Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          rdS0zEfvkWmkpWTQpgOPWSc0ppXTa2SWYtjuG5BD4z4=
Subject key identifier:   DC:F9:39:44:99:F6:8E:59:4A:F8:F0:3A:88:7F:14:A4:F0:F7:B0:50
Certificate issuer:       /CN=D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1
Certificate serial:       02BF0CD3A70D18664E7E6DA0228899D2225D88D5
Authority key identifier: D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 13 Jun 2024 22:01:27 +0000
ROA not before:           Thu 13 Jun 2024 21:56:27 +0000
ROA not after:            Thu 12 Jun 2025 22:01:27 +0000
asID:                     28587
IP address blocks:        177.128.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.crl
                          rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:0c:d3:a7:0d:18:66:4e:7e:6d:a0:22:88:99:d2:22:5d:88:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1
        Validity
            Not Before: Jun 13 21:56:27 2024 GMT
            Not After : Jun 12 22:01:27 2025 GMT
        Subject: CN=DCF9394499F68E594AF8F03A887F14A4F0F7B050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:bc:d0:d6:e1:bb:f5:51:a2:a4:89:de:59:
                    11:16:10:cb:81:28:8b:ac:ab:e4:eb:54:92:c5:83:
                    d0:cc:9a:05:5a:a5:b3:7c:8a:99:3e:42:00:11:54:
                    41:87:2c:7c:ed:ac:08:83:27:d9:e3:53:9c:02:04:
                    89:7f:44:06:3c:cc:e5:b6:c7:10:95:6d:30:68:d8:
                    67:11:72:8a:68:be:a0:24:25:c2:9f:41:bb:b8:fc:
                    08:34:5e:d4:ef:5c:7a:5b:85:04:3c:fe:28:b0:43:
                    c4:cf:82:6f:ac:d7:7d:1d:ca:cb:99:0e:f2:59:b4:
                    cd:4f:8d:58:56:15:27:0f:3a:53:d5:1d:f3:ef:45:
                    91:ba:4e:73:2b:8c:26:7f:e2:d6:60:32:6f:31:45:
                    e7:fa:48:ad:70:98:d3:21:ec:af:dd:08:e6:63:18:
                    a6:8d:ad:9c:c5:3e:d7:b1:48:6d:c7:b3:81:3c:7c:
                    24:23:b3:00:bd:09:9b:33:2c:b8:67:fa:1e:bb:de:
                    87:44:5b:8c:1b:1b:f4:8f:d9:ff:ab:b8:79:59:cd:
                    4d:58:0c:8f:a4:dd:f6:78:c9:66:35:b6:7c:11:22:
                    92:6f:d5:98:0d:1a:b4:c9:77:5b:ba:08:44:29:13:
                    80:9e:44:84:8c:14:64:a3:e1:be:07:5b:f7:dc:80:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:39:44:99:F6:8E:59:4A:F8:F0:3A:88:7F:14:A4:F0:F7:B0:50
            X509v3 Authority Key Identifier:
                keyid:D5:FB:8D:06:FF:1C:66:FE:44:3F:2C:40:C3:00:A3:BD:D4:A1:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5FB8D06FF1C66FE443F2C40C300A3BDD4A1D3D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:a5:36:29:49:d6:4f:1d:7d:7e:3b:f9:d1:3c:b9:a8:b0:
         f8:91:52:ed:1f:03:c6:e0:48:cb:61:e2:95:dc:3b:2a:d5:d7:
         a1:3f:60:fe:62:86:0d:0c:3f:73:aa:19:99:11:5d:77:a3:f7:
         dd:eb:14:09:6b:56:a6:e0:42:a1:92:5d:f9:f1:10:b7:9f:cc:
         66:44:f5:87:36:71:7b:52:99:9a:36:68:71:08:d6:60:1e:be:
         ad:f3:a2:e3:1a:4c:c0:64:ec:28:84:64:ee:5a:b4:a9:35:52:
         b4:c5:6b:25:e2:0e:a8:87:60:bd:83:fb:1c:ba:f6:d3:af:8c:
         b2:ee:81:b3:0d:75:81:68:b1:31:99:b4:5e:8d:e9:4c:b2:f2:
         3c:05:95:3d:02:67:0a:42:c1:64:9f:1d:88:81:cc:c1:53:58:
         5f:a0:5e:75:a4:ed:56:5d:71:3a:fc:5d:08:f3:f6:70:a9:24:
         97:c4:ff:08:7d:f4:9e:e7:db:91:8d:06:1e:bb:11:77:46:ce:
         3b:31:bc:29:90:c6:d1:da:0b:32:47:15:5c:33:66:ae:90:ed:
         57:29:2d:34:85:97:6d:30:a5:46:d0:16:1c:24:85:48:15:f0:
         86:5c:16:16:04:f3:44:e7:4e:73:90:97:57:e2:74:1d:62:29:
         b0:62:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 10:43:14 2024 by rpki-client on console-ams.rpki-client.org