Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          SxyP38RTZPilVTy6IdtFCbdOs8tboYvX362z6Tpu9Ws=
Subject key identifier:   39:5A:81:D2:D6:A8:B6:07:1A:D7:8D:E8:3A:E9:09:F4:01:D6:39:F2
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       232D2DA566530675B5A2AA4FF781DC9A11856A95
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:18 +0000
ROA not before:           Mon 09 Sep 2024 14:55:18 +0000
ROA not after:            Mon 08 Sep 2025 15:00:18 +0000
asID:                     28270
IP address blocks:        177.75.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:2d:a5:66:53:06:75:b5:a2:aa:4f:f7:81:dc:9a:11:85:6a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:18 2024 GMT
            Not After : Sep  8 15:00:18 2025 GMT
        Subject: CN=395A81D2D6A8B6071AD78DE83AE909F401D639F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:5d:95:46:fa:bf:80:c3:3f:c1:e6:1e:83:
                    84:02:50:8a:15:3e:84:f3:e1:ea:bb:0e:a6:44:7e:
                    a4:0b:8b:36:65:4f:8a:bc:a2:2d:24:61:81:78:79:
                    4a:40:fb:85:1f:b9:b4:c7:07:8f:e4:02:7c:5e:ce:
                    93:54:ee:2f:ee:f0:9a:ce:b6:c6:54:f5:27:f8:42:
                    2b:18:84:df:87:53:27:1f:72:b2:ba:8c:3b:b8:04:
                    a2:52:3b:1a:fa:fc:c6:44:82:5e:32:29:2f:71:c9:
                    71:cd:e6:04:bd:b4:2a:89:95:ef:f1:89:06:c8:21:
                    85:27:2a:40:55:46:ce:d5:65:50:de:73:f5:76:5b:
                    ea:ed:d6:ec:ee:4a:30:72:71:05:76:49:ad:f3:27:
                    34:ea:ef:7c:20:0a:93:88:48:8f:92:96:c4:0b:be:
                    c1:c1:5b:78:b5:a9:54:21:97:34:dc:a3:0b:5b:e1:
                    82:fc:b0:b6:ab:ff:53:5d:7d:6f:01:a3:03:fc:20:
                    d8:ae:9d:85:8f:8a:ce:43:14:e3:c3:a2:14:9c:40:
                    25:41:55:e0:49:10:56:a1:61:24:35:3c:d2:0b:56:
                    96:b8:0b:5d:29:5e:7a:cb:6b:ea:03:8b:49:01:38:
                    82:e4:7d:92:3d:a9:00:ab:94:a4:d0:bb:bb:3c:5b:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:81:D2:D6:A8:B6:07:1A:D7:8D:E8:3A:E9:09:F4:01:D6:39:F2
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:b0:62:d5:54:fe:e1:19:54:9d:4d:10:b8:4c:60:1a:66:c4:
         f8:6c:f1:d6:e5:51:f1:38:0a:51:09:be:a8:30:0e:18:e2:0b:
         09:62:8d:eb:bf:b6:c2:96:64:4a:cf:17:cf:2b:d1:2a:72:0d:
         c1:2f:6d:f8:0b:87:bb:e8:69:2c:06:03:89:4e:1f:19:89:4b:
         7b:2a:8b:5f:0a:95:29:63:99:b8:3e:4d:66:7a:50:10:27:bf:
         22:c8:26:16:fe:59:1c:15:d9:14:b8:15:db:d9:3f:ec:0f:f1:
         5c:f7:20:20:9a:cd:21:17:56:6d:7f:6d:1c:dd:6a:75:6a:06:
         6f:96:1d:5f:ff:64:56:d3:1e:6f:9f:2a:b5:c8:c8:41:a7:14:
         61:78:77:73:3a:54:ad:83:de:22:12:1f:eb:45:2f:43:d0:73:
         19:2c:ea:6e:01:75:3d:91:da:e8:ba:a8:5f:9d:3e:dd:cb:95:
         39:e0:a5:e4:f4:57:71:4d:20:31:92:82:6f:81:49:e3:cd:3d:
         d1:48:89:bd:4c:f7:2a:54:be:04:6e:d2:c8:0c:d8:82:4d:f5:
         d9:4a:58:71:50:3a:ce:b7:76:67:54:c3:dc:7c:4d:15:20:71:
         15:4d:a4:15:06:77:b1:c8:fb:55:6f:21:61:e8:4d:4f:73:0d:
         e6:98:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org