Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa
File:                     3137372e37352e3139322e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          NbIk6h4AyXNzvBY10LjQjrqAHE6w4d3PmWw5Nndv6MA=
Subject key identifier:   20:07:98:37:A9:13:C5:83:91:01:61:FC:F6:06:3D:84:75:6B:52:18
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       3B2035D252BAF90920C0F7BE2399B694340F3C8C
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        177.75.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:35:d2:52:ba:f9:09:20:c0:f7:be:23:99:b6:94:34:0f:3c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=20079837A913C583910161FCF6063D84756B5218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:d4:a3:24:ba:01:5f:a2:d2:02:8c:19:09:
                    90:74:ba:1d:8f:81:22:86:c3:e0:bc:92:84:33:21:
                    a4:36:19:c9:7a:20:61:a4:b5:1d:35:0d:0d:91:5a:
                    b0:43:73:00:de:b3:94:6d:84:ce:49:ef:9d:e2:26:
                    d7:41:21:d5:00:86:a6:21:f8:7a:8c:b6:e4:9b:9b:
                    6f:63:d2:ad:8b:13:e8:13:1c:6e:fa:51:c8:52:4c:
                    dc:80:e3:06:90:8e:b4:34:e6:88:30:12:61:e1:51:
                    cb:a5:ad:ac:21:3b:cc:e2:e5:81:d3:94:e6:0e:02:
                    d6:ca:05:67:52:1b:f6:d1:2d:49:de:9d:b8:95:21:
                    e5:d9:7a:a8:ca:92:34:a2:af:d6:ee:d7:42:33:91:
                    8e:75:14:4c:25:82:eb:a1:8a:f2:be:41:1a:5d:1e:
                    59:76:af:51:51:75:a3:44:0c:e3:36:5c:c4:5f:a6:
                    12:63:44:71:00:fe:28:34:5e:e0:79:15:49:96:bd:
                    9f:75:ac:87:7b:fe:f2:08:c4:a5:b7:8a:e4:89:cd:
                    1e:32:6f:93:f7:48:75:0b:f0:05:3d:46:91:97:87:
                    4f:2d:88:68:8e:e6:79:45:ef:61:c2:12:6e:c7:85:
                    86:fe:4a:db:5b:e9:b4:36:49:48:0f:b1:af:26:fd:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:07:98:37:A9:13:C5:83:91:01:61:FC:F6:06:3D:84:75:6B:52:18
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:c2:6a:6e:d8:79:19:3f:26:86:22:bc:dd:96:9f:ce:b5:
         22:05:57:f5:ec:0d:58:c6:9e:4c:34:9e:1d:cb:69:36:65:e1:
         4e:91:57:b9:68:02:ea:d7:36:fe:65:6a:1f:38:b4:fd:62:a5:
         27:05:d5:22:66:a7:a8:61:36:8d:70:3d:29:8f:1e:c8:3a:d2:
         28:03:95:f5:ca:12:fc:61:ef:ad:dc:a3:42:5d:bb:d3:65:c2:
         b3:a1:62:58:9b:a7:79:2a:18:d4:fb:55:20:82:d8:88:65:f4:
         cd:0b:bc:04:3c:3e:d7:14:93:92:75:1b:09:07:26:5e:88:22:
         5c:5f:14:bd:5a:a5:eb:72:a4:b3:32:d7:4c:cb:1f:cf:eb:b3:
         7a:b9:24:57:a9:bb:dc:f1:09:c8:6b:15:50:23:62:2d:43:7c:
         df:7b:4a:ef:09:35:5c:e3:f6:f7:c7:e0:f4:ba:0b:76:de:da:
         29:8c:f1:86:0a:80:51:15:b8:83:26:4a:ed:0a:30:80:e1:17:
         e4:eb:b7:85:2e:80:8c:2c:4e:20:87:a4:e2:6f:4a:8b:35:cd:
         be:7f:c9:ca:01:f6:12:f7:b8:09:2f:a5:0e:f0:87:34:08:75:
         f7:b8:b8:be:54:92:61:44:a9:fd:6c:7f:c5:e7:95:e4:cc:bb:
         e7:50:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org