Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa
File:                     3137372e382e3133322e302f32322d3332203d3e20323730353831.roa (raw, json)
Hash identifier:          gC8oIKRneaQuCUcGl17voB9wBVXK1pWiR+xYcgSsOLY=
Subject key identifier:   67:22:AF:1E:34:83:4B:C9:6C:F2:E6:7A:24:F3:D3:FA:9D:73:18:24
Certificate issuer:       /CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
Certificate serial:       63496D5C1320E9771B5C9EB330B9CA475F765DE9
Authority key identifier: 79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa
Signing time:             Thu 05 Sep 2024 14:12:55 +0000
ROA not before:           Thu 05 Sep 2024 14:07:55 +0000
ROA not after:            Thu 04 Sep 2025 14:12:55 +0000
asID:                     270581
IP address blocks:        177.8.132.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl
                          rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:49:6d:5c:13:20:e9:77:1b:5c:9e:b3:30:b9:ca:47:5f:76:5d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
        Validity
            Not Before: Sep  5 14:07:55 2024 GMT
            Not After : Sep  4 14:12:55 2025 GMT
        Subject: CN=6722AF1E34834BC96CF2E67A24F3D3FA9D731824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:25:99:99:56:49:e2:48:4a:80:40:d3:c9:
                    60:8a:58:1c:cb:b5:f9:90:97:5b:0c:48:92:5a:90:
                    6f:4d:43:d0:47:78:34:fb:bb:77:77:b6:19:ab:96:
                    f6:02:c5:8f:ab:b2:96:92:ab:98:c9:7a:96:98:ff:
                    a0:f1:e0:17:a9:fb:98:9a:34:f5:b7:c8:c7:b5:e3:
                    79:b9:54:c1:0a:64:e0:c2:1b:8e:28:ea:9a:74:5c:
                    eb:af:2b:56:75:0d:41:50:97:a4:1e:c3:66:09:0d:
                    9d:66:f4:b4:2e:a0:09:e2:50:7b:18:74:a5:10:ee:
                    a5:75:b2:b9:f1:ae:23:be:0e:26:d9:d4:98:40:d7:
                    dc:1b:cf:41:ba:5e:9b:d8:37:3c:86:7f:56:6f:b5:
                    5f:97:dc:89:61:2a:55:27:82:7b:b9:df:57:6e:dc:
                    fe:eb:de:f4:8f:91:1f:49:ee:95:60:dd:1f:f9:53:
                    8f:a7:12:ac:3e:de:37:3a:34:81:bc:3a:6b:7f:5b:
                    f2:42:05:45:71:9e:88:7e:96:75:db:98:ed:d1:05:
                    10:ec:cd:dc:89:ea:cf:f5:35:14:81:59:f1:c5:ad:
                    5b:14:65:88:07:d7:46:9c:1a:3c:eb:b9:7c:6b:76:
                    79:61:38:f3:6f:a0:80:56:91:8c:4d:d7:4b:79:93:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:22:AF:1E:34:83:4B:C9:6C:F2:E6:7A:24:F3:D3:FA:9D:73:18:24
            X509v3 Authority Key Identifier:
                keyid:79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:3f:57:95:e1:63:70:9b:92:08:b8:83:44:b9:a3:07:de:23:
         7e:c3:93:d8:53:07:71:c4:ea:c0:64:a9:ca:08:b4:d0:dd:ad:
         82:7a:4b:e2:75:12:81:63:96:da:57:1c:46:0e:a0:63:3a:e6:
         43:18:6f:f5:58:34:f4:84:c5:02:86:6e:16:87:29:e6:b2:6a:
         fe:88:07:a4:7a:25:af:3d:4b:a4:01:5c:39:b5:15:c6:4d:4a:
         f9:96:0d:64:8e:dc:2e:02:79:40:d5:27:78:3b:08:df:dc:99:
         c7:ef:de:33:50:3f:ef:c0:11:58:04:1d:58:ec:7a:86:f8:e9:
         7f:81:8f:72:0a:9e:78:77:f2:f8:3f:db:92:27:5d:32:3a:e9:
         65:7a:95:64:c7:34:9e:de:6f:35:11:23:8d:f1:17:78:61:76:
         c1:68:5d:d6:00:29:05:38:2b:a8:a4:e5:e4:48:35:e6:88:a5:
         60:f3:d6:e0:ba:72:0f:63:16:3b:06:c5:9f:63:42:74:dc:55:
         eb:40:0d:76:d4:50:59:68:5f:e2:d1:fa:25:68:34:33:53:7e:
         40:40:4f:db:8b:3f:0b:d7:75:79:e5:9f:c4:c8:46:8c:62:d6:
         16:1b:ba:e1:71:af:92:f0:8b:6b:1a:84:68:13:09:68:93:0e:
         90:c7:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:46 2024 by rpki-client on console-fra.rpki-client.org