Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
File:                     3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (raw, json)
Hash identifier:          jSL56aFw9lMRvXdRQIYSbVbUncfL2hW0C1aOGzj5R38=
Subject key identifier:   ED:82:FC:E8:7C:BC:AE:41:18:32:49:68:5C:8B:B2:11:47:E9:96:46
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       6E1073031FD37C61FD95EC0B24F49511F45F1D73
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
Signing time:             Thu 04 Apr 2024 09:34:57 +0000
ROA not before:           Thu 04 Apr 2024 09:29:57 +0000
ROA not after:            Thu 03 Apr 2025 09:34:57 +0000
asID:                     52869
IP address blocks:        177.93.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:10:73:03:1f:d3:7c:61:fd:95:ec:0b:24:f4:95:11:f4:5f:1d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Apr  4 09:29:57 2024 GMT
            Not After : Apr  3 09:34:57 2025 GMT
        Subject: CN=ED82FCE87CBCAE41183249685C8BB21147E99646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:33:74:dc:53:1c:e2:b5:01:80:86:8c:de:
                    0d:3a:a5:64:4d:de:e4:04:29:ba:7f:21:23:cb:6c:
                    da:e8:6c:7e:68:dd:5e:5f:c5:33:21:d3:b6:6c:99:
                    61:28:1f:1f:3c:5e:b0:3c:fd:56:20:a5:d9:d3:d5:
                    49:6f:06:5f:9a:3c:84:98:75:1e:05:6f:68:8a:13:
                    a0:32:3b:93:60:c1:4e:99:2b:fc:da:3e:1d:8e:c1:
                    82:d5:1e:6f:a3:93:91:97:37:89:22:ef:69:ac:53:
                    fd:40:f2:16:a2:ab:8c:25:75:4d:ad:c6:36:c2:28:
                    76:55:56:e0:3d:b2:dc:43:a8:41:b5:14:f5:be:86:
                    b8:3a:6f:28:ee:6b:a7:8f:8c:87:cf:b2:da:f6:7b:
                    d7:a0:1d:85:7d:30:1b:4b:3a:27:da:6f:d1:c2:c4:
                    08:cd:7d:11:8c:e2:b6:4d:08:bb:92:3a:a8:c7:25:
                    3d:7f:ec:f0:4f:7a:be:44:19:b5:c0:60:2c:9b:43:
                    b6:8f:1c:3d:86:25:7b:4d:5c:49:ad:48:2a:66:98:
                    70:8e:f3:3e:c7:e6:2b:0d:01:03:88:4a:61:b5:99:
                    a0:c5:b0:11:64:44:d0:5e:1e:f2:ba:7e:26:9f:ea:
                    d9:ff:49:1c:76:15:75:27:5b:4f:1b:34:c9:c4:cd:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:FC:E8:7C:BC:AE:41:18:32:49:68:5C:8B:B2:11:47:E9:96:46
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:61:60:1d:a9:33:8b:e3:f9:b4:30:10:30:05:23:9d:8a:
         08:e1:a4:7c:af:52:68:3a:6b:5b:f5:ad:21:4d:1b:d9:37:92:
         dc:45:10:25:82:bf:de:a1:a1:88:40:b7:ae:42:7d:3a:ba:13:
         6c:9a:3e:41:70:0f:9c:a6:c4:c5:cf:d8:23:9e:a6:f5:40:43:
         40:1f:3c:68:89:b9:ec:ea:84:d8:84:3a:db:d8:f7:e0:8b:22:
         cc:36:75:c2:ad:66:29:ae:6c:9f:27:54:6d:13:82:f6:bb:80:
         6c:cd:b9:19:92:3d:a7:ec:a4:b6:b6:c6:2c:32:7d:31:72:de:
         b8:98:87:e7:81:4c:4a:8e:9c:0f:3e:70:cb:40:15:e5:bd:0b:
         ff:05:9d:ae:3d:c4:0d:60:58:57:6e:6c:3b:4b:9d:99:bb:69:
         ab:93:93:d4:32:ff:ef:15:0c:11:f9:9d:95:c8:00:5d:06:88:
         4c:44:d5:d9:b4:89:dd:6d:36:a0:bf:8c:f2:76:23:03:a9:8e:
         c1:55:e2:ae:76:ce:f6:4f:5f:4b:69:aa:d6:df:43:6b:94:58:
         0c:42:84:bb:49:c8:c0:70:d2:78:f2:3e:78:14:b6:45:da:5d:
         9c:b9:54:d8:68:11:b4:a2:24:c0:b5:ad:a8:90:26:7b:45:77:
         95:2d:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org