Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File:                     3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          Sz8CesFfyB6vVOypud4e2Molfr/8XS8XD2iJ+6114LA=
Subject key identifier:   92:52:6A:0F:92:AD:4F:C2:51:C1:37:8E:E8:A7:C8:C8:8F:4F:6A:4B
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       64D15A6B9199B1D25F435CE5557B089200737FB2
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 09 Sep 2024 15:00:17 +0000
ROA not before:           Mon 09 Sep 2024 14:55:17 +0000
ROA not after:            Mon 08 Sep 2025 15:00:17 +0000
asID:                     262509
IP address blocks:        177.67.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d1:5a:6b:91:99:b1:d2:5f:43:5c:e5:55:7b:08:92:00:73:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:17 2024 GMT
            Not After : Sep  8 15:00:17 2025 GMT
        Subject: CN=92526A0F92AD4FC251C1378EE8A7C8C88F4F6A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:0c:e2:ac:f9:49:72:bf:39:03:be:c4:dc:
                    51:47:bb:56:de:5c:d4:64:81:8e:a0:94:c9:a0:85:
                    f6:b2:3a:96:90:7a:8d:41:5f:4c:e7:ec:b5:e1:bf:
                    87:a7:fa:ec:d3:9f:da:31:f5:0c:d8:a1:85:1b:d2:
                    36:3e:28:1f:55:6b:3d:82:17:fb:7a:41:7b:d9:f3:
                    d8:a3:17:99:9a:35:f1:40:ef:01:1d:47:2d:ca:3f:
                    cf:ac:6f:98:0c:c9:89:9a:08:23:35:f1:ed:54:8d:
                    20:de:56:3a:49:0a:48:ec:6d:d9:d8:67:36:e7:f8:
                    54:aa:29:c7:d4:5c:ac:d0:16:61:4f:6f:97:9b:07:
                    fe:49:c9:67:5d:d8:cf:83:8c:7b:ce:d4:35:be:e5:
                    43:3f:35:d8:3b:4b:49:a1:31:bb:bb:37:91:69:75:
                    fd:83:26:dd:af:fe:27:9f:28:ee:69:43:19:70:38:
                    89:8c:49:bf:54:3c:52:35:5b:64:e8:0a:2e:73:13:
                    58:d5:88:ef:3f:0d:20:33:fd:bd:d9:7b:e9:d0:7f:
                    b5:1c:79:db:bf:46:3d:e5:c1:87:5f:44:b4:49:1c:
                    42:59:64:f2:8b:4f:c4:90:49:31:dd:07:e7:dd:ae:
                    99:e5:29:72:6f:b7:71:64:33:01:18:77:62:fe:5b:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:52:6A:0F:92:AD:4F:C2:51:C1:37:8E:E8:A7:C8:C8:8F:4F:6A:4B
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:07:f1:f6:0e:cd:d5:89:f7:40:b2:4d:f4:4c:ab:db:dd:
         38:42:74:3a:e5:8f:6d:8a:0d:16:ad:ea:76:b4:1f:71:a1:51:
         dc:0a:45:05:36:e8:c1:fd:00:20:fd:c7:9f:8d:bd:f9:4f:47:
         a7:69:78:70:60:5b:1b:16:3f:1c:ee:e3:c4:ad:9f:fa:38:ec:
         87:75:2a:43:9e:13:df:76:a3:30:ac:b5:66:fb:2e:6f:76:f9:
         f6:2e:4a:ec:05:d9:1d:d5:15:2e:fa:08:19:a2:c9:99:9a:83:
         8e:e8:d4:f4:87:99:c3:f1:02:29:e5:73:f5:f3:37:1e:0f:cf:
         b4:c0:c6:b4:46:62:02:03:e8:95:1a:41:25:ff:8e:c3:8a:14:
         91:c3:a1:44:2f:87:a5:23:b3:9e:d7:79:be:ee:4f:0e:c1:5a:
         49:2f:d6:8b:cc:8f:e3:2d:bf:e5:f6:5a:19:25:8a:c9:c4:17:
         59:03:89:01:c3:cd:61:f0:5b:af:98:f5:00:07:87:33:1d:2a:
         d6:20:0f:78:d0:7e:8f:c9:6b:9b:29:fe:07:77:8e:b7:40:a2:
         22:21:b5:e7:7e:93:68:5f:0d:02:6b:1d:85:a1:82:8f:90:c9:
         db:bf:60:d5:b1:60:a9:2a:62:34:af:66:3d:c4:c8:e9:d8:d7:
         36:56:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org