Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e3232312e3138342e302f32322d3234203d3e203238323833.roa
File:                     3137372e3232312e3138342e302f32322d3234203d3e203238323833.roa (raw, json)
Hash identifier:          0MOWaMUWePYhNZP7pY1FXqaddWjkrQtT5VkazODWvhw=
Subject key identifier:   19:8B:F7:D6:4D:13:1B:AF:EB:D8:C9:1D:01:15:76:72:41:6B:01:12
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       70B39DF15844A8B3F9684137AE65610BF86E3721
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e3232312e3138342e302f32322d3234203d3e203238323833.roa
Signing time:             Thu 31 Oct 2024 13:11:14 +0000
ROA not before:           Thu 31 Oct 2024 13:06:14 +0000
ROA not after:            Fri 31 Oct 2025 13:11:14 +0000
asID:                     28283
IP address blocks:        177.221.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b3:9d:f1:58:44:a8:b3:f9:68:41:37:ae:65:61:0b:f8:6e:37:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Oct 31 13:06:14 2024 GMT
            Not After : Oct 31 13:11:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:2c:7e:48:dc:1c:77:c1:74:23:01:74:56:
                    92:82:74:fa:70:41:70:4e:50:5b:77:07:42:a0:3f:
                    ba:6c:f0:a8:4e:0b:b9:0a:ef:04:0d:3b:9e:39:c9:
                    fd:15:0a:aa:ea:e6:26:dd:d4:ca:26:fb:be:e3:97:
                    49:7f:f8:ec:c1:26:0a:d3:80:e1:67:76:31:49:2e:
                    00:3d:d1:de:36:1b:18:a7:57:fc:d7:7a:48:a9:2c:
                    fa:86:57:79:30:1b:7a:8e:5c:ff:b1:1a:5e:53:ce:
                    20:d0:ef:a5:5f:60:bc:ac:d5:d2:36:e0:30:c5:39:
                    12:bb:3b:e5:07:8f:26:52:a7:63:1b:31:a2:61:af:
                    dd:be:8d:6f:32:09:03:2d:a3:20:89:5e:04:e2:18:
                    6b:ff:27:a8:28:c6:e3:59:5e:9c:66:cf:80:d7:cf:
                    7c:f7:a4:db:58:12:c9:5f:ef:9a:7a:29:30:09:ce:
                    58:2e:41:b7:cf:19:ea:11:f2:46:f2:8b:79:56:93:
                    20:d0:42:79:4d:70:90:d4:6e:fc:4d:ef:52:8c:82:
                    b0:a7:28:4b:90:4e:0d:64:ac:b3:72:4b:92:f4:4c:
                    cc:a7:ee:98:ab:89:cb:69:35:ed:d4:cd:c1:d2:d4:
                    bf:c2:f4:57:6a:a7:98:98:e4:1d:2d:22:9d:09:cc:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8B:F7:D6:4D:13:1B:AF:EB:D8:C9:1D:01:15:76:72:41:6B:01:12
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e3232312e3138342e302f32322d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:9a:46:87:d6:87:b0:11:a1:cc:2d:b0:34:6d:a3:fc:82:
         e4:9f:12:d2:64:19:a1:c0:77:ca:b9:d9:0e:59:98:fc:bb:1d:
         9f:94:12:4f:6c:7e:3c:38:58:9b:94:be:a8:17:4a:63:91:29:
         11:45:99:79:32:25:15:af:3b:4d:bc:eb:ba:a7:86:17:f3:83:
         37:ff:67:4f:3d:b3:a7:1c:33:73:90:a0:6c:93:b5:c7:bd:f4:
         6d:4b:b3:3e:02:12:aa:69:c3:26:62:d2:19:61:52:bf:55:bb:
         e1:3c:c5:04:22:41:44:2d:e1:4c:c7:f4:5e:68:76:77:e7:99:
         32:97:de:27:73:49:45:91:0b:40:fa:e2:e7:60:0d:9b:76:1a:
         51:86:95:e7:c9:b9:4e:f1:74:08:4c:c5:a3:8c:32:a6:1f:cc:
         4f:ee:23:75:c9:79:2c:f0:c6:63:fc:de:ea:78:c4:7a:73:db:
         92:af:1e:f3:2b:fc:5f:9a:d1:77:e2:72:bf:e2:82:95:c5:67:
         36:d4:57:82:ab:ba:32:31:18:0b:d8:8a:35:aa:83:40:c3:0e:
         2f:28:f1:de:63:3d:b6:c0:6a:05:51:88:97:50:f6:e3:33:dd:
         35:0e:40:dd:d3:01:12:68:69:aa:58:09:27:a7:9b:45:8a:dc:
         4d:d4:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org