Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          b1MBKqmX2EACqN1SEkSRGiO+dZ3yjD9XsG4JHXD3iiM=
Subject key identifier:   BE:51:74:E4:22:87:2A:B5:7F:96:4C:58:4B:D5:98:ED:C5:AB:2B:B6
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       69B33E6493C2E1A79E25351853D13124EF00CBB3
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:17 +0000
ROA not before:           Mon 09 Sep 2024 14:55:17 +0000
ROA not after:            Mon 08 Sep 2025 15:00:17 +0000
asID:                     28270
IP address blocks:        177.87.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b3:3e:64:93:c2:e1:a7:9e:25:35:18:53:d1:31:24:ef:00:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:17 2024 GMT
            Not After : Sep  8 15:00:17 2025 GMT
        Subject: CN=BE5174E422872AB57F964C584BD598EDC5AB2BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:fb:4c:a6:27:70:03:09:c5:fb:3e:43:17:
                    d6:16:b3:fb:27:bd:04:5c:80:7a:49:2c:00:da:5d:
                    c5:37:86:1d:bf:54:b4:d7:eb:fa:75:c0:b4:66:1d:
                    20:88:37:a2:90:3a:ac:32:b8:f6:44:02:71:7d:41:
                    54:1b:20:cb:50:37:10:0f:0b:c2:7d:61:c7:9d:67:
                    79:7d:ad:bd:c8:52:7c:3b:95:7d:0a:5e:ed:15:41:
                    e0:13:93:a1:ad:d7:e5:79:af:f0:c5:e0:16:dc:61:
                    99:e5:21:3a:4f:f5:0c:97:c7:24:1e:46:31:16:58:
                    2e:8b:52:ac:11:6e:d0:84:e0:ed:fd:8f:c8:8d:02:
                    fe:56:85:60:e5:c7:14:0e:26:11:81:41:eb:e6:4d:
                    27:04:a3:a1:14:ec:7d:57:07:13:8c:9b:07:73:ee:
                    5a:94:71:e2:71:71:af:76:2c:3c:68:99:3e:65:bd:
                    e1:e7:d5:26:68:48:38:49:83:83:68:b6:73:50:05:
                    54:59:1c:05:1e:4e:ab:1a:54:75:02:4a:f2:7a:68:
                    b1:4e:c2:3f:cf:e7:0f:76:8f:70:f1:de:df:38:f4:
                    3b:2c:6d:f2:57:ba:d0:ff:b0:52:7f:58:ae:67:01:
                    f0:51:09:78:a3:27:5e:53:14:e2:4c:68:25:24:ef:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:74:E4:22:87:2A:B5:7F:96:4C:58:4B:D5:98:ED:C5:AB:2B:B6
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:c8:d5:d9:59:5c:e0:c1:e0:6c:ad:ed:72:69:30:fe:5a:
         68:50:55:57:87:53:e7:82:77:0f:78:dd:ae:8d:d5:79:5e:1d:
         1c:04:a7:ed:f0:58:48:38:d2:42:3d:f8:dd:17:6f:5a:f8:7d:
         a0:ab:90:f3:07:4c:64:74:a9:cd:3c:a9:cb:c8:5a:b6:08:90:
         57:4b:df:e4:48:35:de:83:02:ea:de:18:33:85:d9:bf:22:d8:
         2f:53:0b:84:aa:fc:82:89:20:54:62:83:1a:7c:be:d8:19:f0:
         31:d1:0a:86:b8:bc:99:41:20:cb:4c:d1:fd:82:88:b9:3d:97:
         2d:07:2f:5e:72:93:63:fd:b7:50:39:6d:ec:c5:a4:09:ed:e9:
         12:09:2d:86:74:87:bf:f0:e3:13:64:f9:ad:1b:a1:ae:4e:35:
         92:6f:ed:de:f4:c6:8d:0d:78:56:b3:39:dc:7f:18:3b:ed:a3:
         29:03:00:3f:82:52:85:2d:4b:4c:4d:0c:e4:9d:a2:7a:0c:2d:
         27:cd:94:95:76:1c:35:76:2f:4e:a6:dc:73:76:02:92:a3:86:
         9b:07:b8:80:b1:fe:45:f3:e1:92:e9:de:47:8b:05:f3:51:e7:
         5e:be:a0:b3:1f:7b:c3:59:7a:d0:9a:a0:db:24:ad:96:cd:0b:
         2e:16:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org