Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          aFQZtM5zpJ8lmP1xyVI/n7X6MJzyHmYiKFP21m/tOHQ=
Subject key identifier:   0F:D0:C9:EB:F3:89:1F:E6:7E:F0:38:8E:E5:3E:CA:49:1D:46:90:7F
Certificate issuer:       /CN=D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1
Certificate serial:       0FE85932508FDEB32C90A24B7680E3F0BF456A96
Authority key identifier: D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 13 Jun 2024 22:01:25 +0000
ROA not before:           Thu 13 Jun 2024 21:56:25 +0000
ROA not after:            Thu 12 Jun 2025 22:01:25 +0000
asID:                     28587
IP address blocks:        177.128.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.crl
                          rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 12:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e8:59:32:50:8f:de:b3:2c:90:a2:4b:76:80:e3:f0:bf:45:6a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1
        Validity
            Not Before: Jun 13 21:56:25 2024 GMT
            Not After : Jun 12 22:01:25 2025 GMT
        Subject: CN=0FD0C9EBF3891FE67EF0388EE53ECA491D46907F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:0a:a2:8a:6d:7d:a6:68:e9:e2:de:97:a1:
                    5d:84:64:d8:6a:a9:a3:ac:c7:16:05:16:3c:b5:51:
                    9e:b6:86:8c:fa:48:ed:79:de:2e:d7:01:9a:a7:bd:
                    d4:2d:f2:35:33:9e:ff:9a:20:10:c9:c6:91:0d:ea:
                    c3:44:ef:75:ed:90:3a:7d:71:21:4a:d1:3b:41:87:
                    58:00:f1:7c:e0:05:1a:5e:98:33:c3:dd:80:9e:6d:
                    ec:9f:83:92:15:65:11:54:4b:ce:05:e5:df:0e:d2:
                    77:7f:89:fc:6d:0c:83:95:bf:de:ad:58:5f:dd:63:
                    90:41:f2:be:4b:9d:ea:eb:02:59:c0:4d:62:0f:80:
                    52:95:96:bb:82:43:31:7d:10:08:7f:fd:4e:6b:ca:
                    c6:a9:d8:f6:24:9d:83:aa:8b:db:ed:93:bd:b9:92:
                    50:2d:bd:b4:9d:2b:11:7b:45:66:be:05:ba:9e:8e:
                    e2:35:29:22:d9:1e:94:02:21:c0:e2:db:b4:bf:3f:
                    e1:dd:ac:13:09:2f:39:ad:12:eb:5c:9d:e1:80:46:
                    11:94:fb:7b:6a:fd:4a:74:a7:ee:85:f4:b0:77:d6:
                    63:e4:95:01:96:45:50:d9:76:59:e7:8d:36:cc:90:
                    ee:5b:2c:da:7c:42:08:41:9c:ea:b1:07:55:9d:1b:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:C9:EB:F3:89:1F:E6:7E:F0:38:8E:E5:3E:CA:49:1D:46:90:7F
            X509v3 Authority Key Identifier:
                keyid:D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:68:09:4a:d7:68:da:6a:8b:71:88:e1:7d:48:c5:6a:1e:
         32:00:5d:00:ac:a6:c5:ff:81:be:ed:35:4c:ca:5f:d0:49:32:
         cb:73:0d:eb:db:29:ac:7a:95:44:fb:1a:69:2d:1a:ae:e0:b1:
         b1:eb:4a:f3:bc:f0:3a:96:58:8b:2a:7a:88:42:89:d3:51:0b:
         0a:51:56:a0:c8:19:df:a2:0d:a2:8c:56:fb:cd:61:99:b1:33:
         c7:19:f4:1b:6d:b0:01:36:d8:e2:eb:22:8b:ac:91:a6:8d:9d:
         f8:32:22:e0:3e:11:07:90:6d:3c:d9:5a:03:e9:4d:98:29:e6:
         fa:31:68:78:7a:73:9f:2c:a7:18:06:53:5e:81:67:48:a9:e6:
         04:10:15:a4:b8:e0:ac:05:14:22:84:04:19:a6:3c:e8:c5:22:
         33:7c:e3:0f:b0:70:c2:bf:70:05:1f:94:87:44:e9:c7:ac:a5:
         77:d3:03:0e:9b:0a:42:27:92:7d:a0:ae:8f:cf:14:c1:3c:7b:
         b8:ea:4c:7e:6b:bd:21:3f:99:f0:bd:a3:29:b4:8c:d9:51:fa:
         6f:42:bb:68:90:c1:1f:f3:bf:d8:01:38:66:c9:3c:c1:24:ee:
         02:0d:b8:16:d0:9d:b2:ee:ce:27:b8:00:8f:80:d0:2b:cf:2b:
         24:c6:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:07 2024 by rpki-client on console-ams.rpki-client.org