Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          xqStPlWm1++VUNz/K3BMGd0TsxKl+juK/wq7B2UNaCA=
Subject key identifier:   D6:8D:80:86:51:98:EE:12:97:F4:A3:D9:B4:2B:5F:59:F7:51:DB:23
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       21B433720754353D6DB654F4AD69E5AB1F782FE5
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:34 +0000
ROA not before:           Wed 07 Aug 2024 13:09:34 +0000
ROA not after:            Wed 06 Aug 2025 13:14:34 +0000
asID:                     262444
IP address blocks:        177.128.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:33:72:07:54:35:3d:6d:b6:54:f4:ad:69:e5:ab:1f:78:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:34 2024 GMT
            Not After : Aug  6 13:14:34 2025 GMT
        Subject: CN=D68D80865198EE1297F4A3D9B42B5F59F751DB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:17:2a:b5:36:a8:fb:9c:4e:ec:4e:79:c3:
                    a3:c7:c7:18:fe:ea:73:b4:76:43:ec:d4:26:a8:b9:
                    9a:86:91:b8:26:54:f7:e2:08:47:df:f1:50:cf:25:
                    ad:c1:68:16:20:59:67:a5:ee:56:be:a4:4a:20:f0:
                    68:3a:8c:e3:5d:14:a8:4c:77:7f:1a:bf:92:22:fd:
                    22:1a:14:43:a8:d3:23:f2:40:0a:22:49:99:3c:ca:
                    ac:2c:ac:20:04:32:98:76:14:43:39:93:2d:51:2b:
                    99:93:3d:b2:ee:88:1e:7b:2c:cb:a5:4f:d0:d0:32:
                    a3:ad:d0:4a:30:3c:78:23:be:b4:ba:b6:82:e2:36:
                    0b:5d:0f:1a:1f:73:68:4f:f9:a9:0c:54:b7:95:67:
                    74:5b:fb:d0:62:2d:71:94:00:71:6a:53:d7:28:9b:
                    3c:aa:d3:6e:c9:72:c6:65:b7:15:21:58:44:96:8d:
                    0e:72:22:44:24:d6:50:2d:69:4e:ee:2c:ad:3e:00:
                    95:93:f1:6d:a3:0f:25:1c:7e:7b:87:b9:14:31:70:
                    fb:f3:4b:fa:5f:dc:8d:31:8c:23:eb:ac:c0:27:30:
                    7f:a6:1d:fe:e8:7d:9e:f2:6e:6f:ba:b2:45:ee:14:
                    e7:dc:f0:44:ab:43:8b:b0:cf:8a:4a:d9:d8:cc:91:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8D:80:86:51:98:EE:12:97:F4:A3:D9:B4:2B:5F:59:F7:51:DB:23
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:34:0a:80:49:6f:c2:f7:86:03:5b:1e:a2:81:68:8e:c3:ac:
         a1:36:1c:0f:50:b6:a4:ae:38:44:d0:4e:b3:39:20:9d:57:13:
         69:a5:87:47:ac:2e:fe:fa:d8:8b:4b:80:1b:9f:c1:61:63:6e:
         f0:bd:81:21:6f:d9:5c:c0:59:7e:9e:df:ff:51:16:ef:a1:1c:
         d5:50:52:a8:2b:d4:b3:73:6c:a4:08:ed:80:7d:e4:b4:55:bb:
         1a:2a:04:9b:79:37:df:1c:1f:0e:9f:24:ab:63:65:8a:2f:22:
         3f:91:cf:03:c4:02:7e:9d:1a:73:cb:c2:4f:7d:b0:ba:bc:3e:
         8c:18:53:7e:fc:8a:5c:6a:df:09:c3:48:a2:02:76:36:b2:a3:
         d4:86:49:42:c2:1d:ff:2f:f7:28:40:b1:d9:4a:90:60:76:fb:
         9c:2b:c1:82:29:b8:3d:7f:bf:e2:cc:18:d4:90:61:9f:1f:8c:
         e8:4c:9e:6d:df:f7:bd:4e:7d:38:89:0f:d2:8d:f0:58:96:7d:
         4a:d9:f4:5c:b1:51:c0:8d:46:ea:5d:72:44:f4:21:82:a8:3f:
         9e:b0:bc:0e:f1:8c:33:68:60:78:cf:0f:dd:84:25:29:f8:14:
         26:07:63:c1:0d:db:70:20:84:e2:2c:a6:9f:cd:48:40:78:45:
         3c:e6:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org