Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa
File:                     3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa (raw, json)
Hash identifier:          6sePJQFcpPjqdR9mrTzZbtwzYPQrz3Sy9dVOFDqw0kg=
Subject key identifier:   FB:2B:3E:63:1B:75:08:D7:1E:32:9E:9E:10:F3:94:73:FE:02:93:97
Certificate issuer:       /CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Certificate serial:       15CB81A8D28A20A39BD62B3BFEE52FC98D0428FE
Authority key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa
Signing time:             Mon 14 Oct 2024 14:02:56 +0000
ROA not before:           Mon 14 Oct 2024 13:57:56 +0000
ROA not after:            Mon 13 Oct 2025 14:02:56 +0000
asID:                     262473
IP address blocks:        177.47.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl
                          rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cb:81:a8:d2:8a:20:a3:9b:d6:2b:3b:fe:e5:2f:c9:8d:04:28:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
        Validity
            Not Before: Oct 14 13:57:56 2024 GMT
            Not After : Oct 13 14:02:56 2025 GMT
        Subject: CN=FB2B3E631B7508D71E329E9E10F39473FE029397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:aa:11:12:06:85:54:de:17:dd:bb:88:69:
                    09:53:0b:04:a4:7f:f5:d9:31:b9:e2:87:ae:bf:89:
                    0d:39:b0:08:76:f9:04:08:3c:d9:3b:0c:2c:7a:00:
                    67:c3:0b:cb:4e:0f:32:56:19:24:eb:db:4d:76:13:
                    59:b2:3a:0e:08:d2:b3:50:19:1f:cd:49:91:72:4c:
                    6d:36:b5:40:62:5d:55:ff:c4:ae:4b:5c:4c:9f:36:
                    1e:07:90:1f:f7:4c:4e:38:96:9d:89:62:ac:a0:5b:
                    ab:5a:77:a1:f0:ab:2f:74:60:b2:e9:91:06:7b:4b:
                    3a:78:45:78:23:6c:af:40:85:b2:36:4e:fe:97:06:
                    bf:02:9a:b9:0d:3c:c6:88:46:f8:7d:af:43:07:2e:
                    0d:c7:6f:65:d6:bf:b5:7b:6e:86:21:15:1a:53:1c:
                    8d:17:0f:36:a8:00:90:49:ca:16:d5:b5:71:31:9e:
                    2b:1d:29:84:16:db:87:9f:1b:9e:9c:ac:a6:65:7a:
                    75:24:ce:d2:77:a2:6b:e8:c0:1c:47:19:19:95:a0:
                    83:04:03:f5:fa:95:7c:6c:f1:79:10:25:7a:90:16:
                    14:2c:b9:80:27:e7:31:51:46:58:27:3b:ac:a4:a8:
                    38:de:87:2f:e9:c3:b4:d9:ce:15:de:b6:84:e7:7f:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:3E:63:1B:75:08:D7:1E:32:9E:9E:10:F3:94:73:FE:02:93:97
            X509v3 Authority Key Identifier:
                keyid:99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:38:7b:66:1c:1c:08:ec:1f:1e:2a:5d:70:5e:62:f7:3c:5e:
         a4:c6:05:7a:54:00:8c:39:ca:2d:6b:6f:ed:08:2c:33:f9:5c:
         96:60:23:06:ca:d7:69:63:da:c7:32:71:06:0d:fc:5d:ff:0b:
         c3:98:c2:4c:0b:c3:f8:9f:15:f0:d3:54:fe:7c:34:84:2c:62:
         08:a3:d4:73:50:87:88:48:fa:1a:1c:d9:8e:53:4c:23:02:12:
         27:3d:9b:52:70:c3:7f:12:5a:c5:2b:58:f8:75:6d:cc:25:46:
         c5:cf:ea:5a:8d:45:df:19:89:ab:b9:5b:3c:a2:6e:34:66:ad:
         88:74:a8:4f:56:49:2b:17:60:e5:11:50:7f:df:65:b4:6d:1f:
         1d:37:08:71:6e:61:ff:2f:45:d6:5e:4a:78:26:09:ef:b5:c5:
         f5:22:d2:36:60:92:81:c0:6c:43:dd:02:6a:01:55:d2:98:f0:
         80:65:eb:6e:f5:c3:64:27:71:0e:f1:90:f1:33:52:70:e2:61:
         bd:e5:d0:c9:9c:c5:67:80:3b:a2:da:00:63:e7:84:3a:ac:22:
         2b:80:bf:86:e5:66:52:cb:e2:45:d1:74:b2:eb:17:4c:87:a1:
         b7:08:5f:f4:dd:8b:53:be:13:19:63:62:32:a7:27:5f:41:73:
         a4:ed:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:00 2024 by rpki-client on console-ams.rpki-client.org