Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32332d3233203d3e203532393332.roa
File:                     3137372e3138352e3131362e302f32332d3233203d3e203532393332.roa (raw, json)
Hash identifier:          gLU00Yhg7goy7bX+IHuVPmmnQXS+pxLZW/0sUyFAJgs=
Subject key identifier:   BC:DE:D6:3A:2C:2A:E4:2D:9C:10:4C:C9:C4:29:18:48:AB:60:2C:86
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       2C899891DF868CE9FFAEE1EE4A45D866161D7339
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32332d3233203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        177.185.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:89:98:91:df:86:8c:e9:ff:ae:e1:ee:4a:45:d8:66:16:1d:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=BCDED63A2C2AE42D9C104CC9C4291848AB602C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:9a:ad:a1:fa:c4:b2:e3:bb:2b:fd:21:8c:
                    36:2f:56:77:be:2e:36:eb:e2:3f:70:7a:10:21:4c:
                    52:c6:23:31:95:90:17:e9:f3:45:fb:84:e2:01:9f:
                    ee:7f:a3:b5:87:ed:ee:4d:fd:43:cb:dc:2c:95:e4:
                    13:e9:26:b9:f8:01:f3:16:5c:49:8a:41:7f:57:a8:
                    1e:fa:b6:ac:0e:6d:66:81:fd:7b:84:a3:28:74:60:
                    fd:35:dd:30:15:fa:fd:91:7f:bc:6e:54:2b:79:ad:
                    05:69:02:26:60:d9:01:cc:0b:f2:d6:7a:44:5e:54:
                    34:df:c7:6f:d5:8b:d3:2a:60:93:d3:5a:75:c6:05:
                    a1:e0:b6:20:9f:a2:0a:36:93:ba:a6:9d:66:a4:19:
                    f3:50:cc:ba:7d:d7:8b:b0:5b:f0:7f:fe:b6:83:5d:
                    fc:47:bc:7b:a4:30:10:ea:db:00:f8:4b:ef:1e:54:
                    04:21:f8:c0:83:1c:b7:5e:1b:41:d5:0f:6b:e6:89:
                    62:85:03:61:44:70:15:13:7b:26:47:de:39:53:2e:
                    9b:c8:b4:91:85:3a:05:46:1f:59:e1:f1:62:c7:0c:
                    32:95:b9:cb:a9:aa:20:6b:90:36:98:17:3a:b5:b8:
                    31:e9:0b:4b:bd:88:fc:1d:23:70:dd:5f:f8:25:d2:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:D6:3A:2C:2A:E4:2D:9C:10:4C:C9:C4:29:18:48:AB:60:2C:86
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32332d3233203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:08:e3:be:95:8b:1a:4d:82:88:81:c4:9a:14:b7:d7:e2:5c:
         f8:dd:de:c6:5c:88:48:4d:3b:96:99:3d:bd:cd:b5:20:c8:90:
         7f:66:74:c0:0a:30:95:ec:60:b8:3c:6a:c1:40:25:cf:30:a3:
         e0:27:30:ae:d4:1f:de:3c:e9:cb:12:8f:42:95:85:7f:6f:c0:
         f5:cf:f5:c5:4f:bd:49:cd:f2:0d:eb:3a:27:24:31:5b:39:d1:
         82:6c:34:58:b4:12:43:b1:b7:76:de:46:d9:d7:39:21:15:a9:
         4f:d3:50:65:5d:dd:1a:be:de:51:77:b2:4b:ad:d3:98:69:ae:
         c5:f3:86:2e:e0:86:1b:a7:de:13:cf:1c:45:3d:9a:10:b3:e5:
         4f:ec:53:b0:df:cd:a2:12:b5:9b:4d:ee:08:64:4d:b6:01:cd:
         b2:83:32:c0:50:f8:9f:c3:3f:8f:3d:1a:5e:ea:b8:0f:f9:b4:
         a9:66:e3:13:26:f6:9b:53:45:15:0b:1c:95:d8:1a:63:cb:5d:
         69:35:be:18:fd:cf:26:83:55:36:ec:33:a6:ea:e3:0b:b9:cc:
         3e:57:52:6d:8c:94:35:4e:09:8c:ae:19:ef:b3:52:96:01:5a:
         ec:ee:53:49:a2:e1:5f:86:22:f6:d5:73:1e:58:01:01:31:24:
         aa:b8:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org