Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32322d3232203d3e20323730383638.roa
File:                     3137372e32332e34382e302f32322d3232203d3e20323730383638.roa (raw, json)
Hash identifier:          MGkrEzLP28nuUNXgRLz1FbXsCNfo62gTigkAGjJE3Jo=
Subject key identifier:   32:07:B4:4D:4E:5D:87:A4:21:D9:1B:CA:2B:2E:34:D7:02:51:8F:88
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       1C9F1848F6F232FDD16A93D6D0C37396FF937BC7
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32322d3232203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:29 +0000
ROA not before:           Wed 03 Apr 2024 21:34:29 +0000
ROA not after:            Wed 02 Apr 2025 21:39:29 +0000
asID:                     270868
IP address blocks:        177.23.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl
                          rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 15:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:18:48:f6:f2:32:fd:d1:6a:93:d6:d0:c3:73:96:ff:93:7b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:29 2024 GMT
            Not After : Apr  2 21:39:29 2025 GMT
        Subject: CN=3207B44D4E5D87A421D91BCA2B2E34D702518F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:0c:d1:98:e0:d1:47:8b:22:02:24:80:08:
                    4f:d5:0c:d6:a1:41:2b:7f:d2:6e:d5:84:40:1d:fa:
                    fb:d0:8a:48:84:7e:c5:4f:f3:88:9f:2a:b7:c6:99:
                    f9:81:cc:97:89:11:09:70:6e:50:87:6e:bc:36:61:
                    a1:97:8e:1c:63:15:9b:65:b3:80:e5:b8:c8:17:e8:
                    b6:19:fa:fe:b3:90:6b:ef:9d:27:50:23:dd:81:4a:
                    68:03:87:62:e0:1e:83:5e:f8:92:dc:4c:9b:16:87:
                    7d:81:9a:9b:35:53:db:0e:17:c8:34:cf:35:81:86:
                    be:77:79:57:bb:b6:73:f5:3f:a2:3c:32:43:a4:fa:
                    42:1a:f7:44:d6:6e:37:73:b5:f7:4c:3b:f0:24:2b:
                    71:c5:ec:e7:f0:57:ef:0a:ea:71:4d:55:ef:c1:88:
                    96:12:17:72:ee:37:24:69:13:fa:1e:48:94:4e:b6:
                    6b:08:ba:f9:4a:9a:39:69:5b:4b:88:c7:44:ac:df:
                    31:c3:9a:e7:0f:55:84:33:fa:e1:db:5f:3e:8b:f3:
                    31:79:06:21:64:d3:d7:8f:f1:78:22:02:b8:c8:7c:
                    70:6a:26:ee:61:d1:aa:57:be:42:ff:43:83:40:e3:
                    50:8d:40:ec:40:28:e9:39:f0:cb:74:f3:f4:90:f3:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:B4:4D:4E:5D:87:A4:21:D9:1B:CA:2B:2E:34:D7:02:51:8F:88
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32322d3232203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:e9:d4:37:ce:12:d2:39:e9:6f:9f:19:a2:16:33:84:2f:
         f9:3a:7b:e1:dc:7b:ec:3f:43:1b:fd:20:7a:39:3c:63:90:60:
         14:35:e7:db:34:3a:61:05:a9:12:4f:ad:bb:fc:f0:ec:35:ad:
         7f:da:c8:28:00:0e:7e:90:df:d3:b5:7e:b1:5b:8c:a8:b4:68:
         67:37:61:a9:47:36:1f:ce:93:2d:ab:04:04:73:87:60:bf:96:
         9e:8f:a7:7f:94:71:4f:b6:0d:68:d5:f5:74:b9:90:0d:87:e8:
         20:7b:aa:87:c7:a2:11:2b:38:7d:a1:6f:ed:32:73:7a:3a:63:
         e8:37:26:40:f4:68:a6:e4:55:2f:91:ba:c1:c0:b7:fe:6c:7f:
         85:46:f6:de:1c:eb:3d:fb:da:e6:e6:31:92:fd:c6:05:54:78:
         88:f4:25:43:f9:ff:8f:68:f7:55:bc:ef:0f:35:b9:76:13:2b:
         a5:9f:fa:62:73:6c:13:ce:b9:b2:80:39:39:48:b5:7d:66:f9:
         da:22:5b:09:14:3a:d4:6a:7f:59:0f:9a:94:88:c1:14:78:b6:
         63:c2:e0:2d:a6:69:89:45:ee:f3:7f:33:c1:ad:f6:19:0e:e8:
         f2:ec:69:6a:04:bd:32:43:f6:5a:36:0d:1e:57:14:b2:83:d5:
         9b:1e:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:26:28 2024 by rpki-client on console-ams.rpki-client.org