Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
File:                     3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          Nzs0cUPm8t9pYXIDXKXMvkrtWAyFDFo28QfmOrig95w=
Subject key identifier:   AF:73:66:D2:EF:80:E4:B8:6D:CE:C1:51:0D:0F:C9:B0:B8:8E:6A:56
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       14DE3CBB6582A500070D5EA767E120C5CEB2642D
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
Signing time:             Thu 04 Apr 2024 21:10:42 +0000
ROA not before:           Thu 04 Apr 2024 21:05:42 +0000
ROA not after:            Thu 03 Apr 2025 21:10:42 +0000
asID:                     263395
IP address blocks:        177.125.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:de:3c:bb:65:82:a5:00:07:0d:5e:a7:67:e1:20:c5:ce:b2:64:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Apr  4 21:05:42 2024 GMT
            Not After : Apr  3 21:10:42 2025 GMT
        Subject: CN=AF7366D2EF80E4B86DCEC1510D0FC9B0B88E6A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:c3:58:1c:57:2a:62:d1:fd:d9:e7:15:9e:
                    57:e2:06:27:6b:12:6c:8c:65:a7:39:f6:5a:f0:73:
                    ad:46:b2:95:7a:d2:bc:c2:84:93:16:54:9a:a0:5a:
                    fa:68:c2:e2:13:95:86:8f:6e:e8:b3:0f:06:ca:32:
                    5c:21:e5:e9:08:bb:c3:7e:b7:4d:07:8f:e5:bb:f2:
                    e1:a8:69:85:c6:c7:20:d2:7e:76:f9:cd:28:49:2d:
                    dc:4f:13:75:85:70:23:d8:1a:92:1a:fb:e5:bb:a3:
                    c1:d2:9e:c9:91:cf:24:ec:8c:75:db:84:0a:ec:16:
                    95:1f:03:c4:3e:33:14:b1:55:bd:d6:eb:0e:69:6f:
                    2f:ea:9f:eb:ee:f2:0a:21:cb:86:b8:d7:e4:73:81:
                    cb:41:5b:43:96:22:e1:9f:1d:bc:a2:f2:81:de:29:
                    1b:1e:5b:63:99:0b:68:ca:1f:77:8c:9c:2b:17:f3:
                    5b:a4:2f:c4:a9:f8:b1:64:aa:69:f0:b4:ab:a6:2a:
                    be:7a:f1:94:99:3b:da:d0:97:ab:69:df:c9:ad:a5:
                    db:97:5a:a7:4a:93:52:39:03:d7:3b:e0:b4:03:99:
                    f6:7a:41:05:61:88:d1:45:92:f3:0c:2c:b2:89:39:
                    02:4a:03:3c:18:49:ff:e6:11:6e:6e:f3:0d:4d:92:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:73:66:D2:EF:80:E4:B8:6D:CE:C1:51:0D:0F:C9:B0:B8:8E:6A:56
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:7f:16:16:8d:e1:47:c9:e6:89:b3:a2:c0:64:1c:eb:c1:24:
         eb:d0:f9:d8:95:4a:a7:a9:29:83:f9:af:ef:61:8c:3e:19:f1:
         b9:83:18:29:7e:9c:b2:fd:81:6a:de:74:f9:72:46:6c:1d:f2:
         27:4c:5a:3d:e2:6a:de:6a:76:1b:60:c5:66:c3:17:52:ce:3d:
         0c:f5:ca:b0:5c:55:11:b2:61:dc:5f:61:f8:e5:6b:9d:b7:70:
         21:6e:52:a4:02:fe:a7:cc:4e:4c:52:d0:30:93:59:18:a4:51:
         e7:e2:26:cd:d3:e4:37:4b:eb:35:13:b3:cd:da:b0:1d:27:7b:
         0a:65:0d:39:be:ab:eb:60:d2:3c:92:e7:1e:c0:94:c9:73:aa:
         b8:6c:9b:46:25:49:39:c2:27:f3:69:97:34:53:a2:0f:c4:d9:
         73:31:da:9d:02:0a:68:87:fe:47:f7:3b:01:d1:e7:10:0c:a1:
         95:3e:56:9e:70:d5:57:6b:17:4a:91:1c:27:43:84:d7:7e:47:
         d4:47:ec:ea:e0:b2:4a:66:44:1e:35:ef:c7:69:79:11:58:a0:
         6c:81:1d:32:12:c2:61:ba:4c:f9:6e:c8:80:b5:82:33:31:3c:
         4e:fa:84:ba:99:bc:0a:f7:45:55:72:d3:e5:03:b8:c1:c1:86:
         b0:4c:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org