Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          LLBDwIIdmTIBbXK1AtsIeeZRYhZKyC58VTcGCbLoIB4=
Subject key identifier:   D2:33:05:6C:E7:0E:62:F8:9F:D4:0C:A5:A5:DC:E6:16:51:9E:D5:0A
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       3916CE27577635287416669CAF48F6A5E4FC37EF
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:42:24 +0000
ROA not before:           Wed 22 May 2024 17:37:24 +0000
ROA not after:            Wed 21 May 2025 17:42:24 +0000
asID:                     262977
IP address blocks:        177.190.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 01:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:ce:27:57:76:35:28:74:16:66:9c:af:48:f6:a5:e4:fc:37:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:37:24 2024 GMT
            Not After : May 21 17:42:24 2025 GMT
        Subject: CN=D233056CE70E62F89FD40CA5A5DCE616519ED50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:bd:b3:69:4e:a3:73:6a:bf:68:15:d7:92:
                    10:1c:5a:ba:a3:f7:d6:8a:cc:02:19:cf:7c:0b:a0:
                    93:ef:61:15:19:43:25:e0:1a:21:e3:af:81:09:76:
                    d6:8f:ee:b3:e1:00:cd:db:bc:33:8f:47:af:98:83:
                    eb:d8:a1:2a:8c:38:9e:47:24:ec:9e:69:63:a1:df:
                    6f:5b:d4:c2:b9:81:36:b9:ea:0e:98:94:1d:72:84:
                    a9:f7:18:16:4e:96:a9:04:8f:89:5b:51:60:6b:48:
                    c1:d7:fa:34:e2:6f:13:96:23:2c:e1:84:23:1b:1b:
                    5a:9c:61:02:6e:8f:ae:50:d3:88:77:fb:83:93:7c:
                    02:8f:2f:d2:7a:e1:37:67:64:59:1f:27:6d:3f:8f:
                    c8:5e:57:f2:9b:89:f9:eb:b1:f2:80:ed:b8:08:20:
                    11:7c:fb:b1:f6:0c:70:90:95:eb:69:a8:03:88:85:
                    ce:e1:54:7e:75:82:d4:0a:19:aa:7b:34:ce:73:51:
                    19:c6:bd:ad:d0:36:73:3d:7d:9b:13:d2:79:34:07:
                    fe:1b:56:0e:b1:f3:65:ef:43:b9:dc:ef:a6:2a:80:
                    ee:40:55:c7:59:7f:69:c7:55:6e:a3:b5:52:a1:57:
                    3f:0d:55:2f:a0:8f:97:bc:b2:ab:86:46:53:70:e0:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:33:05:6C:E7:0E:62:F8:9F:D4:0C:A5:A5:DC:E6:16:51:9E:D5:0A
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:07:ba:d2:3f:2d:e7:60:1f:15:ee:7a:14:b0:f4:f0:62:
         ce:ac:5a:28:48:12:96:90:f3:8d:65:c1:2a:d3:63:49:85:89:
         d1:95:29:3b:ea:5b:cc:f9:b1:31:53:c6:b6:af:d5:58:3a:18:
         88:bd:80:24:f2:e3:cc:5b:af:c6:9b:9a:ad:a0:e7:35:f1:cb:
         ae:37:32:c7:f6:15:24:c7:6f:aa:ec:48:16:bf:7d:fb:50:b5:
         dd:15:bc:62:7d:5f:6f:6e:9a:f7:a3:68:05:6e:b4:00:15:e5:
         e3:e3:2d:51:27:9c:54:6c:a5:fd:6f:4f:ee:86:e4:64:67:49:
         a3:35:94:80:75:b0:1e:ae:ed:99:bf:59:4f:4a:de:a3:ba:b0:
         54:a5:b2:68:0d:09:de:59:16:f1:70:11:9c:ab:91:2b:75:93:
         a7:fb:c2:d6:43:60:6a:b3:df:06:0e:ee:ea:53:a6:57:79:43:
         4c:d6:72:24:31:2e:dc:bf:8a:3e:d6:43:65:e9:a2:40:82:21:
         c2:37:e6:63:1b:27:66:30:ed:8d:fe:ef:94:49:5f:91:d6:5f:
         1f:46:6d:d4:04:c2:eb:f9:2c:08:1d:8b:1c:36:7c:35:2f:8f:
         8a:9f:17:64:53:f0:64:81:46:70:49:02:42:bf:ed:e2:08:be:
         72:de:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:08:09 2024 by rpki-client on console-fra.rpki-client.org