Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232322e302f32332d3233203d3e20323633303837.roa
File:                     3137372e3133372e3232322e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier:          egm91qu0Euo+OCU8UtLaMlLrkvfqZjIV1b+F1vZRd/I=
Subject key identifier:   9A:E3:0F:CA:68:D5:24:73:56:CD:0F:59:52:CC:22:C4:71:D6:0E:09
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       0B311F9D7C19C666FD68763E4450BCBFB00CA37C
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232322e302f32332d3233203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:35:58 +0000
ROA not before:           Wed 22 May 2024 17:30:58 +0000
ROA not after:            Wed 21 May 2025 17:35:58 +0000
asID:                     263087
IP address blocks:        177.137.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 17:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:1f:9d:7c:19:c6:66:fd:68:76:3e:44:50:bc:bf:b0:0c:a3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:30:58 2024 GMT
            Not After : May 21 17:35:58 2025 GMT
        Subject: CN=9AE30FCA68D5247356CD0F5952CC22C471D60E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:5d:5d:e9:55:02:24:78:55:b3:9b:0c:40:
                    6b:c6:09:0b:15:9a:47:2a:70:9a:ad:56:77:81:3b:
                    37:e7:57:0e:79:25:93:d5:72:18:f6:c5:63:7c:2a:
                    c7:c8:4f:6f:6b:8d:0a:59:31:b5:14:c1:9b:db:16:
                    04:0e:46:5b:df:47:7c:87:f9:da:0c:ec:a4:9a:00:
                    08:b0:c4:b5:aa:23:e2:d4:d8:c2:e1:00:fe:1f:dd:
                    bd:9c:ea:88:06:19:e9:e1:a2:95:16:17:27:89:9e:
                    9f:04:6a:37:11:fa:90:cf:e4:d9:21:dc:93:fe:ed:
                    5f:46:cb:8e:9c:f6:66:93:c0:78:6f:d6:bf:a7:2d:
                    9f:98:1d:4b:6a:fc:1a:e0:bc:96:a5:b2:b4:ce:75:
                    6f:26:5d:25:dd:21:c8:03:6a:3c:e3:84:46:8f:6e:
                    ef:f2:3d:b8:71:7d:9d:b7:b5:a1:90:e4:a0:fe:9a:
                    d9:a6:c6:62:c5:d4:c9:1e:07:20:5a:08:23:17:cc:
                    2a:be:70:dd:7a:81:09:67:7a:0c:43:84:27:04:c5:
                    0b:01:cf:46:8c:c2:94:34:b4:59:70:c3:c4:5a:6d:
                    f7:0a:37:56:59:b7:d2:a2:57:9a:f6:8a:c4:83:e0:
                    8d:bf:64:58:41:f3:b4:1b:61:65:e7:e2:61:42:db:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:0F:CA:68:D5:24:73:56:CD:0F:59:52:CC:22:C4:71:D6:0E:09
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232322e302f32332d3233203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:f4:75:cf:e5:58:10:59:78:e0:27:f8:82:4f:6c:3a:93:
         44:2f:a7:2e:3b:d8:f0:83:4a:ff:f4:34:be:fe:72:76:86:f1:
         57:e1:8b:36:53:c9:23:1d:93:93:5f:d7:f4:c4:b0:2b:3c:00:
         c6:f5:e9:4f:1b:c1:34:8f:1e:ed:9e:0a:95:c2:5e:25:2d:14:
         d7:67:19:84:14:39:a9:10:f9:03:fe:b5:48:44:7d:fc:6a:44:
         fc:c8:24:b6:f1:c2:0b:d6:1d:1d:43:2f:18:40:f5:e5:ba:1e:
         64:d6:61:24:6b:59:b2:3b:63:cf:f8:12:1d:d2:83:a3:63:80:
         9d:26:6f:73:cd:31:c5:7c:1f:ad:39:0d:ea:c8:d1:e6:a9:ef:
         09:d5:9e:87:15:26:b5:09:36:c4:3f:da:40:bb:59:41:31:82:
         82:34:16:79:e8:5d:de:8a:01:0f:b0:1c:a0:7a:8f:ac:90:40:
         d6:09:96:de:4b:fb:53:c8:bb:a6:d2:83:b8:d6:a2:e3:fa:8b:
         12:a9:e3:7a:8a:40:fd:c1:eb:64:6f:d6:80:98:56:7b:1e:a1:
         80:1b:78:c2:42:40:93:49:26:49:2f:05:47:7a:3b:38:f1:86:
         fd:71:4a:05:2b:81:b6:24:6a:b6:7e:05:a4:4c:45:b3:99:4b:
         a0:69:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:19:52 2024 by rpki-client on console-fra.rpki-client.org