Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa
File:                     3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          fN88QC8T+Y2sxRSkq8z4+iKtHiq8ujii46PYV2/zCOA=
Subject key identifier:   56:AF:2E:9B:B8:BB:B2:51:85:72:5C:8F:45:A8:62:95:FF:E9:5E:E0
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       26D2D8446A50253D2502A9AC7116B57436DC238F
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:22 +0000
ROA not before:           Mon 08 Apr 2024 20:02:22 +0000
ROA not after:            Mon 07 Apr 2025 20:07:22 +0000
asID:                     28270
IP address blocks:        177.130.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:d8:44:6a:50:25:3d:25:02:a9:ac:71:16:b5:74:36:dc:23:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:22 2024 GMT
            Not After : Apr  7 20:07:22 2025 GMT
        Subject: CN=56AF2E9BB8BBB25185725C8F45A86295FFE95EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:5d:62:c3:66:a3:ec:bf:7d:44:fe:e6:c0:
                    d6:f4:22:cb:0e:dd:66:cf:44:72:44:a9:ce:96:07:
                    09:db:64:57:2c:9d:49:2a:03:9f:b2:ef:da:d8:2d:
                    0c:f2:42:3e:44:46:95:ac:b5:05:bf:7d:cc:55:de:
                    fb:0c:0c:35:ef:d7:14:94:27:38:4e:33:3d:bf:82:
                    71:c1:10:d9:d1:db:61:5e:ba:be:e9:7a:26:d0:3e:
                    9a:b7:46:86:6f:59:e1:53:32:a0:02:9c:7e:87:85:
                    dc:17:d0:f6:83:8f:0a:84:3c:6e:a2:a7:08:52:b4:
                    85:34:34:37:8e:2b:f1:f7:d9:e0:60:bc:d1:4f:6b:
                    85:c3:52:9e:17:46:c1:c7:46:49:0e:78:29:2d:92:
                    20:f9:ad:3f:32:bc:06:91:7b:3a:38:60:f0:5f:5c:
                    c5:28:ea:ac:34:52:69:11:58:8b:af:fe:6e:45:86:
                    0b:7a:1a:bb:1b:93:3d:92:11:a7:8d:df:0f:c8:57:
                    3e:aa:39:cf:16:27:61:b9:1c:10:f3:03:53:86:9b:
                    90:f4:04:9e:f3:47:21:09:2c:f5:e8:ea:75:d3:40:
                    42:51:1d:86:ae:51:b4:f6:88:6f:9e:a0:5e:66:7d:
                    c8:bc:e9:d6:f5:be:c8:32:5d:c6:bf:e6:f7:5a:20:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:2E:9B:B8:BB:B2:51:85:72:5C:8F:45:A8:62:95:FF:E9:5E:E0
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:a4:9e:d4:81:6f:8f:b9:c2:2a:34:b6:ee:93:4d:ef:00:
         b2:8e:0f:cc:ce:13:6e:e1:6f:09:0f:14:f2:26:67:82:ed:7f:
         2e:c9:e2:3b:75:8f:cb:00:c2:f1:17:35:cf:51:ef:84:17:ae:
         8a:d7:7b:9a:9a:c0:a7:55:96:6a:f3:9a:65:72:fa:e5:a3:81:
         be:8c:58:f7:49:82:1b:c1:84:f7:07:06:53:b5:ee:19:78:97:
         40:88:46:a4:34:b1:de:bf:b5:fa:a2:a3:7e:40:ad:93:13:bd:
         a9:cb:b1:1f:a2:ce:6f:a6:41:1f:11:dd:93:b4:07:40:35:50:
         3e:6f:4b:6f:05:6a:6a:96:11:81:58:49:a7:48:f0:55:18:4f:
         58:70:e6:c2:c8:cc:09:81:e9:dc:e7:3a:a6:28:f4:00:b2:3b:
         a6:97:4f:cb:48:2e:ab:59:4a:35:c5:59:41:4e:35:f1:c8:e2:
         cd:c7:3a:96:e6:75:b5:20:16:2e:c4:96:31:68:e8:71:8c:26:
         f9:62:23:3e:5f:1d:00:c2:fd:64:6a:7a:ae:42:69:0a:c3:2d:
         1a:f7:72:4a:7d:23:10:fa:ae:09:d5:0f:96:16:ee:67:d4:b3:
         7f:82:59:ff:b9:2a:2c:fd:e1:78:77:e1:13:01:3b:3d:38:39:
         92:13:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:14 2024 by rpki-client on console-ams.rpki-client.org