Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
File:                     3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa (raw, json)
Hash identifier:          Uoh5kSN0ZptTxtRJg0Cq3N2sisYjquZvyFubyXjsCGA=
Subject key identifier:   D7:FE:2E:47:36:54:7A:D2:B7:3D:FD:FE:87:E0:C1:52:AE:BC:9D:B1
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       535AC17ED4D786EE38AC2636F9F048D36E0AC7E6
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:26:14 +0000
ROA not before:           Fri 14 Jun 2024 20:21:14 +0000
ROA not after:            Fri 13 Jun 2025 20:26:14 +0000
asID:                     262459
IP address blocks:        177.22.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5a:c1:7e:d4:d7:86:ee:38:ac:26:36:f9:f0:48:d3:6e:0a:c7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:21:14 2024 GMT
            Not After : Jun 13 20:26:14 2025 GMT
        Subject: CN=D7FE2E4736547AD2B73DFDFE87E0C152AEBC9DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:b8:90:ca:a0:0f:da:2e:e7:1d:ac:1f:10:
                    b2:45:19:a9:e1:07:12:7a:42:0f:d0:a2:f1:d5:32:
                    0a:8a:58:20:90:3e:d3:94:4c:b6:e9:f7:b3:29:6d:
                    c6:22:61:a3:30:a0:fa:bd:73:4b:8b:3a:22:82:e7:
                    3c:1a:be:ff:75:d0:39:49:c4:d9:be:d1:d4:4a:77:
                    95:8f:d7:bb:3c:bf:1f:3a:79:28:63:f8:99:c9:05:
                    7e:b8:b8:b5:2b:4e:0e:20:01:5f:c3:92:7b:6b:16:
                    bf:fc:e9:e5:8c:ac:af:fd:86:1d:9b:37:c8:a2:66:
                    df:93:3c:8b:ce:6f:8b:86:23:4c:1e:6b:51:7a:1b:
                    20:5c:6d:f4:6b:35:c7:23:26:34:1e:06:ef:cf:6e:
                    f1:25:5f:80:74:b8:28:ed:3b:d0:a2:b1:71:14:26:
                    8d:2f:17:fa:7d:ec:06:1b:fd:71:4b:f9:49:00:62:
                    e6:3b:99:b7:15:86:8b:a8:ad:00:e2:82:a6:0e:79:
                    5c:6f:2e:8d:07:30:af:0d:3b:c5:b6:9a:05:dd:ad:
                    1b:a7:c5:c0:e6:dc:17:66:c4:2a:b9:8e:5e:e6:e0:
                    01:75:a5:1c:67:ef:ee:3c:46:09:ad:8b:2e:b5:e9:
                    91:04:a8:8c:47:1b:5d:49:22:3b:c1:2d:f4:46:18:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:2E:47:36:54:7A:D2:B7:3D:FD:FE:87:E0:C1:52:AE:BC:9D:B1
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:09:4b:c1:40:b4:ae:82:5b:d8:2b:d6:3f:e1:cf:17:95:
         dd:d1:cf:08:87:18:37:68:1f:e1:ad:d2:3e:67:81:b4:78:f2:
         74:69:e6:4c:81:f7:cf:3c:eb:58:3d:d7:2f:4f:de:ed:b1:8e:
         4c:8d:f7:c5:ee:b4:eb:6f:d6:40:84:d0:6a:82:12:3c:62:c0:
         2b:7e:d6:98:93:b7:85:f1:e2:97:e4:98:0f:49:12:7b:2b:b7:
         6d:cd:6d:e6:c4:a1:ed:f3:f8:e3:59:e0:9c:bd:5f:db:ff:0e:
         43:f8:15:87:c3:7e:62:0b:3d:33:cf:a3:05:8d:09:49:74:c5:
         bd:29:18:a6:f0:99:f3:fc:ab:24:29:d4:68:b8:40:c9:4c:38:
         2e:b2:8d:38:f4:dd:bb:b7:a0:ec:02:09:ad:20:13:a8:56:52:
         f3:a6:38:c5:ea:90:08:2a:3f:fc:dd:29:59:d0:43:3b:38:75:
         b7:9b:2d:d6:bf:85:40:0a:37:c0:5e:7b:c8:04:d7:4a:85:69:
         cd:3b:21:31:11:79:ba:61:b5:c6:a9:2f:30:10:23:ff:8c:fa:
         3b:5c:00:5d:e9:d1:95:bd:65:ab:ab:3e:21:8a:d9:0d:92:30:
         73:f1:45:bf:a5:53:c1:63:4f:95:5b:e9:35:91:5c:68:c0:d9:
         15:a6:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org