Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36342e302f32322d3232203d3e20323633323839.roa
File:                     3137372e3139302e36342e302f32322d3232203d3e20323633323839.roa (raw, json)
Hash identifier:          HmGZxii5Co9SV+f7LdbR9t5HpIEFbdKI9LBjLwnlv68=
Subject key identifier:   F4:D0:25:E8:12:A9:13:7C:72:DD:6B:0D:5F:D6:E2:B3:7D:FA:15:D3
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       7C3E8706A44A00B64130B580DAEF5B15FBF0416C
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36342e302f32322d3232203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:19 +0000
ROA not before:           Thu 04 Apr 2024 10:01:19 +0000
ROA not after:            Thu 03 Apr 2025 10:06:19 +0000
asID:                     263289
IP address blocks:        177.190.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:87:06:a4:4a:00:b6:41:30:b5:80:da:ef:5b:15:fb:f0:41:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:19 2024 GMT
            Not After : Apr  3 10:06:19 2025 GMT
        Subject: CN=F4D025E812A9137C72DD6B0D5FD6E2B37DFA15D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0d:45:5d:e3:1f:6e:dc:8c:f6:52:75:b1:97:
                    79:c6:ff:78:00:6f:56:10:54:fe:b8:f7:97:ac:7a:
                    3d:10:ab:aa:0f:ed:c1:c1:24:01:d0:65:cf:3a:52:
                    67:25:ad:2d:79:0b:ae:31:27:e6:90:34:29:ed:f4:
                    db:0b:11:4b:cd:02:8b:df:92:dc:2b:59:6c:48:3d:
                    f5:38:e9:d0:80:6d:ad:62:a2:2a:e6:27:1c:32:a4:
                    4c:0f:b7:57:7c:39:94:ee:18:1f:d3:dd:d5:40:55:
                    14:ed:30:f5:fc:b0:42:bd:f3:0e:76:5c:fb:d4:28:
                    e6:d9:57:b6:41:86:ad:ef:4c:2a:9a:76:9f:49:a0:
                    93:87:a9:8d:1c:b5:65:d0:62:77:4d:7e:45:a5:9f:
                    b5:b4:1a:8b:53:43:cd:5e:4b:53:33:44:d7:17:b7:
                    03:5a:e1:be:b2:0e:36:4c:d1:1d:b1:66:eb:d0:71:
                    bd:7c:10:18:02:d9:fe:c7:35:13:ae:61:4b:4a:53:
                    cd:06:3e:f9:41:94:df:31:82:24:ac:35:53:fa:13:
                    27:f1:db:4d:b7:44:06:8f:f9:d7:cb:a9:e4:21:1e:
                    19:df:22:e4:62:0a:0e:a6:4b:e9:a1:41:cd:6c:a0:
                    d2:38:10:84:45:f0:44:48:46:f8:0c:a8:ba:5c:8c:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:25:E8:12:A9:13:7C:72:DD:6B:0D:5F:D6:E2:B3:7D:FA:15:D3
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36342e302f32322d3232203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:50:a8:0d:18:45:5f:a9:14:49:da:8d:d4:7d:d5:c9:01:a0:
         c4:6f:8b:74:4a:85:4a:e2:b9:6b:1d:99:ba:95:51:9b:4c:b4:
         3c:0a:06:cb:89:32:1e:14:7c:1d:d6:1e:2a:74:b7:c7:e5:6a:
         73:d8:db:34:5f:b7:20:d4:00:db:8b:1f:d0:4f:c6:26:45:c7:
         f4:37:3f:5c:24:3c:8f:b6:18:f7:17:3c:80:7f:f3:74:8d:68:
         88:f5:48:b6:b4:f8:9e:00:c5:39:6d:bf:d6:7b:34:c7:eb:c7:
         d1:de:97:94:35:6a:5e:1a:c4:d9:a8:1b:7d:89:17:28:24:25:
         08:d8:4d:8a:1a:c7:8d:5d:9a:0b:fe:4f:ba:db:5c:63:fe:08:
         56:43:e1:4e:30:36:27:c1:16:d5:48:cc:07:57:b4:6b:79:fa:
         2f:ee:e1:9e:3d:4f:87:03:91:a6:92:a7:af:a2:18:c5:df:b1:
         24:1a:9f:d7:08:05:3c:b3:ba:48:b2:ed:f1:f7:44:19:1f:18:
         9d:15:af:5f:38:b7:bd:48:ae:76:23:5a:cb:66:ca:2f:c2:84:
         85:4e:e6:f7:b0:90:cb:fc:15:b6:a6:e2:9b:b1:2b:35:23:46:
         11:e3:76:7a:57:87:12:d6:4e:70:5e:27:be:5e:a0:5f:5a:80:
         70:0e:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org