Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
File:                     3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=
Subject key identifier:   63:FC:14:37:70:AC:E5:38:9F:9B:CB:9A:5E:4F:97:84:EA:0D:63:D1
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       2A01BF50C70AFEE596833086EEEEDFB28E5DB464
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
Signing time:             Thu 06 Mar 2025 21:44:51 +0000
ROA not before:           Thu 06 Mar 2025 21:39:51 +0000
ROA not after:            Thu 05 Mar 2026 21:44:51 +0000
asID:                     263395
IP address blocks:        177.125.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 14:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:01:bf:50:c7:0a:fe:e5:96:83:30:86:ee:ee:df:b2:8e:5d:b4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Mar  6 21:39:51 2025 GMT
            Not After : Mar  5 21:44:51 2026 GMT
        Subject: CN=63FC143770ACE5389F9BCB9A5E4F9784EA0D63D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:67:fb:09:06:6f:fb:4e:c6:75:95:b3:2d:
                    cf:f3:fa:e7:a9:7f:c5:b0:61:de:b6:fb:8e:f1:08:
                    83:83:5a:05:54:9e:b9:7c:af:c6:85:cd:48:53:9c:
                    bc:75:fe:a9:ab:eb:9c:c5:3d:0e:41:f4:e0:b4:90:
                    48:57:d8:33:d5:4b:19:34:5e:68:1c:71:41:ed:a8:
                    8c:ef:f0:1b:93:79:b2:ec:e1:13:00:36:c7:8f:ae:
                    30:ba:25:c9:cf:60:a2:37:25:05:e4:da:b0:ac:0b:
                    02:90:59:58:84:8d:95:87:23:30:c7:5b:87:49:4a:
                    97:d5:c0:e9:5f:d9:4b:9e:a9:7d:c8:c2:e3:98:d6:
                    cc:84:4e:c7:72:ec:2f:00:d4:28:e0:3d:ff:5e:e7:
                    bf:b4:0a:d4:54:1c:c8:71:46:cf:72:75:32:e1:6b:
                    1e:d7:ac:5f:a3:0f:c5:27:a7:b0:56:55:e4:07:0a:
                    3d:61:ef:e0:bc:30:2f:10:13:fd:24:5e:c5:2a:f4:
                    7f:5b:a2:ac:13:11:02:f7:11:f8:17:ff:4f:a0:4e:
                    41:10:5b:1f:ad:06:06:da:95:02:04:53:14:de:68:
                    e3:98:46:93:a1:9d:fd:67:18:67:0d:f1:41:c8:a4:
                    66:d6:3a:56:cd:83:7a:05:7c:47:f3:ef:4a:2c:dd:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:14:37:70:AC:E5:38:9F:9B:CB:9A:5E:4F:97:84:EA:0D:63:D1
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:49:df:e9:9a:7b:be:b5:58:b5:c2:15:c7:fb:0b:f0:9a:
         e1:e0:eb:62:d0:74:61:d8:c6:bd:a9:1c:81:ef:52:45:00:44:
         61:f1:4b:e1:e6:cd:43:39:a5:e5:01:84:1b:60:15:d7:2a:d6:
         7c:65:1a:29:94:b3:28:5b:34:8d:61:33:9c:20:22:7f:53:f0:
         7d:6f:ec:70:09:7c:0d:68:72:4d:47:af:27:9c:3a:a5:8a:a9:
         fc:66:ed:f8:ef:3b:03:98:36:80:cb:08:fa:aa:4f:5c:32:f1:
         4b:4e:8b:0a:df:d6:30:1a:5b:45:e0:02:1d:86:87:66:24:c3:
         66:bb:70:0e:4a:0d:4e:cb:58:67:79:27:4b:8c:96:a3:9b:fc:
         33:92:04:0a:97:7b:5e:62:1d:ce:d9:5a:87:26:ea:33:54:a8:
         42:08:ca:00:63:f8:75:6e:cd:9c:7c:5b:3b:62:5f:73:0f:f4:
         b3:9b:47:c8:ff:31:5a:63:c2:38:d4:92:32:b8:70:30:f5:ed:
         18:de:09:e8:f4:c1:c3:4b:99:c8:b2:ed:29:58:3d:84:82:e6:
         71:14:10:07:40:80:b8:19:e6:53:70:69:71:70:d9:7c:46:63:
         b4:77:d6:ad:cb:cf:82:cb:a2:57:21:fa:39:43:17:4c:d1:d8:
         28:23:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:24 2025 by rpki-client