Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa
File:                     3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa (raw, json)
Hash identifier:          +PZxN2NhukwzhQ59KA3z98wkwfpenS6oe2Il5cj2G9I=
Subject key identifier:   31:94:A7:98:69:99:98:E9:AA:C9:5E:F1:BB:EF:85:96:18:97:ED:7B
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       5E1AE00C9EE3CFA74A8E5A0F97E92FEA7DAB476B
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:07 +0000
ROA not before:           Thu 04 Apr 2024 00:51:07 +0000
ROA not after:            Thu 03 Apr 2025 00:56:07 +0000
asID:                     262866
IP address blocks:        177.12.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1a:e0:0c:9e:e3:cf:a7:4a:8e:5a:0f:97:e9:2f:ea:7d:ab:47:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:07 2024 GMT
            Not After : Apr  3 00:56:07 2025 GMT
        Subject: CN=3194A798699998E9AAC95EF1BBEF85961897ED7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:bf:df:74:4f:82:6e:1b:8e:5d:2d:9f:a2:
                    5b:55:90:a3:a2:ae:0d:a4:38:86:1e:33:b4:05:ce:
                    f3:5c:14:91:7d:5b:cd:4f:95:5a:c3:bf:cd:5b:3d:
                    e2:a5:2d:e9:89:af:06:86:b4:14:41:85:4f:61:46:
                    20:20:a7:80:ae:cb:74:46:b0:1f:80:1f:f9:03:cc:
                    17:3b:4f:84:3c:a8:cb:0e:da:6f:b6:01:f5:4f:f6:
                    9a:d2:0c:ce:fa:73:14:f7:5e:84:64:26:bc:08:f9:
                    39:4e:61:78:0e:33:32:47:1c:25:af:1e:fd:22:f4:
                    6f:e3:23:ae:10:7d:ce:06:e0:9d:d6:42:ea:48:ee:
                    5a:68:20:8a:04:41:fd:91:9f:01:72:3b:49:a7:56:
                    52:ff:5e:1d:fa:90:d2:a1:a8:b7:9f:95:eb:96:1b:
                    0d:d0:b9:88:64:e8:5e:29:e0:c3:fe:60:0f:ec:d8:
                    1c:0e:d8:e2:70:84:b8:5a:07:71:81:54:ce:a2:5a:
                    d5:e2:eb:3a:26:1f:f4:47:0a:43:4a:3b:13:32:18:
                    7c:3d:bb:5d:b2:d4:34:1e:4c:43:6b:82:25:76:d5:
                    fb:8d:c1:2b:f2:72:bb:9a:84:31:60:57:c4:4f:60:
                    a7:f0:66:08:06:90:7b:3a:a2:8e:40:9c:8d:c5:12:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:A7:98:69:99:98:E9:AA:C9:5E:F1:BB:EF:85:96:18:97:ED:7B
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:29:be:15:cb:02:02:e3:ec:e4:fb:ad:5b:d7:06:3e:d5:
         f8:0d:05:ec:16:d5:63:dc:2b:1f:7f:53:f4:b4:e3:55:1f:81:
         b6:0a:07:cf:21:e4:48:98:89:f9:c1:05:0b:73:c5:67:4b:47:
         03:2f:e7:e1:87:15:c7:20:c1:2d:60:06:96:9c:06:16:fd:56:
         db:5b:20:fc:38:7e:9b:01:4e:de:c2:42:3a:9f:29:ee:4b:fa:
         a4:fe:97:a7:94:59:d9:a2:aa:c7:be:9e:12:73:0a:e1:e8:bc:
         4a:f7:8f:7b:18:27:6e:62:fc:74:4f:55:3b:4e:c9:38:bd:e9:
         78:e7:9a:bb:02:8e:84:39:ab:08:a8:fb:21:d0:03:c6:bd:f7:
         8f:a6:40:fa:12:f6:b5:19:66:a0:ff:73:1c:c4:9f:29:22:c7:
         46:2c:50:ad:44:8c:17:68:99:b4:7e:f9:d3:e5:49:51:81:70:
         d4:6a:5a:b0:3c:e0:1e:c0:4f:a5:b3:da:de:8e:fc:e4:3b:85:
         da:74:77:6b:bf:b6:ec:93:b9:d8:b0:5f:4f:07:14:f0:cf:a5:
         2c:14:cb:fd:d3:33:0f:1e:7a:15:9f:a6:af:a0:b6:ce:1c:95:
         d8:61:12:b7:54:03:d2:4a:a0:91:38:71:13:bc:8a:6a:7f:4a:
         84:80:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:53 2024 by rpki-client on console-fra.rpki-client.org