Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (raw, json)
Hash identifier:          Dvk1hZXu1BC+HKi3HvOz+H3Rp4hdUtfgLeut1SP++Ho=
Subject key identifier:   36:E9:9E:BD:27:8A:72:1F:1D:66:F6:57:E3:2B:FC:B9:43:CB:33:98
Certificate issuer:       /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Certificate serial:       79095D9D1E104ED15735F235FB84BDDDBDC0ACD6
Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     52635
IP address blocks:        177.125.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl
                          rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:5d:9d:1e:10:4e:d1:57:35:f2:35:fb:84:bd:dd:bd:c0:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject: CN=36E99EBD278A721F1D66F657E32BFCB943CB3398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:30:39:cd:af:dd:74:87:f2:81:39:37:8e:
                    f3:3b:58:a0:cc:5f:b4:44:c7:36:c4:2b:19:8e:79:
                    af:f5:dd:2f:d4:67:ae:a2:2d:81:5d:16:5a:ff:4d:
                    7a:04:aa:d5:47:6f:2c:df:66:b7:c4:70:c3:9b:36:
                    ef:c4:d7:6a:42:62:52:64:93:55:0d:3d:4a:41:bc:
                    d4:09:63:53:c3:01:3a:46:c3:ce:08:81:ce:f0:e5:
                    52:f4:77:cf:54:b0:c1:2f:45:d4:b4:1a:d6:12:47:
                    df:e6:7b:88:0d:53:ce:bc:e0:51:b4:c4:8a:56:18:
                    1b:2f:da:01:e1:af:af:27:74:98:40:29:50:2c:24:
                    75:0c:42:4b:53:68:28:bc:8d:f7:a0:e0:ca:23:60:
                    bc:59:07:9f:0c:f1:eb:28:3a:09:52:24:f8:bc:95:
                    97:0d:59:92:bf:71:26:2c:2a:4c:55:ba:08:4e:b6:
                    be:4f:ac:9a:68:3e:5f:18:3f:50:70:21:e3:c9:f8:
                    fb:b7:08:aa:59:18:bc:6a:6c:fe:b0:c8:3d:8c:b5:
                    8a:6f:35:28:bd:73:8c:45:67:e4:0f:3b:75:15:4d:
                    c2:b0:31:3e:8c:e9:36:e9:dd:1c:ab:4f:b0:0e:c6:
                    74:8d:69:88:aa:79:f8:ec:6d:34:dc:34:77:57:bc:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E9:9E:BD:27:8A:72:1F:1D:66:F6:57:E3:2B:FC:B9:43:CB:33:98
            X509v3 Authority Key Identifier:
                keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:8a:f5:33:e9:93:d8:e0:0d:59:64:94:a6:75:6b:0a:26:
         00:ab:12:86:c1:ed:2a:d8:04:fd:62:bc:f8:d9:05:af:51:a1:
         18:53:83:9b:4d:da:79:3f:6c:3c:14:b8:e0:04:1f:33:3e:be:
         17:75:d7:04:5d:70:bd:ae:9c:e8:54:22:b0:74:91:8d:b5:a3:
         f2:05:67:3d:0b:d5:08:b9:ba:57:50:ef:c1:a2:5e:13:6f:27:
         b7:fb:60:28:ae:04:43:c0:46:e6:f8:ca:f5:64:43:bc:48:39:
         40:85:b1:eb:ea:7f:fd:4b:d6:5b:0f:11:5f:de:d9:6b:fc:1a:
         4c:89:f9:f3:c9:de:f1:40:0d:e7:74:01:82:85:4d:39:04:75:
         7c:de:dc:df:df:57:43:e5:b8:e5:35:09:d4:49:da:91:47:87:
         40:f4:a8:0c:9e:9b:9e:19:44:fa:a9:ef:89:6e:9f:6b:d3:fc:
         9a:b8:b0:05:6f:5c:28:41:58:7f:75:4c:bd:88:3d:65:9c:ec:
         9e:73:84:50:bb:bd:1b:4c:7c:8d:50:b8:3f:5c:1b:b7:5b:96:
         8c:3d:37:38:e1:9d:f8:d5:6f:cb:0f:1c:f4:09:6a:c4:2d:54:
         c2:66:59:da:dd:ae:df:b2:d3:b7:b5:9d:32:5c:e5:1c:a3:45:
         16:82:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:53 2024 by rpki-client on console-fra.rpki-client.org