Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa
File:                     3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (raw, json)
Hash identifier:          JQcsGp0S+uSmKUn8yNQzRlGRwzLOPhrgGLuK3QXC1/I=
Subject key identifier:   39:56:C1:EF:78:31:D7:AC:85:97:F1:DD:9F:9F:AB:24:40:DF:2A:96
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       3602B10E8F1C72DC5FA2C521F424DD2B09BEE52D
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa
Signing time:             Wed 05 Jun 2024 19:30:26 +0000
ROA not before:           Wed 05 Jun 2024 19:25:26 +0000
ROA not after:            Wed 04 Jun 2025 19:30:26 +0000
asID:                     263084
IP address blocks:        177.21.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:02:b1:0e:8f:1c:72:dc:5f:a2:c5:21:f4:24:dd:2b:09:be:e5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Jun  5 19:25:26 2024 GMT
            Not After : Jun  4 19:30:26 2025 GMT
        Subject: CN=3956C1EF7831D7AC8597F1DD9F9FAB2440DF2A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:54:0c:a0:22:dd:57:50:d5:c6:e6:9c:52:
                    1b:60:56:bc:9a:dc:86:57:71:9e:eb:6e:81:18:8b:
                    cc:65:1e:aa:54:45:9c:1c:08:4d:ed:3d:35:e9:fe:
                    52:51:db:38:05:b6:b5:bf:6a:ba:bf:ab:9a:b9:90:
                    1c:4d:62:b6:f2:54:cb:4b:e2:04:52:ee:48:60:67:
                    d8:30:e8:bc:12:5a:c8:03:d7:6d:28:d6:a7:1a:cf:
                    85:9c:0c:e5:18:10:9c:ee:6b:5f:1a:a5:83:d0:53:
                    21:a0:3d:b8:a7:de:a0:f7:62:c6:71:df:59:ef:54:
                    ba:0b:84:f8:06:08:65:90:c6:0a:4c:3e:21:71:6a:
                    b8:97:2e:f7:29:cf:3c:de:fa:fc:1a:de:82:ed:45:
                    e5:22:2a:68:28:3e:ef:0e:ca:6f:13:0e:90:1e:d1:
                    19:92:3b:b6:6f:d4:8b:ba:f4:0c:e5:49:f3:66:59:
                    d3:3b:f1:a8:2b:c8:59:bf:d2:fc:3d:42:11:11:32:
                    63:97:ef:03:f3:b7:0e:89:78:f9:6d:74:b5:36:a4:
                    f3:3a:43:58:11:8d:d9:ae:1f:08:e7:3e:2a:d4:73:
                    63:08:e6:18:22:b6:ff:4d:31:31:7e:04:ee:c5:6e:
                    87:f9:c0:6c:77:71:17:f7:13:ed:d8:16:34:e2:9d:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:C1:EF:78:31:D7:AC:85:97:F1:DD:9F:9F:AB:24:40:DF:2A:96
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:7c:55:76:dc:42:e1:c9:90:a9:90:7c:3f:ac:75:38:fc:
         86:ce:72:93:42:59:04:e2:f6:45:87:c3:e1:91:45:c3:79:4f:
         2f:4a:22:86:e1:7f:96:4c:ca:92:a0:77:b8:c2:95:0b:48:94:
         37:ae:8b:80:87:0b:65:be:97:11:ea:2b:75:17:5b:35:aa:29:
         9a:11:c5:52:d6:bc:5c:8c:b1:64:7d:2e:57:25:b2:d1:2b:fd:
         04:ee:39:13:a0:c6:f6:6d:f5:37:cd:fe:bb:8f:20:64:ce:4a:
         0e:af:57:9d:55:b9:7b:91:3e:4e:20:da:fb:d3:54:99:ac:d5:
         f4:ed:75:d4:7e:16:1f:45:03:e2:0b:fa:92:6a:b9:30:f4:0b:
         85:dd:d7:0e:41:b8:ba:81:2d:a7:ab:5f:d4:5b:1b:ac:96:ac:
         49:84:3b:25:e8:18:64:e7:f9:f6:a7:86:16:a9:4e:87:a7:82:
         d9:fa:f4:0c:d4:cb:01:b6:06:08:7b:59:4a:f7:2f:ae:37:b0:
         9c:7d:cc:5c:97:69:c6:db:1b:f9:46:16:f7:67:a4:0d:46:52:
         31:b7:d7:06:15:01:1b:dc:ce:7d:bd:f9:22:28:01:f7:b8:9c:
         ea:39:77:32:e8:60:4a:69:04:6b:c1:09:9d:8c:1e:91:7b:18:
         78:09:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:42:55 2024 by rpki-client on console-fra.rpki-client.org