Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
File:                     3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          MHuYShzW0d63NussS7cJPuWHpEyOGSQ/p79IQLQp6r8=
Subject key identifier:   45:A9:25:A6:F1:85:21:FB:5B:FC:B9:53:A3:F5:E4:57:DD:02:98:0A
Certificate issuer:       /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial:       136672705951F39BFF580576A460237C04A15360
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
Signing time:             Mon 28 Oct 2024 18:33:42 +0000
ROA not before:           Mon 28 Oct 2024 18:28:42 +0000
ROA not after:            Mon 27 Oct 2025 18:33:42 +0000
asID:                     28299
IP address blocks:        177.12.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
                          rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:66:72:70:59:51:f3:9b:ff:58:05:76:a4:60:23:7c:04:a1:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
        Validity
            Not Before: Oct 28 18:28:42 2024 GMT
            Not After : Oct 27 18:33:42 2025 GMT
        Subject: CN=45A925A6F18521FB5BFCB953A3F5E457DD02980A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:3c:f6:42:a7:0f:c5:91:15:73:c8:99:df:
                    61:88:65:55:3f:1f:4d:7d:1a:77:4b:79:13:51:19:
                    3c:a8:69:16:cc:ec:e5:ec:1d:c6:78:23:52:01:8e:
                    a3:90:d7:4a:3e:4c:4f:c5:31:b8:5e:b8:e3:1f:de:
                    0b:10:68:dd:20:a0:b8:ba:bb:fb:1b:50:75:24:c0:
                    6f:fc:34:27:95:d4:f1:72:ec:7a:ee:c7:06:0f:47:
                    33:76:51:4d:ae:5c:10:27:7a:1d:80:da:5d:ba:6d:
                    ae:bf:b7:e7:92:3e:89:82:92:f5:82:33:f5:d7:06:
                    b0:a2:1f:ca:78:04:36:be:03:11:65:78:64:c3:92:
                    b9:fc:c7:66:6d:da:01:d6:47:b2:14:b5:7d:40:5e:
                    db:ed:ca:a1:a9:3b:63:4f:18:7a:1b:52:d1:84:0e:
                    18:0b:a4:0f:f3:48:d5:4c:c3:a2:18:c5:43:44:6e:
                    6f:af:aa:27:84:58:f6:6a:76:01:2c:19:f5:3d:e9:
                    45:90:95:b1:20:b4:1e:89:da:ae:7a:78:6f:3f:0a:
                    d1:4a:6c:db:f1:9a:51:46:40:93:71:bd:31:06:c9:
                    d1:26:b6:5b:7b:d8:f8:ae:1c:0d:1c:dc:eb:0d:0c:
                    6f:47:64:ac:13:78:03:07:9c:79:3e:5a:8b:72:b1:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A9:25:A6:F1:85:21:FB:5B:FC:B9:53:A3:F5:E4:57:DD:02:98:0A
            X509v3 Authority Key Identifier:
                keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:66:59:e9:15:87:bf:24:23:ca:27:89:47:ea:9f:18:9d:15:
         71:3e:9a:1f:94:8f:9c:46:b7:e2:8d:35:65:1d:44:94:bc:c1:
         c5:4f:1b:31:74:03:a9:16:b9:ae:4c:69:2e:0c:a5:49:e8:9f:
         79:67:06:6b:91:5b:44:da:ff:35:af:f0:04:17:57:7d:7c:6f:
         30:37:58:eb:ed:d7:33:dd:d8:c3:9e:d8:b4:01:86:84:ff:bd:
         92:c3:e1:18:3e:38:bb:fd:98:d2:b7:16:58:fd:3a:bc:5f:01:
         f9:59:ec:43:f5:26:db:15:17:cc:72:e2:8c:48:62:75:72:20:
         86:4e:70:c6:8d:fd:4f:cf:62:98:f5:69:15:ba:7a:93:29:57:
         7b:3e:ee:0d:f3:6a:39:e3:14:0f:f2:35:8c:df:fe:4c:00:46:
         3b:87:45:c4:6e:75:fc:b0:23:0c:aa:3d:fc:a1:cf:f7:75:81:
         43:98:a7:7b:5e:c1:2d:55:9a:ca:4b:08:88:3a:49:78:b2:2c:
         8c:7a:5c:42:cd:69:15:21:e2:58:b3:8a:a2:6f:a2:3e:77:d4:
         8e:91:8b:30:5e:cc:81:3f:ae:2d:78:fe:a1:24:4d:59:75:f6:
         f7:46:4a:16:13:46:3d:ce:42:12:2d:8c:aa:3f:21:b6:1b:97:
         dd:9d:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:42 2025 by rpki-client