Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
File:                     3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (raw, json)
Hash identifier:          JnDBWqX3cbkiILfQnAb2vkslGGeNOmNTLLv8tSBe1Jo=
Subject key identifier:   7C:FA:08:26:C3:1E:96:F4:1D:5A:EA:F2:91:55:1A:40:98:0D:89:91
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       1C6203A1064F1DBF46D2E353D0874C573F36A12D
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
Signing time:             Thu 04 Apr 2024 05:03:06 +0000
ROA not before:           Thu 04 Apr 2024 04:58:06 +0000
ROA not after:            Thu 03 Apr 2025 05:03:06 +0000
asID:                     263043
IP address blocks:        177.129.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:03:a1:06:4f:1d:bf:46:d2:e3:53:d0:87:4c:57:3f:36:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Apr  4 04:58:06 2024 GMT
            Not After : Apr  3 05:03:06 2025 GMT
        Subject: CN=7CFA0826C31E96F41D5AEAF291551A40980D8991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:fc:d5:b9:58:7d:00:fe:92:30:5c:70:0a:
                    04:f9:f7:cc:75:1c:cd:ac:b7:5d:f7:bb:36:b5:6e:
                    ab:49:8f:ab:fb:7a:44:c2:dc:e1:02:4a:a1:47:56:
                    fb:c5:86:1f:70:c5:04:86:2f:a6:b3:19:67:9a:2e:
                    14:f6:c6:ee:8d:3c:67:db:a2:67:83:b5:de:e0:ed:
                    ca:87:0e:d3:d2:a9:b7:ea:fa:c5:6d:1d:48:97:6f:
                    e8:1c:ec:d8:84:f4:40:04:a8:3a:be:15:31:03:b0:
                    0c:97:6c:96:7f:d4:a1:f0:c5:57:1f:32:ad:62:c7:
                    be:02:75:5a:5f:63:5d:da:0a:3e:82:82:7e:a1:0c:
                    ff:a5:52:d4:9c:cf:e0:80:6a:46:a5:6f:c3:e3:88:
                    82:f2:1e:ec:17:81:3e:4c:54:2d:8c:3d:08:e8:2f:
                    29:6b:0d:c8:62:dd:b5:51:0a:df:c2:17:44:15:6b:
                    f4:d3:18:aa:4b:cc:56:3e:65:7d:40:67:47:4d:e2:
                    a5:6a:c6:e2:88:7e:6d:3e:de:dd:08:13:c6:95:a6:
                    0d:33:a6:d4:42:a6:39:51:d7:58:65:cf:cb:04:d7:
                    b7:ab:c8:7e:cb:1c:a9:12:19:1a:d8:c2:a8:99:ac:
                    fb:c0:11:ef:b1:7c:33:bd:0e:99:66:0b:82:55:88:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:08:26:C3:1E:96:F4:1D:5A:EA:F2:91:55:1A:40:98:0D:89:91
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:03:5a:9c:08:67:8b:f6:f0:90:04:f8:e4:0a:23:1e:18:8e:
         0c:65:46:6b:38:e5:3b:1a:5f:79:01:43:5c:4b:ae:4e:be:48:
         de:60:fa:51:2f:1b:2c:3b:dc:9d:fc:05:29:e9:17:98:c9:03:
         a9:1e:71:7e:da:8e:ac:f8:77:9a:b6:3c:6a:9f:05:f3:5e:eb:
         53:b0:53:bb:41:87:57:a9:f3:22:62:9e:94:82:ee:21:bb:f8:
         e8:f4:88:92:63:68:67:75:68:fe:5c:35:0f:5f:09:21:17:a8:
         c0:e2:ad:c1:d1:d6:3b:21:b6:90:e4:85:9e:e6:8e:f3:46:45:
         ae:4d:02:27:18:97:3d:03:b8:d8:06:af:91:1e:5c:dd:b7:de:
         41:37:9e:2e:ed:30:52:03:4d:c4:a4:a9:72:f3:76:da:fd:e0:
         d7:9a:c9:98:95:c9:9b:44:5e:ca:78:77:4f:46:62:d5:89:25:
         c1:48:bc:8c:37:e2:d8:a8:ef:d8:cc:5a:06:36:f6:72:ed:37:
         ca:a1:55:95:19:21:ee:08:f6:6a:51:97:ca:3e:0f:ed:63:bb:
         1d:6b:56:ee:af:b4:cc:04:84:b5:e7:68:83:2e:65:cf:f8:11:
         df:c3:e6:10:98:25:72:f8:77:d6:87:85:ad:79:bb:05:c2:8e:
         4b:dc:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org