Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          ZV0mT3ABCPRFAQmfGh+rxiq2t3glSllbC0VMdD0Ocq0=
Subject key identifier:   3A:DC:4E:7E:96:DB:F8:3F:A5:BB:6C:10:3F:5C:B6:35:9B:EC:20:C0
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       04587DBC7860DECF939BC104502180E46FDC8AE9
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
Signing time:             Thu 04 Apr 2024 19:02:47 +0000
ROA not before:           Thu 04 Apr 2024 18:57:47 +0000
ROA not after:            Thu 03 Apr 2025 19:02:47 +0000
asID:                     28584
IP address blocks:        177.129.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 01:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:58:7d:bc:78:60:de:cf:93:9b:c1:04:50:21:80:e4:6f:dc:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Apr  4 18:57:47 2024 GMT
            Not After : Apr  3 19:02:47 2025 GMT
        Subject: CN=3ADC4E7E96DBF83FA5BB6C103F5CB6359BEC20C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:c3:7d:0f:97:5e:86:16:50:84:16:38:34:
                    0a:8e:9f:e9:56:00:a8:1d:f6:ee:f1:af:13:6b:fe:
                    19:d7:e6:50:34:64:bc:3d:4c:31:64:14:bb:de:b2:
                    e7:47:0f:3e:8f:54:67:a9:af:9d:ec:52:2e:1f:7d:
                    20:94:4b:c2:c0:98:0b:da:7d:e3:b6:3e:9b:3d:4b:
                    b1:d3:08:a8:72:7a:55:28:0d:fe:51:9a:ea:e9:36:
                    cd:37:e1:ef:b7:02:b1:ae:11:b3:17:ce:cc:7e:9b:
                    c4:26:11:4e:aa:54:44:f1:f2:8d:ea:5a:2e:78:73:
                    50:5d:c0:eb:15:7e:da:af:c5:05:7d:73:e6:27:2c:
                    aa:d9:08:5d:39:87:3d:ba:63:16:14:33:ab:ae:cc:
                    48:29:7b:1d:46:00:2a:d8:27:56:b2:4d:af:f6:e2:
                    eb:5b:7d:b8:4e:24:e8:0e:f8:7a:d6:ed:6b:77:04:
                    9e:68:ea:b8:f0:c5:aa:8b:a6:b1:dc:73:f1:80:ac:
                    a0:74:67:c4:88:98:7f:44:26:37:89:e4:71:e8:ac:
                    64:20:ee:3a:34:70:8e:6f:ad:7a:e7:74:79:6e:ff:
                    60:79:54:13:f4:12:e3:5c:e4:22:14:b1:3b:a9:ed:
                    b8:88:bf:88:c0:1f:66:57:40:a5:5e:22:13:51:6a:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:4E:7E:96:DB:F8:3F:A5:BB:6C:10:3F:5C:B6:35:9B:EC:20:C0
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:15:52:4f:96:8f:34:ad:8e:d4:e9:48:52:47:9e:d4:a9:2d:
         56:d3:55:fc:06:05:4c:81:53:ac:e3:bb:66:19:70:f3:dc:3f:
         d5:06:1d:0e:23:ac:7f:95:06:1e:bd:d4:8d:74:2e:29:92:b2:
         1f:07:a3:87:84:b9:2b:0c:81:4c:30:6e:56:82:69:d2:93:fe:
         2a:71:c5:c1:3a:f7:32:a1:32:c7:80:51:fa:16:80:d4:20:19:
         ec:f1:50:9a:a5:43:f1:1b:63:94:23:09:b4:31:a6:ea:a9:2d:
         43:46:dc:6b:d7:99:64:fe:96:f3:e7:59:30:c2:39:46:eb:b3:
         85:c6:ee:58:c9:f0:10:87:f1:3a:57:05:ac:9e:03:ec:55:fa:
         21:06:71:81:9e:9b:87:fc:28:51:7b:e5:33:40:c7:c9:2d:47:
         78:88:6c:b9:c6:c6:eb:ea:c3:3a:d2:06:7d:ed:e6:d3:f4:59:
         b5:08:0c:57:84:05:06:c7:89:78:35:65:40:2c:25:dd:9a:0e:
         06:59:8d:63:d4:73:ec:c3:84:be:69:83:d6:0a:4a:03:c4:7b:
         d0:2c:1a:63:48:4a:0e:61:54:3d:4c:f1:d1:46:9a:e4:a5:15:
         21:94:75:2b:40:11:7d:4c:55:93:d9:3a:fb:da:48:c5:54:9a:
         d5:72:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:54 2024 by rpki-client on console-ams.rpki-client.org