Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          +Y2bLpjM5X0QYPrSOhL1gsQklYryGQmW25n9lSNCHTQ=
Subject key identifier:   54:4B:B9:78:40:4C:44:52:84:4D:FC:20:FC:0D:76:07:ED:A4:95:98
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       7DBA241DAD42AEA2F39E8B6A66B49CF6E7A7500F
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:37 +0000
ROA not before:           Sun 05 May 2024 21:35:37 +0000
ROA not after:            Sun 04 May 2025 21:40:37 +0000
asID:                     262393
IP address blocks:        177.129.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:24:1d:ad:42:ae:a2:f3:9e:8b:6a:66:b4:9c:f6:e7:a7:50:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:37 2024 GMT
            Not After : May  4 21:40:37 2025 GMT
        Subject: CN=544BB978404C4452844DFC20FC0D7607EDA49598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:4c:87:ce:39:a0:5d:71:c3:1c:fa:39:5c:
                    c3:41:15:69:bb:a1:4b:ad:66:29:70:45:5b:a0:41:
                    1b:84:bf:fa:8b:aa:da:34:db:69:2a:70:5e:5d:17:
                    c1:a8:08:c7:6f:7e:93:d2:be:92:2c:ec:14:2a:70:
                    30:22:ec:2a:72:0c:44:e1:90:20:bc:7e:8e:e7:e2:
                    57:41:6b:8f:fe:4a:43:24:e0:96:a8:5f:76:9a:2b:
                    2f:bd:2a:75:63:af:4b:18:e2:bb:7f:47:1b:d8:a1:
                    78:06:70:76:47:b6:23:66:cf:ae:86:5a:4c:22:c8:
                    84:39:6c:22:50:e2:b8:07:a8:fd:3e:5f:9d:03:10:
                    f5:37:24:a2:47:45:50:2b:1f:51:4e:24:41:7c:e0:
                    53:b0:d9:a9:56:a6:05:b7:bb:40:c8:de:d5:96:bd:
                    ae:9b:48:52:ae:65:fb:06:ef:a4:ba:39:7a:36:8d:
                    8c:94:1e:e4:87:e4:5d:e1:d7:6b:06:d8:2f:14:f4:
                    07:a7:8c:92:79:85:37:df:67:d8:61:e2:21:bc:07:
                    ac:68:cf:7f:1e:88:a2:03:ad:a2:da:3c:53:47:5e:
                    0d:50:be:6d:f5:f7:c8:6a:17:43:2a:75:0f:e5:bc:
                    67:7e:2c:09:9e:d2:d6:2d:a3:32:2a:ca:42:b2:dc:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:B9:78:40:4C:44:52:84:4D:FC:20:FC:0D:76:07:ED:A4:95:98
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:8d:be:32:99:14:09:a7:26:4f:99:a7:c7:57:2d:a3:6d:
         71:b3:ec:6d:04:c6:c2:3e:b3:42:67:e0:72:e7:2f:08:9e:e4:
         5c:ba:cd:d0:7b:5f:5a:74:f2:61:da:d4:5b:8a:7c:52:60:83:
         18:b1:73:14:4f:56:c2:26:fe:00:d3:31:4f:00:c4:bf:3a:31:
         f8:b0:41:79:44:12:b3:43:50:db:49:78:c9:77:0d:e4:be:8c:
         10:b1:a1:5e:2a:67:98:90:46:5d:75:64:73:0f:68:50:df:d4:
         c2:e3:a8:f5:6e:ef:26:83:17:e7:52:4f:37:1f:3c:6f:7e:76:
         cf:6d:47:4c:fa:85:9b:a7:0d:d5:97:70:40:bc:ae:2e:24:f9:
         9b:80:2f:1b:db:8b:5b:fc:bd:69:45:b7:6c:8c:74:99:48:33:
         7a:c5:0f:f4:b6:82:2f:ca:60:2f:a3:ff:94:3a:fc:92:41:a8:
         d6:f8:2b:bc:af:d9:0c:54:96:ca:5c:df:c7:82:61:c9:80:2c:
         8a:ab:ed:2f:45:55:29:94:39:f2:ff:32:b1:5f:1d:d0:f5:f7:
         ff:65:30:8b:8b:d2:36:34:9d:c3:cb:d3:77:ef:20:f2:4a:d0:
         6d:32:81:14:a4:1d:b0:fe:15:41:bf:92:57:0f:08:32:a9:e2:
         ef:60:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:30 2024 by rpki-client on console-fra.rpki-client.org