Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233392e302f32342d3234203d3e203238323936.roa
File:                     3138372e3132312e3233392e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          uEsdQq4TdDlk55/x3nqK+sjM3Z1TH0QeDRW8MPXaPA8=
Subject key identifier:   F1:58:26:63:0C:E5:49:60:B5:98:EC:D3:83:F6:06:4D:3F:4B:7A:6C
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       1153244BF9AB7093A4E0D0CD3BA3B7C0DADAFAE1
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233392e302f32342d3234203d3e203238323936.roa
Signing time:             Tue 03 Dec 2024 10:53:36 +0000
ROA not before:           Tue 03 Dec 2024 10:48:36 +0000
ROA not after:            Tue 02 Dec 2025 10:53:36 +0000
asID:                     28296
IP address blocks:        187.121.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:53:24:4b:f9:ab:70:93:a4:e0:d0:cd:3b:a3:b7:c0:da:da:fa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  3 10:48:36 2024 GMT
            Not After : Dec  2 10:53:36 2025 GMT
        Subject: CN=F15826630CE54960B598ECD383F6064D3F4B7A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:32:43:86:f0:6d:40:a9:93:5a:6e:4c:92:
                    33:fe:67:e4:76:3e:bf:2b:cd:d2:b7:97:40:0d:c4:
                    7a:20:12:ae:c5:51:02:69:36:4f:62:42:52:9a:97:
                    bd:dc:96:c3:74:c6:4c:15:bb:10:81:35:f0:06:8a:
                    88:da:4c:6c:39:b7:7e:af:b1:d3:18:cb:8e:70:d4:
                    db:5a:f1:6e:bf:84:e0:ca:2f:5e:52:fb:49:95:d9:
                    3a:90:0d:74:38:28:8a:c9:ec:ba:99:35:78:2b:50:
                    30:65:df:d9:7e:09:c2:e4:e0:fd:b8:35:a5:5b:35:
                    5a:ec:e4:11:00:50:25:ee:25:87:39:4e:7f:66:00:
                    2a:57:43:7e:c6:40:ff:87:6a:a2:c8:51:e0:ee:6e:
                    d0:0b:21:2c:44:ac:93:9d:95:76:18:89:05:35:dc:
                    84:38:d0:ca:fe:cb:f8:6c:90:fd:77:12:07:6b:21:
                    c2:a1:42:8f:6b:51:2c:fa:ff:7b:74:92:12:45:4a:
                    30:5e:50:09:4c:e0:18:6c:26:fd:bd:e6:86:15:7f:
                    69:4f:01:0a:ef:e4:57:ea:3e:9b:75:e2:ae:42:8a:
                    25:5d:31:26:f0:6d:69:0f:ea:bf:78:ae:18:22:6c:
                    16:30:52:4b:b9:bd:5d:1b:95:1e:d5:f9:2e:e6:cf:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:26:63:0C:E5:49:60:B5:98:EC:D3:83:F6:06:4D:3F:4B:7A:6C
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233392e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:53:b3:71:fd:b8:eb:b1:da:24:26:e2:3b:db:b2:dc:68:30:
         0b:37:b0:c2:e9:06:a9:a8:a8:86:a8:f4:27:4b:9b:64:3f:a1:
         df:3d:e8:b0:be:b7:8f:3b:7e:cd:9e:a9:80:72:5a:8c:d1:db:
         31:f9:36:39:b5:90:5c:5d:a3:9f:21:de:26:d7:dc:b5:d2:d1:
         67:ad:03:07:c3:5c:a6:9b:ce:9b:e9:81:87:83:dd:07:cf:24:
         be:fd:31:d2:b2:1f:c0:c5:32:96:15:5b:dd:a4:bc:24:1f:aa:
         eb:bd:78:13:40:f4:77:91:21:1b:6f:1a:4a:7d:7a:13:8a:8d:
         03:87:76:fd:fe:f7:eb:e0:23:f8:d6:a9:f7:25:7a:22:58:9d:
         ed:be:99:22:f4:b0:00:8a:bf:da:e2:3b:66:3e:58:1d:30:c3:
         cf:5c:96:cf:2e:9f:14:11:cf:35:cc:3d:f8:1f:55:c5:06:cd:
         d9:17:93:48:ff:11:b4:5c:e7:aa:e5:ff:f5:74:ac:6c:8a:be:
         7f:6c:6b:03:a3:d4:f4:9b:55:cb:2d:18:de:f5:8f:c5:a4:d7:
         dd:48:f9:b1:5c:f2:9a:8c:aa:d1:77:06:bb:bd:d7:da:59:bb:
         04:ee:ec:44:fe:f6:8c:ae:a1:e9:0a:7f:20:d1:b6:7c:c9:57:
         0f:90:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:34 2025 by rpki-client