Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa
File:                     3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          Z7zhyGfMu1EKmiqQEizp/SUROAZvw2ZVyG5pnwSdPXA=
Subject key identifier:   68:8E:D0:FE:1E:F0:AB:5F:EB:A8:E5:3F:6C:1D:3E:C9:1C:8B:09:23
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       49863E83507281C13F2F10FDA18CE424B44C8A8D
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:17:02 +0000
ROA not before:           Fri 14 Jun 2024 20:12:02 +0000
ROA not after:            Fri 13 Jun 2025 20:17:02 +0000
asID:                     262459
IP address blocks:        177.22.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:3e:83:50:72:81:c1:3f:2f:10:fd:a1:8c:e4:24:b4:4c:8a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:12:02 2024 GMT
            Not After : Jun 13 20:17:02 2025 GMT
        Subject: CN=688ED0FE1EF0AB5FEBA8E53F6C1D3EC91C8B0923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:5d:e0:9f:ec:61:78:93:5a:38:a1:19:47:
                    c8:8f:9b:5f:60:5c:20:bd:9e:3e:04:46:38:7e:27:
                    16:0e:e2:c6:78:79:48:60:62:47:15:44:5c:e1:21:
                    77:97:00:57:62:e2:6a:70:07:64:cd:d6:89:39:cc:
                    f3:d6:16:f8:1a:18:d0:f2:5d:bc:cc:50:7e:88:83:
                    4b:41:bc:4d:ab:d8:9c:bc:f6:97:89:33:11:1d:60:
                    43:8b:2c:5b:7b:9a:9f:73:4c:93:c6:92:b1:27:a4:
                    ca:89:cd:48:30:8b:91:fb:f3:30:80:31:8c:e2:7c:
                    5d:19:b9:52:c0:df:cd:f1:9e:85:5b:f9:30:7f:21:
                    51:25:45:d4:c5:e3:f1:fe:03:b3:20:05:7b:03:56:
                    ee:4d:10:6c:02:c2:38:79:0c:41:60:80:82:21:e0:
                    e1:a1:5f:d8:e2:cc:7e:47:c4:d6:a4:d8:bb:26:50:
                    53:fe:f9:ee:b1:70:27:a0:ff:e5:33:f4:a8:08:b3:
                    85:1f:d7:4b:90:6c:d8:c2:ba:34:00:c8:ff:00:00:
                    cf:13:ef:51:b9:14:a9:cf:fd:87:74:54:88:fe:bc:
                    aa:f7:70:e8:f1:16:0c:bd:b4:ee:e4:78:ab:e6:b1:
                    d1:2f:fb:72:ef:c0:4d:4d:e4:44:22:a0:1a:44:f1:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:D0:FE:1E:F0:AB:5F:EB:A8:E5:3F:6C:1D:3E:C9:1C:8B:09:23
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:1e:e5:6c:73:ea:cb:b6:ab:e1:34:ac:a8:46:e1:ba:b3:
         d0:bc:f0:96:f6:87:8b:f6:36:b2:39:61:83:ab:e8:95:68:c1:
         8e:1c:fb:f5:23:f6:70:c9:58:cb:d8:29:82:4e:82:98:ae:6a:
         75:55:24:e6:60:8b:71:44:a7:b4:d1:fe:ea:35:01:ab:ad:2e:
         9b:25:c2:55:a0:60:30:0e:1e:cd:e1:74:5a:95:16:ee:75:2f:
         9c:83:0b:15:66:98:33:1e:b1:ea:c8:db:7a:fe:a5:0f:88:17:
         7b:0d:15:ec:e8:63:83:d4:97:76:1e:59:4f:90:65:db:f9:07:
         28:b2:9a:20:7f:79:5b:c4:24:67:40:2d:49:85:52:00:26:83:
         d0:3a:01:15:47:d3:0f:c0:72:dc:e3:57:f8:82:56:52:b9:b7:
         40:78:c5:c8:ff:07:a7:b2:76:0e:d9:79:a3:63:e4:16:10:8d:
         8e:b9:eb:6c:44:fd:ae:05:5b:c6:14:f1:29:3a:c2:f2:4d:f8:
         0c:fb:65:b3:04:f5:1c:a8:e4:b1:09:87:77:ea:f9:27:53:a1:
         9c:bd:fa:78:04:f1:ed:79:cd:e7:15:b8:e6:9d:40:0d:81:11:
         32:50:cc:a0:96:bf:52:a6:ab:f2:3c:84:00:f2:e3:92:17:75:
         dc:9f:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org