Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa
File:                     3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (raw, json)
Hash identifier:          lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=
Subject key identifier:   2C:E9:B0:2A:F3:D8:FA:C6:36:C9:A3:70:A4:41:96:1E:18:24:38:BB
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       69394169E6AE6B37A5F92964228C5C7CBE6F8D60
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa
Signing time:             Mon 26 Aug 2024 14:17:22 +0000
ROA not before:           Mon 26 Aug 2024 14:12:22 +0000
ROA not after:            Mon 25 Aug 2025 14:17:22 +0000
asID:                     263400
IP address blocks:        177.222.232.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:39:41:69:e6:ae:6b:37:a5:f9:29:64:22:8c:5c:7c:be:6f:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Aug 26 14:12:22 2024 GMT
            Not After : Aug 25 14:17:22 2025 GMT
        Subject: CN=2CE9B02AF3D8FAC636C9A370A441961E182438BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:5b:f9:87:0e:15:e1:04:18:00:cd:99:ec:
                    08:a8:1d:89:c0:e3:5e:27:87:40:c6:9b:c4:63:fb:
                    81:77:28:04:eb:a4:1f:34:84:6c:08:72:04:9b:fb:
                    86:99:a0:22:bc:04:76:b8:a6:8e:4b:a0:93:98:9f:
                    1a:c1:09:1c:80:5e:cd:13:42:86:ed:4e:bf:fb:26:
                    5f:f8:29:83:7c:4e:62:98:9d:cc:18:45:c3:b3:89:
                    48:6c:dd:b4:fb:57:43:ac:0e:6b:1f:3e:a8:07:86:
                    4f:9c:dd:f6:28:23:f5:39:fb:2a:ca:e0:af:15:b9:
                    d5:c7:02:5e:69:2a:3d:c8:c2:51:53:d4:d1:b6:2d:
                    89:46:c4:8b:d4:10:41:66:ee:28:84:6d:bf:d9:70:
                    bd:be:32:f3:8e:d5:d3:2b:fc:19:dd:44:5a:c8:52:
                    4f:18:c7:75:66:39:f8:5a:52:11:95:2a:bc:89:30:
                    c7:76:b5:50:57:e5:03:78:8f:a8:d5:5d:f8:f3:54:
                    b3:99:e0:18:92:3a:65:cd:f3:f2:ca:9d:30:01:2d:
                    f7:7c:93:18:bd:ba:8c:6a:f1:3e:5c:e3:9f:17:f8:
                    08:c1:13:60:f2:4e:1d:d7:a7:41:ae:e4:09:65:6f:
                    b7:b8:09:22:d1:10:4e:ec:74:38:92:da:bf:f2:33:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:B0:2A:F3:D8:FA:C6:36:C9:A3:70:A4:41:96:1E:18:24:38:BB
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:59:fe:54:e3:2a:1c:4e:90:3e:d6:d2:e3:33:81:7f:76:
         97:1e:36:62:79:a3:e2:c2:55:7d:db:d5:23:be:54:9a:b7:f2:
         5a:a8:b8:fa:7e:b5:75:68:d4:30:8f:40:0f:a6:83:a1:79:6a:
         04:47:41:5f:f8:3b:d0:88:d3:aa:93:d6:9d:1a:58:e7:7d:7d:
         be:13:f8:8a:17:1c:e3:fd:c2:3c:b0:19:3b:28:44:75:02:9d:
         98:c7:47:24:9a:20:79:97:84:54:06:d8:2f:ba:49:06:06:46:
         50:96:19:05:15:e2:4f:5e:2d:09:2a:8d:cb:e6:a7:90:d9:88:
         17:c9:18:b5:14:2f:1c:7a:ae:d9:f9:f5:df:99:f6:03:fb:47:
         9c:8a:a5:05:1f:57:47:a1:fe:9f:32:4d:e3:d1:c9:8f:80:27:
         cf:fb:74:09:00:69:5c:73:e4:27:bb:97:05:25:24:d5:a3:72:
         b6:18:54:fa:c9:f7:72:c0:5e:e9:0c:f6:4f:1c:5b:ae:7a:89:
         7d:a6:15:97:8f:5a:61:af:4c:fc:e0:fb:6f:58:b5:58:ac:8f:
         ec:1a:34:18:e1:67:3d:ae:b5:4e:6a:5a:ea:55:70:65:74:ed:
         21:73:e6:77:12:88:b5:8e:80:e5:e1:12:1b:a9:4f:11:34:1a:
         28:41:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:46 2024 by rpki-client on console-fra.rpki-client.org