Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134362e302f32332d3234203d3e20323733363833.roa
File:                     3138372e3132312e3134362e302f32332d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          mbDEwIAPxdGXb/IbvuT2nYmMti6AsIu/Kibd8OWMcZg=
Subject key identifier:   F4:2D:60:BF:B4:91:DD:F8:8F:8A:49:A9:0A:29:95:DF:67:CA:81:A4
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       16E706CC08490FA88F32B410F61BEB2808E6CB63
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134362e302f32332d3234203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 14:00:47 +0000
ROA not before:           Fri 06 Dec 2024 13:55:47 +0000
ROA not after:            Fri 05 Dec 2025 14:00:47 +0000
asID:                     273683
IP address blocks:        187.121.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e7:06:cc:08:49:0f:a8:8f:32:b4:10:f6:1b:eb:28:08:e6:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:55:47 2024 GMT
            Not After : Dec  5 14:00:47 2025 GMT
        Subject: CN=F42D60BFB491DDF88F8A49A90A2995DF67CA81A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:24:97:58:e9:6b:af:89:87:db:94:b7:4a:
                    1c:86:1c:31:b1:9d:c4:57:ba:34:11:89:06:d2:c7:
                    ae:0c:60:db:7a:a7:4c:6e:04:ea:2b:e4:8c:28:6e:
                    e1:09:d8:22:eb:fc:f3:89:8f:04:c8:99:05:93:08:
                    ee:55:c6:95:ad:54:6f:b8:d8:73:8b:04:4b:d9:24:
                    4c:b9:7a:e6:3d:dc:c7:b2:80:23:f4:b6:8b:e8:d0:
                    d6:14:9b:ee:a5:67:c9:8f:70:c7:2d:a2:e3:84:b9:
                    c3:e6:42:18:3f:ae:36:da:7f:c9:43:45:ca:6d:79:
                    cf:8b:54:35:80:35:bb:56:24:10:b7:c3:7b:d7:3c:
                    2a:1a:49:32:ca:77:d0:7f:49:63:fd:3e:95:7c:a7:
                    5c:e1:ae:40:57:fd:66:b1:8d:55:8d:1a:8d:59:4e:
                    d4:81:38:d8:ee:1c:d5:7e:c7:e7:c4:e0:75:d6:cf:
                    0c:a3:2c:e5:84:3a:34:d1:cb:4e:eb:af:57:63:3b:
                    91:8a:c9:55:94:d8:6b:99:37:cd:b9:d0:47:86:44:
                    4c:11:b1:9c:79:89:85:7e:35:37:e7:fb:8c:df:86:
                    99:2d:9b:8b:47:02:b4:1e:07:8a:80:d3:74:59:78:
                    58:02:55:59:58:c9:dd:ae:44:9d:a6:92:88:6b:f9:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:60:BF:B4:91:DD:F8:8F:8A:49:A9:0A:29:95:DF:67:CA:81:A4
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134362e302f32332d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:e9:b0:05:08:5f:3f:a9:3b:c6:68:bc:7a:a9:f9:2e:d3:
         0a:a9:5c:dc:c0:78:ca:42:d9:e2:2e:e4:ce:a8:25:39:93:4f:
         b3:bc:08:bd:f2:75:19:0a:93:11:e4:04:29:b0:94:c3:a8:06:
         25:b9:4a:0f:5d:01:53:b7:ef:ba:a7:ff:2b:62:76:94:cb:d8:
         6e:6f:32:7a:23:9d:d6:90:bf:22:01:f6:0c:de:78:74:1f:bf:
         4f:e0:69:15:e1:30:c2:e7:38:8c:06:a9:d9:d1:8d:9f:a7:0d:
         b1:9f:63:b1:dd:5e:42:45:99:40:0f:17:d6:90:44:38:32:b8:
         4b:8b:39:8f:f5:6c:ac:f7:85:01:bd:b1:8e:b3:84:76:d7:ad:
         b7:0a:73:04:29:87:da:69:a3:14:a2:ab:9b:c4:e0:7f:93:e1:
         dc:4e:91:02:e5:f5:82:ce:41:23:92:27:91:82:4e:85:46:84:
         70:ed:fc:9e:38:f2:c2:e0:84:4f:51:f4:64:fe:76:76:f3:db:
         4a:aa:3a:0d:8a:f2:d9:34:94:6d:3c:6a:69:81:8a:4c:63:7c:
         91:50:82:44:53:95:43:55:46:de:83:5a:b0:da:8d:6b:ec:8b:
         ad:7b:72:be:67:88:ee:da:80:a5:cf:15:36:b8:49:66:e9:c4:
         69:a4:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:43 2025 by rpki-client