Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          oo8opxaCHj22SgiMAxVDoP8ERhsx9Gm42ff7JYPy0EI=
Subject key identifier:   EA:02:4D:10:05:E9:7E:FC:4D:5F:D6:5A:23:35:E2:8C:50:05:C6:31
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       5C9891DE3978B697F6DAD874B3AEC1C49D2B6B0E
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:37 +0000
ROA not before:           Wed 07 Aug 2024 13:09:37 +0000
ROA not after:            Wed 06 Aug 2025 13:14:37 +0000
asID:                     262444
IP address blocks:        177.128.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:98:91:de:39:78:b6:97:f6:da:d8:74:b3:ae:c1:c4:9d:2b:6b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:37 2024 GMT
            Not After : Aug  6 13:14:37 2025 GMT
        Subject: CN=EA024D1005E97EFC4D5FD65A2335E28C5005C631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:f4:78:a8:30:05:29:85:3e:d5:e4:d1:33:
                    03:51:db:78:69:2b:61:01:9c:5d:4e:cf:cd:66:4e:
                    66:a8:00:fc:8c:77:ed:0a:fc:9b:01:87:0a:86:e2:
                    a9:80:3b:81:3e:7c:88:4a:2f:3e:db:f2:6a:15:b0:
                    6d:32:17:21:e6:c7:04:47:86:47:ab:a3:b9:ee:a1:
                    b7:13:f2:87:a9:a1:7d:a4:4c:90:57:a1:b4:09:b8:
                    8d:90:2d:80:7e:95:f3:f1:ec:e6:bf:19:fb:bc:ad:
                    83:65:6f:aa:f7:99:91:a5:92:a1:8a:0d:3c:a6:ba:
                    80:73:25:1c:2c:18:44:d5:a3:4d:41:46:eb:da:90:
                    0f:7e:4c:6f:76:73:50:89:1c:52:d3:3b:e0:73:2a:
                    54:71:af:18:92:be:51:27:a5:f8:e4:d9:f3:da:b0:
                    aa:f2:26:b3:4b:47:68:c3:7f:0e:9c:57:f4:9d:ea:
                    25:54:2e:ef:64:db:9d:c9:c1:0e:a6:1d:b9:7b:77:
                    fb:3b:a0:4b:3d:bc:b6:c8:74:7c:36:7e:b0:22:9c:
                    68:e8:40:99:46:49:b2:0a:f1:af:fb:12:ab:d3:07:
                    9b:9f:be:26:d5:76:9c:b8:f9:fa:db:e7:8c:50:81:
                    6b:c4:e7:c4:b3:b0:31:e0:b6:4c:11:33:cb:4d:7a:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:4D:10:05:E9:7E:FC:4D:5F:D6:5A:23:35:E2:8C:50:05:C6:31
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:04:6a:72:e8:68:25:ee:17:25:94:82:1b:d6:0d:08:99:
         a2:15:14:d7:bc:3d:87:42:41:13:47:b4:9a:94:8b:99:73:0f:
         78:34:58:23:ba:76:2e:d5:7f:ae:52:29:76:45:3e:90:a8:98:
         7a:59:e1:1f:d0:ce:79:b7:43:3a:2f:07:21:a1:f5:75:af:f7:
         05:b7:e6:b7:70:fc:69:c8:ac:c9:06:4e:39:fc:52:ee:5d:a9:
         2f:45:53:e4:e1:7c:84:5a:17:1b:3a:5f:ef:90:29:c6:5e:39:
         d4:16:a9:a2:34:88:19:c2:ed:94:89:b8:23:8f:71:56:d5:8e:
         68:33:17:eb:38:30:90:dd:a0:dc:b9:75:88:e1:30:37:48:e5:
         22:56:2b:56:5e:c4:4d:6c:2b:42:68:67:dc:c7:5d:af:4d:00:
         8b:76:4f:0a:32:25:dc:22:4a:03:4c:ea:17:64:ce:2f:f1:9d:
         eb:a9:62:56:0d:77:d7:35:65:e0:18:fc:b3:03:49:4a:2d:16:
         18:b8:be:96:c2:eb:60:43:87:e7:2a:98:05:81:8f:f6:a3:49:
         62:4e:66:e0:f7:67:b0:c9:01:13:ca:4a:1f:07:5c:32:a7:9e:
         c2:8e:04:68:42:67:01:90:47:b1:74:58:27:10:02:5d:a4:e9:
         54:46:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org