Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          73sNaHLr953ytEK488yh5KsHuWKRaShARtLgWWMZAPo=
Subject key identifier:   CC:F6:4E:6A:C8:F4:FD:D3:A4:8B:E3:63:09:A8:45:18:38:E3:CC:5A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       12A6525564CABBE7301C3F317FDF04A0F66010CE
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:43 +0000
ROA not before:           Wed 07 Aug 2024 13:09:43 +0000
ROA not after:            Wed 06 Aug 2025 13:14:43 +0000
asID:                     262444
IP address blocks:        177.52.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a6:52:55:64:ca:bb:e7:30:1c:3f:31:7f:df:04:a0:f6:60:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:43 2024 GMT
            Not After : Aug  6 13:14:43 2025 GMT
        Subject: CN=CCF64E6AC8F4FDD3A48BE36309A8451838E3CC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:f8:ff:45:70:e5:71:d4:87:73:ea:bc:d6:
                    83:1a:d2:56:38:d8:31:2c:b4:5c:05:da:6c:f2:6d:
                    62:c0:60:13:e9:0c:8c:8d:a3:b5:b9:d9:d5:6a:ae:
                    bf:94:16:d2:10:1d:fa:26:1e:26:a2:57:4f:92:3e:
                    ae:1c:c1:74:02:7c:fa:f6:86:00:85:2e:7c:30:94:
                    77:60:ac:c2:28:52:c9:ea:8b:3a:a8:2c:be:b6:f5:
                    92:33:a8:31:c1:0e:82:dc:d2:dc:2e:b5:3c:ae:f9:
                    51:52:f6:b7:94:9f:3c:af:09:15:ba:f7:04:33:b8:
                    ad:66:21:cf:dd:0f:36:56:e1:76:d1:df:fb:65:da:
                    40:51:18:6a:bd:2d:d7:aa:f2:c2:30:de:15:f8:30:
                    97:88:4b:4f:8b:f6:62:90:46:f4:d7:46:49:c4:b3:
                    b1:90:2a:21:03:dc:6d:50:56:af:96:8c:06:dd:3a:
                    92:24:85:28:a5:63:a1:6a:95:60:22:9c:2e:03:73:
                    9e:89:c0:3f:7f:78:70:0c:70:52:29:98:c0:81:32:
                    38:9e:79:df:ed:f4:63:5b:e9:6d:91:9e:27:5b:07:
                    20:c4:ae:be:71:2a:6c:e2:bc:7b:5e:57:9c:da:ca:
                    52:49:43:6d:92:14:a1:cf:48:a5:90:a9:e5:ae:0b:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:4E:6A:C8:F4:FD:D3:A4:8B:E3:63:09:A8:45:18:38:E3:CC:5A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:d1:4f:de:b5:9a:70:5c:60:9e:12:06:2d:4e:74:7a:6e:2c:
         fb:c2:e1:de:2f:93:82:b7:e9:90:d5:b4:b6:c2:11:34:8d:d8:
         a3:a7:71:d4:6a:65:74:d7:f4:03:e0:fd:5f:1c:a5:2a:4c:c5:
         52:72:9f:00:78:7c:d3:5b:8c:de:6b:26:f3:4a:8a:5a:8b:b3:
         fc:1d:f0:99:ce:63:61:5d:6c:38:a8:26:5f:c8:6c:0c:1e:a3:
         23:66:38:21:46:9c:d2:79:23:09:48:1d:41:c1:c4:8e:0a:ab:
         17:22:d7:88:a0:8e:70:a0:52:73:4e:a2:0d:67:2c:51:bf:7a:
         86:a7:a3:40:08:97:13:c5:3e:0a:d0:4e:9e:57:a5:53:dd:af:
         6c:08:44:90:9f:cc:73:0f:8b:9a:ef:cf:ee:e7:06:73:1a:84:
         ad:d3:6f:fc:a6:a0:3a:58:52:f2:aa:a9:72:e7:dd:6c:d8:d1:
         8f:27:72:ea:d8:5b:a5:11:1a:de:ff:63:de:aa:90:ab:2d:60:
         eb:66:35:f8:33:d1:9e:ab:4e:a5:da:ce:14:b8:1a:c5:05:74:
         94:d2:d7:f2:f1:fc:5a:28:92:e9:26:3a:d4:b8:b5:ff:cf:d7:
         b4:b9:44:50:d5:3e:47:bb:be:b8:44:95:59:38:a0:2b:d5:2d:
         af:2f:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org