Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          VjdptgIrQfkgM6BLAcZ9NRoN1eIlN4+eoT39PMu9+ZU=
Subject key identifier:   4E:C5:54:0E:E3:AE:43:A2:C3:B7:F8:9E:92:47:FB:E6:B6:D4:CD:4F
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       67F639F72A0E12CA9B4505B9A29F22837BDA463C
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
Signing time:             Mon 03 Mar 2025 12:19:53 +0000
ROA not before:           Mon 03 Mar 2025 12:14:53 +0000
ROA not after:            Mon 02 Mar 2026 12:19:53 +0000
asID:                     264036
IP address blocks:        143.137.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f6:39:f7:2a:0e:12:ca:9b:45:05:b9:a2:9f:22:83:7b:da:46:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Mar  3 12:14:53 2025 GMT
            Not After : Mar  2 12:19:53 2026 GMT
        Subject: CN=4EC5540EE3AE43A2C3B7F89E9247FBE6B6D4CD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:cb:5b:24:11:38:c6:ed:b2:f7:f4:4f:36:
                    69:0b:05:47:18:86:63:9c:0e:b6:5e:37:f7:55:51:
                    a6:31:cf:dc:e0:f6:d0:7a:40:dc:8d:ac:bd:99:ee:
                    ba:d5:36:c0:6e:09:ff:72:c5:bd:e7:8f:92:17:52:
                    51:b6:b0:ee:17:2c:40:91:f3:93:0c:5f:ee:07:ba:
                    49:f4:d0:08:1b:69:80:88:1e:90:47:2c:bb:58:04:
                    92:42:48:ee:6c:d6:c9:fb:39:df:37:e4:aa:bb:01:
                    ee:6b:49:59:f6:cd:23:f7:19:d5:7f:e2:3c:fd:9f:
                    8d:91:8f:8f:d8:d4:f7:82:14:13:1b:af:8a:87:dc:
                    80:47:e7:ce:17:6c:92:a9:7f:6a:af:53:f2:81:a7:
                    22:7e:d4:cc:35:b7:6a:eb:32:5c:59:f5:42:bd:1f:
                    0c:31:cb:80:2e:0e:9b:1f:f0:ab:f9:80:d4:a2:b0:
                    70:c5:c4:5b:ed:7a:21:d3:b4:ab:34:54:96:6f:81:
                    5f:e0:83:b2:69:65:2e:54:ac:57:60:95:84:33:d6:
                    a1:b9:95:27:67:db:bd:9e:47:20:79:3d:0f:bd:8b:
                    43:cb:c9:ab:21:8a:db:5b:d4:e2:91:ca:57:c3:15:
                    27:06:6d:94:fb:34:44:d7:1e:c2:70:52:48:20:61:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C5:54:0E:E3:AE:43:A2:C3:B7:F8:9E:92:47:FB:E6:B6:D4:CD:4F
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:7e:de:f0:a9:72:84:09:38:78:d7:91:96:d7:50:b7:d3:
         5c:50:31:7c:ab:8c:98:21:be:0f:94:ea:78:59:6d:2f:42:54:
         bc:2f:d7:cc:1d:8e:eb:cc:da:5f:ad:ff:29:ab:80:fa:64:8a:
         dc:60:ad:68:11:ce:3c:45:bb:3b:b9:b1:30:0b:bb:b9:20:2c:
         d7:b8:a8:67:2d:26:e8:0c:06:fe:e1:e1:08:3a:1a:4c:9c:52:
         48:bc:34:3c:6c:2e:2d:53:86:b8:41:76:fc:7c:7d:f1:e9:54:
         cd:2a:0b:7b:ec:91:60:d6:b1:26:62:eb:45:18:15:90:89:ab:
         8d:13:04:c0:ea:30:ed:ee:74:01:56:20:76:1b:34:4e:8c:88:
         54:6f:61:c9:d9:7c:6c:1a:d9:a9:77:61:8e:cb:cb:93:83:c4:
         c5:00:34:7e:2e:13:d5:07:63:aa:0a:50:7c:21:f6:a5:24:57:
         43:f9:d4:11:7f:ed:ee:7a:05:44:04:d5:84:4a:c2:4e:c7:a4:
         17:5b:e4:b3:f8:b9:cd:f3:fd:f7:f3:47:7c:8b:7a:30:92:9d:
         f0:7f:55:20:0c:81:75:da:9f:84:1a:12:0a:f8:a4:ee:c5:6b:
         0c:1f:bc:18:83:4f:49:06:04:53:d7:c4:b6:67:77:e7:de:8f:
         57:d3:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:22 2025 by rpki-client