Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa
File:                     3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          3pHLTuvc6iKvbcHIu6jieiq2SLDCM3LtykLZmHBrpi4=
Subject key identifier:   3F:8F:94:AF:32:D1:42:A2:E8:82:4F:9E:D9:E8:38:64:5A:A4:68:CB
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       45F3EB77E751443A38BF888BA2F8864A59FFE816
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa
Signing time:             Tue 10 Sep 2024 12:10:28 +0000
ROA not before:           Tue 10 Sep 2024 12:05:28 +0000
ROA not after:            Tue 09 Sep 2025 12:10:28 +0000
asID:                     262952
IP address blocks:        187.61.120.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:eb:77:e7:51:44:3a:38:bf:88:8b:a2:f8:86:4a:59:ff:e8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Sep 10 12:05:28 2024 GMT
            Not After : Sep  9 12:10:28 2025 GMT
        Subject: CN=3F8F94AF32D142A2E8824F9ED9E838645AA468CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:27:c6:d5:fa:f0:45:4f:08:61:00:f4:d0:
                    11:2d:e4:79:a7:87:6b:aa:1d:96:3d:5f:62:2e:3c:
                    6d:4c:04:15:b2:68:55:10:3a:6b:f1:c4:00:0d:ae:
                    5e:f0:4b:30:56:1f:f5:33:07:0e:b4:d3:54:bf:d1:
                    ae:27:46:fb:fa:83:e0:f1:aa:00:6c:a3:d9:a1:70:
                    54:0b:44:fa:85:ba:fa:c3:a0:24:2f:b7:f0:1e:cf:
                    f1:e7:5a:00:06:17:a0:fb:ee:5a:3d:63:62:4f:1e:
                    7c:0a:fe:88:cb:30:0d:5c:dd:ad:10:28:ef:86:55:
                    29:09:ce:0c:90:cc:dc:06:e5:63:5e:68:0f:2c:23:
                    fd:36:21:1b:59:75:15:88:b4:f8:af:d1:c6:b4:74:
                    5d:14:90:e6:52:2d:e8:e2:04:61:ed:15:75:19:c5:
                    3e:a0:69:16:30:80:06:d7:ad:54:02:67:21:44:bd:
                    29:f8:db:99:97:e5:62:c0:4e:96:8d:1d:aa:c5:fd:
                    ad:4e:e7:ff:91:2d:0d:94:12:8b:be:ed:dd:e5:15:
                    6b:d6:63:f0:15:8c:b1:2b:b2:7a:b5:75:04:b6:de:
                    c9:67:d9:48:c2:39:8a:72:d0:c1:a7:c4:e9:d9:e9:
                    a2:22:17:d9:35:d0:bf:2d:2a:f6:14:b9:cf:ec:7c:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:94:AF:32:D1:42:A2:E8:82:4F:9E:D9:E8:38:64:5A:A4:68:CB
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:f6:19:d9:0b:f7:10:d8:ac:33:70:92:cc:79:bc:02:9e:
         13:f4:b2:49:ff:71:f8:bc:12:ee:98:cf:8c:c2:d6:ab:10:36:
         e3:46:19:02:dd:b8:86:bb:2e:35:ee:d2:93:a1:81:df:e8:93:
         8d:c5:20:9d:e6:b7:b5:b6:83:57:91:60:85:4e:31:04:31:98:
         76:8e:99:f4:5f:e9:0e:5f:3c:05:e2:03:8a:b4:7e:76:22:9d:
         b7:a6:30:4e:ae:d4:a5:11:f6:da:20:7b:e9:17:4b:c9:5e:51:
         8b:3d:0b:01:1a:1b:7c:e0:4b:dd:42:53:9b:9b:23:2b:a8:00:
         90:31:0d:1d:21:cb:f7:7d:85:6c:a9:77:3d:79:1a:7d:84:82:
         fc:72:c7:10:22:0f:3e:36:06:a6:8c:8c:5a:f0:7a:e4:d5:58:
         42:00:5c:fb:2d:83:c8:57:85:68:5e:76:76:6e:1f:e1:19:f3:
         68:c3:71:be:72:7b:e7:5a:e0:f0:38:ee:17:55:bb:0e:bb:a1:
         03:6b:5c:c4:4b:57:98:87:6f:2b:25:2a:c5:e9:30:c4:93:28:
         4b:01:58:64:e3:11:2a:c8:04:95:39:c2:f8:6f:ab:3a:27:35:
         ef:18:77:e0:4a:54:47:5b:61:c1:cc:b5:3e:81:17:9f:97:9c:
         c6:57:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:50 2025 by rpki-client