Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa
File:                     3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (raw, json)
Hash identifier:          BaLJaGy3wOQXhHr22UunT9BmFWB4S8cypA1Jr43re14=
Subject key identifier:   48:AC:CF:CA:49:28:0B:EF:B8:66:B0:21:03:87:1B:7D:8B:B2:92:73
Certificate issuer:       /CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
Certificate serial:       4881629DC1B73477734B19F31116FE3BE0511B73
Authority key identifier: 38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa
Signing time:             Thu 04 Apr 2024 14:49:09 +0000
ROA not before:           Thu 04 Apr 2024 14:44:09 +0000
ROA not after:            Thu 03 Apr 2025 14:49:09 +0000
asID:                     262731
IP address blocks:        177.190.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.crl
                          rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:62:9d:c1:b7:34:77:73:4b:19:f3:11:16:fe:3b:e0:51:1b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
        Validity
            Not Before: Apr  4 14:44:09 2024 GMT
            Not After : Apr  3 14:49:09 2025 GMT
        Subject: CN=48ACCFCA49280BEFB866B02103871B7D8BB29273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:1b:73:67:62:d6:02:a2:9f:b3:fa:f4:a5:
                    5d:dc:0f:98:c4:17:2c:b7:a7:fa:2e:f7:6d:1f:00:
                    e0:8d:fd:72:db:f5:ac:15:cc:85:a9:fd:d7:cb:ab:
                    91:14:49:ff:91:77:5e:63:45:62:4b:69:82:a9:cd:
                    55:1d:53:7f:da:ab:52:df:c3:21:e9:85:be:da:e9:
                    19:2f:a6:43:a1:38:4d:7f:4d:01:99:f0:dd:e3:33:
                    d6:ac:c6:44:4a:c3:4c:86:d5:9e:7d:68:25:7b:d2:
                    ec:3c:03:81:bf:e2:2b:85:a8:24:4b:4b:f5:be:3d:
                    7e:c4:0d:f0:5e:d7:89:c2:1b:c6:65:7e:09:17:1a:
                    33:56:c1:f4:b7:96:80:a3:5a:2b:d8:19:a9:21:a6:
                    7b:84:43:0b:2f:ba:ad:d7:a2:87:5d:c7:85:49:cc:
                    3a:61:75:5d:74:5f:c9:72:6a:14:89:3c:94:f9:66:
                    ac:39:11:ce:0e:46:fb:03:8e:4e:5d:00:23:e8:e6:
                    2e:fe:f9:44:07:c3:75:55:3a:d3:68:37:c9:28:18:
                    e7:26:9b:7e:ee:85:f3:8b:26:b1:20:87:34:d1:92:
                    5c:78:12:26:c7:c3:4a:17:3d:89:66:1b:db:63:40:
                    1a:e1:cb:ee:90:47:d7:df:49:bf:36:f5:90:57:e7:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AC:CF:CA:49:28:0B:EF:B8:66:B0:21:03:87:1B:7D:8B:B2:92:73
            X509v3 Authority Key Identifier:
                keyid:38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:79:48:24:83:c6:d6:6a:64:3f:ac:6b:2a:95:ad:d8:ff:
         a3:cb:4f:a1:11:79:e2:d2:a8:a5:7e:2e:f0:3e:27:36:ba:f5:
         6f:f4:cc:9a:8e:f4:a4:4f:10:7c:ab:32:1c:4a:18:b7:e4:33:
         90:4c:29:d9:6b:d3:9c:77:f5:6e:be:1d:36:df:cc:aa:3b:5f:
         48:46:dc:1a:3d:15:b2:0f:65:ce:36:33:29:f7:6d:cf:48:db:
         68:0b:9d:7c:7a:92:eb:75:b1:e3:f1:95:25:66:f4:d1:70:8f:
         67:ee:86:45:63:4e:39:41:a6:99:d5:59:d6:59:90:3f:92:4c:
         08:73:e3:67:53:fc:9a:fd:60:42:35:d8:bf:84:26:9f:2a:ef:
         30:a3:55:6f:1e:05:f2:72:dd:64:22:59:b6:53:ab:9e:40:00:
         2c:a3:92:cd:f3:2b:7b:ee:55:e7:13:a1:e2:07:41:c9:07:2b:
         f9:79:d8:b0:22:80:81:db:5b:dd:a8:f0:9a:f6:1a:b9:dd:fd:
         6e:ae:0f:18:ed:3c:c0:3c:67:e3:53:4b:44:a8:5e:2e:e1:9c:
         4a:2e:52:07:58:0d:9d:a9:6b:f1:1c:67:7e:87:3c:e0:f3:f1:
         50:9e:5b:91:a2:df:48:4d:23:0a:ce:9d:95:96:fd:8b:e5:4d:
         4b:48:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:26:11 2024 by rpki-client on console-ams.rpki-client.org