Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          fC+YM2qACPQqT9jlCLjWcnmmN8gMArIM1YegS5cznY0=
Subject key identifier:   8A:3D:5B:4B:2F:37:F3:02:3C:38:05:68:8E:41:D0:25:7A:B3:45:D3
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       13DBE032ECE43E1EEA93DDF68F46008DBB45D494
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:42 +0000
ROA not before:           Wed 07 Aug 2024 13:09:42 +0000
ROA not after:            Wed 06 Aug 2025 13:14:42 +0000
asID:                     262444
IP address blocks:        177.52.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:db:e0:32:ec:e4:3e:1e:ea:93:dd:f6:8f:46:00:8d:bb:45:d4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:42 2024 GMT
            Not After : Aug  6 13:14:42 2025 GMT
        Subject: CN=8A3D5B4B2F37F3023C3805688E41D0257AB345D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:93:6b:c1:ed:48:bc:81:ce:2f:f7:c3:e1:
                    ee:d1:eb:0a:86:99:23:dd:5d:f3:28:8d:67:ed:e0:
                    79:9f:85:a4:ff:3c:4c:d0:bd:b2:8d:76:ab:fb:b9:
                    74:b0:a3:1c:26:40:5d:29:6a:94:1e:00:b3:c1:c8:
                    7f:55:4c:48:f6:22:e5:6f:5f:d2:13:85:0d:31:1e:
                    c7:76:05:32:e8:b1:fe:3e:c2:97:1e:39:6f:73:92:
                    a1:da:ea:58:c1:0f:17:58:a3:79:02:d6:a8:f7:6a:
                    c7:47:5a:02:b3:21:e3:51:e0:d4:54:25:a9:ad:8c:
                    ee:a1:66:37:ff:4d:c0:59:12:a4:3b:5d:3e:1f:87:
                    57:71:eb:19:c3:bc:2b:a1:c8:81:1d:0d:41:ef:b9:
                    34:b4:d2:1a:8e:fd:70:f7:41:bf:a0:fd:6c:23:80:
                    92:b4:c5:16:f3:cb:f4:7e:d9:10:92:d5:0f:c6:a8:
                    a0:cc:8c:6d:e5:00:11:d4:35:28:5f:6f:2b:9c:a5:
                    13:c4:25:bf:e6:64:b8:2c:34:df:f3:6a:f1:83:01:
                    0e:fc:78:7e:7a:aa:60:53:3d:11:e5:48:16:cf:76:
                    5a:e0:ae:32:f1:66:06:78:09:3a:22:d0:4e:3d:e2:
                    3b:33:95:2a:80:b3:38:68:78:e3:f3:a1:7c:6a:fa:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:5B:4B:2F:37:F3:02:3C:38:05:68:8E:41:D0:25:7A:B3:45:D3
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:b2:be:81:de:24:4d:66:23:20:49:42:c8:fb:98:0c:34:46:
         da:4d:17:c5:33:aa:53:39:02:44:77:2a:c8:50:b7:47:38:44:
         f4:e0:f4:57:f1:05:a4:f1:3a:03:6c:7f:2b:49:8f:4a:18:dc:
         2f:15:9b:54:98:cf:46:a9:a5:f7:8c:93:b7:0d:e8:7a:01:7d:
         1c:80:50:b4:47:01:c9:3f:3e:ce:65:87:d6:e1:62:71:27:1d:
         88:61:3c:e4:87:f0:38:23:3f:a7:f8:61:15:d5:0d:81:a0:c3:
         e6:76:0f:ce:2d:41:0d:7a:9d:56:17:27:81:d8:05:24:72:b0:
         b5:07:b6:7d:6b:32:87:97:30:c5:12:75:3d:2f:d1:1e:98:5c:
         ae:3e:e4:7d:b6:51:fd:2b:2e:d8:cb:5a:cb:5f:8e:3a:0b:31:
         4c:05:b5:74:30:8a:ac:38:c6:9e:af:8f:48:7a:b7:15:d4:10:
         e5:9a:ad:97:79:0f:b1:97:2e:e4:a9:81:3d:d9:66:52:49:2a:
         86:96:d9:e1:24:20:e5:45:89:af:c5:f6:ee:2d:77:04:a0:fa:
         68:58:39:29:9c:65:2a:e4:24:f1:1d:38:c1:84:36:df:03:96:
         04:1c:bc:24:22:88:19:3d:ac:92:0a:ac:a4:3a:e0:c4:ff:02:
         3d:4d:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org