f:2f:6e:f8:14:7a:43:22:a1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
        Validity
            Not Before: Feb 13 18:58:48 2025 GMT
            Not After : Feb 12 19:03:48 2026 GMT
        Subject: CN=04F3DB1F70A56F9436F1740FB7A45700798A7D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:e5:ac:45:eb:58:d6:38:7c:17:21:c6:2d:
                    70:ed:21:29:2d:d6:d1:e9:a3:61:68:85:01:4d:ad:
                    60:b1:6d:9d:d8:b7:62:80:b2:94:7c:d0:c5:eb:43:
                    62:0d:73:9c:4d:0e:cd:09:e3:8f:a9:5f:15:1d:85:
                    07:5c:d9:e0:6d:51:be:e3:17:36:5f:3d:48:a9:c4:
                    0e:48:58:7d:14:97:c5:5c:47:d8:30:a6:fb:29:a4:
                    13:01:c4:bf:27:cc:1a:87:a1:0d:e0:1d:fd:69:90:
                    02:5b:be:b9:1a:e6:50:aa:2a:9a:e2:49:16:8d:7c:
                    bc:fa:52:4a:f4:ee:ff:01:f8:e6:ad:13:43:b1:da:
                    59:84:8a:c6:72:57:54:ec:ca:82:a8:9d:b1:6c:64:
                    b3:7c:54:21:b2:ce:06:a3:64:8a:66:a4:af:1d:3b:
                    6b:d7:9f:da:fa:66:46:41:29:c9:18:ba:0f:67:49:
                    5a:5b:67:0f:f5:1d:26:1d:06:8f:19:da:37:35:96:
                    50:e7:18:3f:6d:c9:33:b0:32:bc:a0:c8:8a:01:45:
                    d4:41:1c:9f:c7:cb:c9:d6:e4:c8:46:6e:4c:82:6d:
                    a5:61:50:26:59:44:51:df:ba:eb:46:0d:69:47:e8:
                    b0:7d:4a:6d:11:60:2b:49:f4:cd:46:8c:da:b4:46:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F3:DB:1F:70:A5:6F:94:36:F1:74:0F:B7:A4:57:00:79:8A:7D:52
            X509v3 Authority Key Identifier:
                keyid:4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:84:28:14:a3:1b:45:ae:43:3d:31:64:fc:8c:4c:ac:d8:
         e8:2f:a3:0f:d5:e3:d3:82:a7:c7:f4:4c:e8:3b:40:b3:41:a6:
         f7:81:5d:43:78:9e:1a:08:69:37:f4:c4:97:67:5f:59:a5:e3:
         f2:be:ef:d7:9a:96:18:fb:cf:7d:0e:a2:04:ee:0a:a1:e0:cf:
         04:72:41:44:12:87:66:db:b2:dc:85:d3:f1:35:af:15:c6:ab:
         1d:99:32:0e:c7:33:18:fc:4e:6b:38:0f:fa:42:84:9a:a9:dc:
         e0:02:04:1c:1f:68:12:3e:10:fb:be:dd:7e:27:62:8a:da:30:
         fb:4a:5b:e8:8a:03:61:71:41:f4:2b:cd:5e:b8:78:72:bf:20:
         0d:68:32:4f:87:25:c4:e9:07:7b:1b:fe:43:4d:10:0e:3d:03:
         41:72:c2:d2:b7:e4:19:4f:af:d5:ce:60:d1:89:24:02:25:8d:
         01:2b:40:ed:53:ea:59:fd:da:36:4a:b4:6d:71:8d:d3:be:16:
         df:76:7f:85:0d:fa:af:d2:51:58:6e:b3:b5:b9:a5:1b:de:a1:
         6a:c8:5d:c6:c0:cb:d6:5b:51:7a:8d:6d:54:92:5f:fe:31:53:
         8a:8f:9f:e2:6a:fb:8e:02:af:f3:f4:c6:f7:a9:2b:41:72:c9:
         ae:a5:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:13 2025 by rpki-client