Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32322d3234203d3e20323632343539.roa
File:                     3137372e32322e3136382e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          PWdk2POAP3WF1LT0JDUh2c6nNt7/p/tcT/+0FL6i6aE=
Subject key identifier:   62:21:54:55:25:15:46:3D:12:CA:88:FC:0E:49:E0:90:71:88:07:53
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       03D763761383ECEE4A046FA6627F7C17E9E4A00B
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:16:45 +0000
ROA not before:           Fri 14 Jun 2024 20:11:45 +0000
ROA not after:            Fri 13 Jun 2025 20:16:45 +0000
asID:                     262459
IP address blocks:        177.22.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:63:76:13:83:ec:ee:4a:04:6f:a6:62:7f:7c:17:e9:e4:a0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:11:45 2024 GMT
            Not After : Jun 13 20:16:45 2025 GMT
        Subject: CN=622154552515463D12CA88FC0E49E09071880753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:67:ef:d1:11:12:1e:ef:b3:32:32:7e:ed:
                    57:8c:d8:89:cb:d9:29:5e:1a:2d:38:77:99:0b:b5:
                    97:e1:6c:e0:c7:c2:87:03:98:57:88:05:b2:f7:7b:
                    a9:79:78:ad:f8:b4:46:0a:03:d9:d7:6f:0c:aa:9b:
                    fc:15:84:93:7e:29:cf:fb:5e:08:40:0e:1e:c1:83:
                    25:69:ef:de:94:f1:fb:ae:a6:3c:86:10:d5:e0:55:
                    c7:ae:a7:ad:7a:4a:34:31:1c:f0:8d:92:f4:f0:07:
                    ee:7e:82:41:2c:41:c8:5f:e8:71:28:d9:81:b9:ee:
                    75:8c:f0:af:89:e6:ca:04:ae:d0:15:ca:40:90:10:
                    ce:e6:0c:28:29:e6:0f:e9:e6:91:76:e0:17:5b:2b:
                    57:b0:27:b9:2b:e0:c0:de:81:ab:ae:15:dd:72:0c:
                    ae:c8:f5:ed:b2:fa:ba:c8:cb:18:92:c7:05:be:89:
                    a8:9f:35:7c:38:3b:f8:87:f1:b7:af:c2:da:e4:8e:
                    ca:b2:f2:c5:76:0a:b8:f7:b5:80:5a:5e:9b:da:3b:
                    85:77:9e:82:b2:11:e6:3e:b6:74:fd:88:bd:ac:76:
                    3b:c4:b9:39:dd:a3:43:14:29:30:97:0a:f8:50:5c:
                    08:da:07:9a:8b:ba:8f:d3:dc:4d:73:5f:74:c7:54:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:21:54:55:25:15:46:3D:12:CA:88:FC:0E:49:E0:90:71:88:07:53
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:1b:10:b1:9e:03:50:f0:47:6b:b0:c8:d5:d1:84:cb:3f:
         2f:c1:63:68:d0:02:3b:d9:7e:50:e4:0e:cb:03:fb:18:4c:27:
         dd:00:5f:9c:5c:6d:0d:ce:e2:f2:08:93:f7:eb:b9:6b:ce:de:
         29:ba:e7:eb:e9:d2:fc:6a:9a:10:0c:fd:55:b8:40:99:ba:71:
         f6:0c:94:7c:9d:23:e6:4c:b6:68:32:a4:4d:b0:3d:75:3b:6a:
         4c:3d:50:d1:3e:eb:f8:9a:97:3d:15:a0:5e:63:07:c2:76:4e:
         85:8c:c6:6d:d3:f5:20:99:ba:e5:7c:c1:24:27:80:56:27:2e:
         eb:5d:69:9e:65:e8:78:2e:0a:6d:47:16:52:4f:43:29:77:48:
         f9:fd:3e:60:1f:cd:44:2d:4d:35:c8:d1:34:6c:05:fd:fd:8a:
         42:56:2e:d8:5e:4e:19:34:3a:f4:38:f4:f4:b8:af:57:95:7c:
         af:3f:2a:78:b0:95:30:b6:4a:aa:00:5c:f6:c9:eb:60:7a:e2:
         a3:08:9b:ca:d3:3c:f2:52:49:ef:91:2c:c9:fc:d5:43:0a:84:
         d1:47:e9:2c:2e:77:3f:ca:6f:e2:7b:89:7b:c9:89:1b:56:6f:
         2f:0f:42:b1:7c:31:54:8e:37:87:7d:be:52:fa:c4:cb:61:da:
         d9:bb:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org