Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa
File:                     3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (raw, json)
Hash identifier:          x7hIrYeVPBaeKVks+25peVnyQrAspdD3T+mz5R8h07o=
Subject key identifier:   8F:F3:2E:B5:19:F8:EB:CA:DD:7A:31:02:83:1E:2D:6F:A5:CB:89:0B
Certificate issuer:       /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
Certificate serial:       1730334B6D889A149BDE4785182210A910E27E26
Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa
Signing time:             Wed 03 Apr 2024 21:02:29 +0000
ROA not before:           Wed 03 Apr 2024 20:57:29 +0000
ROA not after:            Wed 02 Apr 2025 21:02:29 +0000
asID:                     262474
IP address blocks:        177.154.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl
                          rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:33:4b:6d:88:9a:14:9b:de:47:85:18:22:10:a9:10:e2:7e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
        Validity
            Not Before: Apr  3 20:57:29 2024 GMT
            Not After : Apr  2 21:02:29 2025 GMT
        Subject: CN=8FF32EB519F8EBCADD7A3102831E2D6FA5CB890B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:93:50:d8:93:5a:ce:08:e3:3a:d0:17:58:
                    51:9e:d8:2c:b7:a5:d9:40:f6:a8:0c:eb:12:95:b6:
                    ed:9a:4b:fb:f8:47:99:5f:19:c1:b8:f5:29:0b:21:
                    39:3c:4c:22:7a:69:66:93:e0:50:2d:05:6a:7f:d6:
                    99:3e:12:58:67:1d:23:83:c6:30:2f:0f:58:e9:db:
                    7d:2a:6a:0d:15:26:88:5f:44:b5:fa:86:cc:ee:fa:
                    e5:d3:21:38:e0:f4:b0:8e:ed:a1:31:d3:c0:81:da:
                    7f:97:17:ff:9c:ad:23:d9:18:5c:56:d7:bf:e9:98:
                    67:cc:a5:ca:95:14:6f:62:ec:af:71:9b:0f:cf:e7:
                    f3:44:c2:33:c0:d5:14:79:37:c5:61:0e:5c:dc:2b:
                    e9:fe:42:08:2a:b9:a3:d8:5d:0d:26:fa:11:29:7a:
                    88:7a:c5:6b:c8:f7:ae:25:b3:90:3f:ce:f5:b4:dc:
                    41:35:97:02:5e:1c:a7:a7:06:72:38:8b:41:58:1b:
                    35:0f:97:51:c7:83:f9:aa:3d:68:33:3e:a8:72:9b:
                    50:26:84:e2:d6:d1:b1:b2:c7:8d:8d:2c:87:db:77:
                    64:17:d1:cc:3f:2a:cf:0c:79:1c:99:a9:f7:4d:bd:
                    20:e1:ed:e4:8a:7e:4a:b2:3f:28:a5:de:41:78:06:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:2E:B5:19:F8:EB:CA:DD:7A:31:02:83:1E:2D:6F:A5:CB:89:0B
            X509v3 Authority Key Identifier:
                keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:80:06:50:44:fe:b0:a1:ab:d7:15:f0:dd:81:8a:19:0b:ac:
         b9:88:a8:43:79:41:98:16:8d:c9:1c:91:bf:0b:46:84:a6:d3:
         5f:7d:71:4f:14:a9:00:7f:57:b0:98:58:12:8f:dd:e0:c2:ce:
         80:23:fd:a0:e5:cc:7f:a1:cf:85:ea:fa:47:a9:83:a1:a8:02:
         ff:35:fb:00:94:d4:12:2e:df:9d:39:63:97:47:fe:1b:03:fa:
         48:f7:23:ee:a2:97:31:de:df:d8:e4:5d:0c:1d:76:1c:25:bf:
         0c:93:48:15:85:07:0a:d5:63:27:bf:97:76:2c:03:20:17:14:
         3a:65:f8:b6:ee:f0:dd:8b:03:44:7d:ab:e2:f8:43:ce:b4:51:
         3d:13:62:4b:55:6a:cd:2c:2b:f0:59:23:7a:e5:d4:f4:f0:5b:
         41:46:41:1b:d0:88:d0:97:3d:b7:cf:3a:ea:8d:2a:8d:2a:37:
         ad:b9:34:f2:ec:d2:fb:1b:53:01:12:3f:31:14:a2:3f:95:af:
         01:00:ca:17:9e:c4:8f:1e:14:5f:c8:11:9f:26:14:bf:b4:06:
         d7:64:92:5a:ff:5b:40:16:77:4e:8e:1d:26:0e:b6:04:da:97:
         5d:fb:08:42:5d:3d:c2:d2:cf:81:60:04:24:1d:16:23:34:3b:
         71:a5:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org