Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          y5A7P+cCpFQodIKiByyTMGCoVN0IoNwNxmNECR+c91M=
Subject key identifier:   8C:20:FC:77:63:11:3A:BC:90:BE:C3:1F:AF:36:C7:83:92:45:16:41
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       2845A3FFF50B02BFE09E1748F13C3EE22519C356
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:44:23 +0000
ROA not before:           Wed 22 May 2024 17:39:23 +0000
ROA not after:            Wed 21 May 2025 17:44:23 +0000
asID:                     262977
IP address blocks:        177.190.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 02:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:45:a3:ff:f5:0b:02:bf:e0:9e:17:48:f1:3c:3e:e2:25:19:c3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:39:23 2024 GMT
            Not After : May 21 17:44:23 2025 GMT
        Subject: CN=8C20FC7763113ABC90BEC31FAF36C78392451641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:7b:8c:1f:71:fe:6c:6f:88:a8:bf:31:41:
                    e2:52:00:89:89:06:d6:0d:4e:55:f7:1c:b0:c5:9c:
                    0c:39:48:39:38:e5:5e:26:9e:c0:9a:48:fb:62:c8:
                    b3:28:1a:e8:0e:62:09:6b:2a:c1:6a:50:55:34:21:
                    dc:1c:22:1f:e5:64:d3:0a:49:7e:00:bc:6e:ad:b6:
                    ea:d0:af:d3:0e:c5:91:28:df:b9:b7:38:f8:98:17:
                    c9:ce:76:24:4d:b0:7b:d5:47:52:85:df:4f:97:9e:
                    16:e6:cc:d0:9e:c6:9e:45:1b:e0:9c:75:0e:78:dd:
                    2a:e2:b4:ad:d2:96:e0:52:20:4d:e1:61:fd:90:68:
                    61:5b:6a:c6:db:68:67:f5:a2:b6:cf:4c:15:09:fc:
                    82:18:c3:14:98:82:8c:b1:11:86:61:3b:29:6f:f5:
                    a1:58:53:89:5c:bc:20:f3:ad:9d:34:57:f4:48:d3:
                    41:b3:83:46:47:d9:8c:85:5e:6f:0b:46:84:bf:07:
                    7e:eb:58:3a:d2:0f:00:1d:73:60:04:67:4f:5a:c0:
                    2c:2e:23:8d:de:d2:c6:64:82:d0:59:9c:30:5a:78:
                    30:0e:16:87:66:fb:5b:ab:69:9c:e7:cd:f6:8d:2b:
                    73:ef:e9:46:96:09:63:ba:cb:af:85:33:d9:79:e2:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:20:FC:77:63:11:3A:BC:90:BE:C3:1F:AF:36:C7:83:92:45:16:41
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:16:f9:9c:3c:99:ae:1a:f7:b1:29:92:57:ac:bd:ed:e2:62:
         8c:42:2d:71:ba:be:b2:a0:fb:2c:5b:a2:da:2b:0c:2b:fa:a3:
         58:d1:9d:34:aa:a3:46:9b:f4:99:c6:05:8f:0a:14:69:13:18:
         64:d2:e2:c2:31:54:2b:02:82:3b:93:ba:ff:ef:b6:01:d3:f6:
         8c:80:c4:79:cd:5b:cd:fb:cb:29:63:7b:89:fd:f4:e7:f4:d5:
         36:88:65:c6:8f:15:48:1b:e3:86:94:4c:9b:ca:bc:42:2d:f6:
         f3:de:9d:85:f8:8e:34:db:db:5d:3c:13:b4:ce:17:2f:8c:cc:
         6a:23:a4:ef:be:42:20:fc:97:7d:ef:c2:6c:5a:ee:07:60:dd:
         5d:60:f6:31:4e:fe:4d:01:f7:7a:35:ca:88:b2:f0:05:41:03:
         da:6d:29:2a:13:57:5e:bb:ee:b1:2b:e6:a0:46:c5:19:ec:01:
         3d:19:db:63:bf:38:e1:44:45:df:ef:78:4d:d1:e1:ca:3f:12:
         8b:d3:1b:37:c4:3e:2d:5d:63:78:14:08:f6:56:ff:9b:5d:eb:
         cf:b3:d8:d5:b0:7f:42:14:1b:23:15:8e:66:a3:15:ea:10:ad:
         50:17:5a:53:a1:2f:42:99:94:4a:bf:78:ee:66:0c:b8:81:c5:
         d3:a6:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:25 2024 by rpki-client on console-ams.rpki-client.org