Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa
File:                     3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          i8+OzVI/33Z96YbM7dzcNAT7MKHVj0fJJAsCrU7dpZI=
Subject key identifier:   96:C8:F3:25:0C:27:6C:B6:BC:76:40:22:FB:BD:7D:F2:C3:D2:FA:9C
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       15877D3BB9671B0F5623F3F68ADB1EF8C0CBD5DE
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:38 +0000
ROA not before:           Wed 07 Aug 2024 13:09:38 +0000
ROA not after:            Wed 06 Aug 2025 13:14:38 +0000
asID:                     262444
IP address blocks:        177.128.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:7d:3b:b9:67:1b:0f:56:23:f3:f6:8a:db:1e:f8:c0:cb:d5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:38 2024 GMT
            Not After : Aug  6 13:14:38 2025 GMT
        Subject: CN=96C8F3250C276CB6BC764022FBBD7DF2C3D2FA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:cb:fe:e4:14:f1:77:6f:e2:88:b6:c6:0d:
                    ff:7e:8b:43:70:b3:78:2a:34:04:2c:ec:8f:c6:64:
                    b8:29:b8:1a:72:51:71:84:73:7e:4e:68:94:28:88:
                    e5:3a:11:ad:08:c3:06:81:6e:73:f2:71:9c:9c:ee:
                    47:0d:f8:46:5c:96:ba:00:e9:06:1f:c4:d4:3c:27:
                    ca:45:8b:82:d0:db:79:09:78:9a:9e:b6:73:0c:94:
                    2b:8e:c3:85:f7:4b:85:26:79:75:a8:36:69:f4:7d:
                    b9:3a:f7:38:eb:ab:8d:28:83:5e:8a:18:c6:78:35:
                    84:30:58:c0:e0:21:30:17:d2:a1:58:26:ce:29:39:
                    b5:a3:0f:37:0d:cb:0c:98:4e:14:63:62:dd:77:79:
                    b7:01:c3:f6:4a:14:cb:30:2f:34:de:52:4b:c1:aa:
                    7f:c9:f0:c1:c8:2d:85:e4:4f:0f:b0:75:8c:56:b2:
                    6d:51:63:d4:da:6f:ff:58:a4:85:7a:4e:36:94:07:
                    06:6b:9a:ef:df:fb:6d:da:03:03:f7:b7:ee:90:73:
                    06:61:a9:ac:83:b0:2e:fa:0d:e8:d7:90:2c:55:71:
                    df:97:f4:e8:00:ce:cc:72:b3:b5:be:38:6c:15:0f:
                    cf:cd:f8:c6:1d:75:23:f5:3e:3c:88:d0:ff:11:a9:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:F3:25:0C:27:6C:B6:BC:76:40:22:FB:BD:7D:F2:C3:D2:FA:9C
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:7c:bd:60:7f:51:68:57:58:5e:08:ae:83:cc:60:65:16:
         aa:94:9a:2d:da:98:ad:a0:22:ca:89:f4:ba:4b:5a:79:66:40:
         e4:4f:51:b5:7f:3a:8b:22:bd:d7:cc:c1:dd:38:c6:ff:39:2b:
         d2:21:07:63:f8:55:be:17:07:4f:54:3b:0c:d6:43:68:41:cf:
         f9:6a:f8:c1:30:45:67:12:4d:2b:16:2a:be:1b:f2:e2:04:27:
         02:d7:18:be:19:89:a1:98:0d:49:4c:83:d8:10:03:c7:5b:13:
         a0:ca:1d:5b:dd:df:6f:42:d5:7e:44:fe:1f:de:b1:b5:db:d4:
         97:fa:0c:1c:0d:f3:28:de:0e:b1:d9:cd:55:b3:31:ca:ae:87:
         37:44:c9:6a:88:76:c8:81:f8:5e:a7:70:54:49:af:84:76:10:
         63:31:14:a1:11:bd:dd:70:85:04:1a:53:2f:66:c0:26:04:31:
         8e:7b:30:b1:3f:d6:56:63:b0:f6:33:b9:44:61:f9:c5:cc:b6:
         08:9f:83:e3:98:0d:73:ef:f6:75:08:de:97:4c:6b:9a:c2:8f:
         e8:2d:9b:16:dd:e5:14:24:06:f1:20:f1:aa:4b:05:aa:67:46:
         92:a8:d7:67:cf:41:96:4c:b8:31:6d:76:d1:bf:4b:1e:6f:4d:
         52:ae:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org