Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39352e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e39352e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          P1RTPqZvirnz6oK6ShooYrfIEHwdHpHlbr8PTKvj9hk=
Subject key identifier:   75:BB:BD:FA:90:D9:91:A0:7E:17:58:81:96:4A:12:F3:DF:4E:C6:8A
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       4EFB11200AE28FC3DF2570F52041FAC0777FC77C
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39352e302f32342d3234203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:43:17 +0000
ROA not before:           Wed 22 May 2024 17:38:17 +0000
ROA not after:            Wed 21 May 2025 17:43:17 +0000
asID:                     262977
IP address blocks:        177.190.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 02:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fb:11:20:0a:e2:8f:c3:df:25:70:f5:20:41:fa:c0:77:7f:c7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:38:17 2024 GMT
            Not After : May 21 17:43:17 2025 GMT
        Subject: CN=75BBBDFA90D991A07E175881964A12F3DF4EC68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:50:74:66:4e:b5:04:9a:b3:4d:6e:4c:72:
                    37:db:14:44:9b:87:02:31:85:64:c9:e3:96:99:c9:
                    4c:d4:8a:db:3a:41:61:6e:88:e5:34:ad:46:ac:3c:
                    3d:18:cd:2c:d9:73:d6:a5:22:e4:83:aa:13:7a:00:
                    7f:f4:4a:29:1a:e5:4a:53:22:ef:84:c8:53:26:54:
                    91:fe:c8:55:48:02:6c:cc:e0:99:ee:98:c3:91:47:
                    b9:69:b0:5b:45:f0:9f:d6:66:db:23:cf:33:bc:88:
                    c2:5a:55:15:9c:3f:d3:9b:03:5b:4b:cb:42:eb:4f:
                    b6:1b:57:0a:93:3c:a1:fa:99:52:0a:87:80:8e:99:
                    16:58:cf:09:42:1e:7b:c2:c1:85:8e:34:21:e5:47:
                    99:b3:c6:12:fc:9b:cd:01:35:14:e9:5e:fd:ee:8f:
                    cd:99:35:39:1a:09:8c:f5:3a:87:26:51:b0:29:ba:
                    0d:17:ff:fd:ae:84:a0:d4:47:bf:b4:f3:0a:f1:9b:
                    12:c8:c3:7a:92:58:0a:e5:66:8e:81:31:61:a0:06:
                    fa:92:cb:a5:df:e5:f9:28:e4:de:23:69:72:dc:6c:
                    04:e4:cb:47:b3:cd:05:05:85:3c:bc:51:78:e3:2e:
                    1a:02:04:1d:94:c0:91:5d:d1:e0:f7:86:45:f7:0c:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:BD:FA:90:D9:91:A0:7E:17:58:81:96:4A:12:F3:DF:4E:C6:8A
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39352e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:0f:f7:95:4d:73:f0:f7:4d:92:8f:1e:f4:b0:d4:ef:e1:
         6e:26:60:15:27:66:89:2e:4a:47:f4:b2:ce:30:eb:84:81:4b:
         bc:6f:ae:2c:6e:3d:99:29:b1:46:82:ee:4c:0f:d6:b0:39:5d:
         e0:5f:7e:4a:74:13:30:01:45:09:c2:a6:28:f2:71:00:75:b6:
         bb:98:2b:e1:f1:b7:94:21:ee:25:ca:4a:8f:37:d3:e1:5c:4d:
         0c:06:77:47:3f:4f:db:d0:d0:3c:bb:a5:97:c1:f0:46:d0:90:
         50:18:ba:fd:52:6a:6f:cc:06:50:65:36:c3:7c:77:da:26:e7:
         3c:8b:94:0b:f2:88:71:9f:43:ce:2c:f4:de:6d:ba:46:78:aa:
         00:91:f5:b0:69:b9:81:3c:96:94:4b:69:35:40:fc:c1:90:fa:
         2c:a9:66:7f:80:59:aa:2b:63:60:15:9d:93:c5:3c:3f:bb:36:
         98:70:84:ca:74:14:72:c6:32:4a:46:8a:65:46:72:7d:6f:c3:
         78:46:89:0a:21:23:d1:26:9b:5e:87:40:ff:2c:16:3a:43:31:
         c1:54:0d:30:e2:7d:4c:2e:ec:69:99:b6:2c:46:a3:3a:aa:60:
         93:1e:dd:60:51:72:d6:d7:7a:ff:cb:3d:17:b5:e4:7c:ca:e7:
         a3:19:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:25 2024 by rpki-client on console-ams.rpki-client.org