Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          6H5JqxYNUXszCR0y+JbKfYONpj1zhEH+CZpvr8CHkp8=
Subject key identifier:   8E:A0:24:F8:31:2D:3F:A3:B0:18:3F:7C:24:EE:81:EB:67:95:CE:6A
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       53D20A55483A57E5514E3EF738BE9A81845EF059
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 09 Sep 2024 15:00:18 +0000
ROA not before:           Mon 09 Sep 2024 14:55:18 +0000
ROA not after:            Mon 08 Sep 2025 15:00:18 +0000
asID:                     271724
IP address blocks:        177.75.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:0a:55:48:3a:57:e5:51:4e:3e:f7:38:be:9a:81:84:5e:f0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:18 2024 GMT
            Not After : Sep  8 15:00:18 2025 GMT
        Subject: CN=8EA024F8312D3FA3B0183F7C24EE81EB6795CE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:31:c4:ea:69:44:21:8f:85:00:98:07:b1:
                    1a:99:b9:7b:ca:01:d3:45:a2:04:ce:ed:bf:92:ed:
                    2a:50:b9:98:ba:b7:e2:77:67:9c:6c:f6:73:77:37:
                    86:52:c8:c9:ce:87:c3:dd:85:ce:da:42:57:7a:c7:
                    ce:ee:ca:17:68:d3:4d:10:8b:56:48:7d:ba:2b:8b:
                    33:d0:8f:d0:f0:e9:e9:ac:24:d0:bc:de:b1:f6:3b:
                    9b:1d:50:64:22:78:a0:b2:2e:38:c8:ad:e4:54:14:
                    f8:b0:c7:46:b8:cd:8b:7d:9c:e0:c0:84:2d:b1:78:
                    4a:ad:88:b0:24:60:17:95:e7:7e:94:f6:94:90:4a:
                    3c:38:02:75:ad:2f:36:59:1d:39:27:dc:20:c0:c5:
                    4a:9d:22:75:ef:30:a2:e6:9b:bc:08:5a:f7:91:5a:
                    71:01:72:e0:43:af:cf:0b:62:d4:7b:4d:64:ea:eb:
                    66:1a:65:51:42:65:5c:f5:78:5f:81:5c:27:d0:54:
                    9c:c1:c4:22:e7:08:9e:00:80:0f:26:e7:a3:09:78:
                    ae:79:04:58:1d:1c:c4:b3:b8:ad:12:e2:b4:72:0f:
                    54:3c:77:4a:69:0e:03:85:a4:54:26:72:02:69:d3:
                    49:61:21:57:01:31:2c:d7:a3:8e:ed:20:57:c9:d7:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:24:F8:31:2D:3F:A3:B0:18:3F:7C:24:EE:81:EB:67:95:CE:6A
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:f6:13:4d:ee:5c:18:f1:04:b8:74:43:45:b6:81:3b:4e:
         84:34:8b:7a:fb:1d:80:75:6a:5d:84:cb:ca:b7:85:37:dc:d2:
         e4:13:4c:2f:e6:74:79:89:30:e8:65:5d:c4:fa:fc:c9:16:c2:
         97:69:ad:60:71:bc:a2:e2:62:0c:28:fd:39:e7:ec:06:30:82:
         9e:84:2a:39:7c:62:37:1f:13:11:2a:f5:25:4e:9e:d8:0b:fd:
         6e:23:22:29:52:4b:1d:06:bc:31:47:5d:38:ee:1c:31:0f:81:
         cc:de:57:dd:a0:83:ce:a6:a6:6a:50:d1:67:0d:37:a3:8b:7a:
         06:d6:15:e9:1f:b0:53:f6:89:39:21:08:0e:6c:55:3b:13:fd:
         9e:eb:13:a6:73:30:3d:8d:11:47:77:06:16:d9:2c:bb:6c:fd:
         d8:f9:90:7e:ab:5e:54:20:55:2e:99:68:ec:73:f0:89:6e:34:
         ae:b3:3a:13:4b:4c:52:7e:38:cc:f4:1d:ad:7f:3b:ad:d1:7d:
         7b:d4:bb:c7:d1:c4:d8:7c:19:e8:ed:86:fb:7b:d7:bd:7a:75:
         60:6d:e2:67:88:d3:01:b6:9a:8e:d3:94:db:9e:38:6e:c2:a7:
         6e:c9:66:28:8b:ed:43:83:fb:2b:de:36:6b:b3:8b:17:de:df:
         2a:37:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org