Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          /D4C2eDZflXb8fJHSaYiPeXuoN8to+8COOBRCwFn1ZU=
Subject key identifier:   24:D0:FD:59:E7:32:C5:0C:8D:30:67:CB:64:BC:B2:CE:81:50:F7:3F
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       6C8B6766F9E8323F418F8EC39195A157BA280169
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
Signing time:             Thu 04 Apr 2024 19:02:45 +0000
ROA not before:           Thu 04 Apr 2024 18:57:45 +0000
ROA not after:            Thu 03 Apr 2025 19:02:45 +0000
asID:                     28584
IP address blocks:        177.129.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Dec 2024 02:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8b:67:66:f9:e8:32:3f:41:8f:8e:c3:91:95:a1:57:ba:28:01:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Apr  4 18:57:45 2024 GMT
            Not After : Apr  3 19:02:45 2025 GMT
        Subject: CN=24D0FD59E732C50C8D3067CB64BCB2CE8150F73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:fc:03:fa:88:93:a5:35:1d:bc:d9:50:6f:
                    b1:51:c4:80:be:00:2d:b9:a1:30:d2:cc:81:96:fb:
                    89:5a:3b:5c:1b:da:a0:44:dc:48:cb:e6:50:22:61:
                    15:cf:83:23:a5:3a:16:e6:f5:34:25:07:0f:6e:32:
                    c7:29:8d:ed:3c:47:74:95:64:8d:22:a9:29:19:b6:
                    bc:72:a3:02:b8:4a:94:0e:90:d2:14:ed:9c:f8:55:
                    aa:38:cd:7a:e5:bb:b8:69:10:44:d9:5c:f7:1c:07:
                    b5:ec:05:46:d0:e8:21:26:5c:ac:28:44:16:8b:cd:
                    70:70:93:ac:0e:f4:9c:f7:13:ef:96:c7:b8:87:d3:
                    c2:5d:04:a3:78:29:85:1c:0c:54:10:56:86:6b:5e:
                    21:c0:f7:06:c9:f5:8c:86:34:ba:f2:8b:cf:35:85:
                    e0:be:6b:01:b1:9c:e0:5c:b5:61:76:d6:6b:5a:f5:
                    58:f3:c4:1c:43:52:62:7c:e3:80:08:67:1d:fb:ad:
                    18:3d:3c:f2:9d:d2:7d:eb:ef:58:cf:7e:e9:aa:f3:
                    c8:2d:6c:3b:e3:0c:8d:7a:fd:09:2c:e8:16:d3:54:
                    e3:c2:e9:51:dc:30:c8:f6:21:80:71:c2:77:97:5b:
                    f9:4e:88:c3:0b:33:18:53:c8:0a:c4:53:5a:1f:39:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D0:FD:59:E7:32:C5:0C:8D:30:67:CB:64:BC:B2:CE:81:50:F7:3F
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:db:28:dc:56:d4:8d:87:e4:58:5e:f0:6f:57:25:2e:64:
         9d:bd:ac:19:bf:5c:01:5e:17:a2:44:40:81:29:c3:34:54:ad:
         a2:d5:d8:eb:81:d9:46:90:75:8a:42:62:dd:d5:66:7e:ab:43:
         9c:19:6d:dc:0c:92:5e:3a:40:db:df:c6:03:cf:a7:4c:a7:ed:
         9e:6e:fe:ad:79:d7:ad:45:8b:e3:cc:0d:2a:31:17:36:c1:9b:
         d9:ad:9a:6c:f2:9f:37:98:7e:f9:8e:a6:5d:6f:34:01:68:51:
         3c:c9:50:2b:9c:82:2e:c1:c3:1b:56:47:1f:92:01:3d:71:fb:
         ab:7d:e3:23:e0:7b:c9:8b:37:dc:20:32:04:ae:0c:4c:bf:1d:
         2a:ec:34:d1:8a:2d:95:5e:da:f0:d1:44:b6:22:79:46:36:3b:
         8f:e3:b2:b7:65:29:87:cd:f5:a1:d7:19:d2:f4:d7:8d:3f:ae:
         01:77:17:04:7e:47:43:95:c7:e4:93:2a:8a:a5:9c:82:ee:af:
         b3:9f:c5:e9:d4:87:07:93:1c:8e:d6:5e:03:c1:cc:1b:67:f3:
         b5:3a:bf:48:6d:32:43:51:6f:04:56:0c:03:c4:fe:f9:29:3e:
         86:4c:9a:f1:49:e2:c2:57:5c:d9:83:93:b8:ff:c4:c2:40:d0:
         a4:26:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 04:38:32 2024 by rpki-client on console-fra.rpki-client.org