Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132322e302f32342d3234203d3e20323731343738.roa
File:                     3137392e302e3132322e302f32342d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          N+yAVPLYDXOiXZi2NX2M58nh01/g/mZ5OheOcgwA/v8=
Subject key identifier:   48:57:84:01:D8:A9:76:F4:71:BA:80:BC:A7:24:9F:A3:C6:77:8E:C7
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       57B7BC34EC8BD7F1C594B7F1E377E0803488EDF6
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132322e302f32342d3234203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:45:15 +0000
ROA not before:           Fri 13 Dec 2024 15:40:15 +0000
ROA not after:            Fri 12 Dec 2025 15:45:15 +0000
asID:                     271478
IP address blocks:        179.0.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:bc:34:ec:8b:d7:f1:c5:94:b7:f1:e3:77:e0:80:34:88:ed:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:40:15 2024 GMT
            Not After : Dec 12 15:45:15 2025 GMT
        Subject: CN=48578401D8A976F471BA80BCA7249FA3C6778EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:8e:80:63:d5:ec:44:2d:cb:0b:63:81:4b:
                    27:08:5a:e3:20:94:32:aa:8e:dd:7c:ba:8d:dc:7e:
                    d2:39:9a:cd:9b:87:dc:f9:9f:d0:8c:5b:7c:8c:5d:
                    a4:0a:68:a5:c5:75:7f:ec:0b:c0:05:f9:0d:e8:f0:
                    45:0a:31:89:a5:69:fb:89:b4:e3:0d:57:4c:82:f1:
                    60:50:a6:30:77:af:3a:d5:ad:ed:38:70:b0:b9:60:
                    86:8f:26:24:d5:de:f1:34:48:4e:54:e2:bc:bf:f1:
                    67:19:b4:59:73:44:01:93:f2:c0:ad:2d:8b:65:92:
                    f0:7c:37:4e:77:08:38:71:3e:e4:c9:a4:b7:f9:43:
                    74:88:90:90:8b:3f:b9:0f:e9:05:f8:71:2a:df:6a:
                    d4:69:a8:df:f2:d2:df:d7:1c:30:a7:4b:8e:cc:b8:
                    df:38:60:fb:f4:35:22:3a:b2:30:9b:1e:b1:28:e7:
                    c6:b5:1c:7a:d2:5d:d2:3c:76:43:23:7a:f1:03:40:
                    aa:86:da:d8:54:d1:ff:75:9e:ac:50:2c:e5:3f:a2:
                    5a:f1:ba:cb:9e:00:05:a2:2a:52:8d:54:05:ae:ab:
                    46:64:c1:10:b0:2b:20:30:13:40:e5:e6:df:ec:ad:
                    7e:b7:1c:d2:9c:19:4d:26:d0:4a:97:52:ce:b7:dc:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:84:01:D8:A9:76:F4:71:BA:80:BC:A7:24:9F:A3:C6:77:8E:C7
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132322e302f32342d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:cb:6a:4d:05:5c:58:be:dd:7b:be:d4:a2:ae:32:85:8d:3f:
         c0:d2:dc:27:06:c0:44:1f:f3:e0:4e:7a:69:01:99:42:24:d9:
         87:21:b2:16:54:34:95:ed:4e:be:47:75:4d:5c:3d:ce:7a:69:
         eb:ea:15:76:c0:1b:0e:63:ac:19:51:a2:67:16:71:bc:05:d6:
         ce:31:3b:ce:83:60:b2:d7:18:55:77:58:52:3d:70:32:bd:30:
         03:8e:63:39:66:97:15:70:3d:ba:ed:88:c3:58:e2:0d:f2:ae:
         27:a8:2f:82:0c:d8:2f:af:6b:91:e4:6e:a6:c1:6d:d0:ec:d1:
         37:46:35:65:af:78:61:ce:b7:95:71:f3:35:01:79:39:2f:e7:
         90:07:d7:6f:74:c2:51:c8:e3:f4:67:d6:7c:09:23:cb:91:5b:
         3d:24:27:13:6a:42:76:cf:52:ea:a5:61:ca:2f:c9:db:30:03:
         b1:75:f6:20:31:69:32:89:c6:ca:0e:62:ec:ed:88:ae:9b:11:
         c8:7e:5b:c8:34:48:95:7d:c7:70:e5:93:63:9f:35:a9:ea:fc:
         88:91:e9:42:1a:80:5c:6f:a7:21:20:2a:22:84:1c:57:49:b2:
         9d:98:bb:9d:9c:c8:73:94:27:eb:19:ac:22:ba:e3:34:23:fa:
         70:73:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:48 2025 by rpki-client