Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          YdFCTCkw/ym4hEud5WNwoJaA0++pQbFE9lc0o3m6dIw=
Subject key identifier:   3D:FE:A1:E9:2E:5F:30:A8:61:3F:55:C2:FD:7B:D9:F2:E0:8D:7C:85
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       3AED1A3B8B02704E6D64B7BB12AB8A3DDA8082A1
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 03 Apr 2024 18:31:41 +0000
ROA not before:           Wed 03 Apr 2024 18:26:41 +0000
ROA not after:            Wed 02 Apr 2025 18:31:41 +0000
asID:                     262903
IP address blocks:        177.23.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:1a:3b:8b:02:70:4e:6d:64:b7:bb:12:ab:8a:3d:da:80:82:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:56:2a:0c:63:8c:60:3d:23:6d:1a:3c:d7:
                    c3:e3:5b:8d:25:81:21:ce:6d:dd:9b:7b:6a:c0:95:
                    aa:0a:50:88:94:64:db:b5:63:68:ff:ee:51:c8:50:
                    22:01:cd:c0:f6:3c:c0:3d:2a:d0:58:98:c3:32:6c:
                    6c:42:85:e5:1d:9f:e0:b4:2b:b1:63:82:5f:3e:99:
                    ba:99:7b:b7:38:40:6f:3a:79:52:54:4e:b5:ea:67:
                    9a:d9:15:58:98:39:27:8d:fa:0c:c0:80:48:36:71:
                    ab:14:0d:7e:50:97:73:e5:c3:75:01:55:e7:28:bd:
                    28:39:e3:ef:ce:34:8c:ba:be:6a:ab:cf:e8:24:e4:
                    89:be:62:ed:5c:05:5b:7d:ae:e0:94:bf:9e:45:08:
                    e9:e6:a8:17:d7:ae:db:1b:14:00:d0:3b:89:eb:a7:
                    20:ea:b1:97:2a:1d:25:68:65:d1:15:2f:d1:2f:95:
                    e9:87:1e:82:37:b7:13:85:4d:3f:8d:40:c4:9d:eb:
                    ae:4e:00:ab:8f:4e:79:0f:ba:99:5d:74:61:59:f5:
                    d4:71:02:d3:d3:de:2e:b1:ac:ce:89:da:d7:f9:7d:
                    90:be:5a:d6:a7:c2:a6:7e:24:5e:85:62:b2:90:6c:
                    bc:9d:97:67:1b:af:9a:bd:35:cb:30:d5:58:69:26:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FE:A1:E9:2E:5F:30:A8:61:3F:55:C2:FD:7B:D9:F2:E0:8D:7C:85
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:7e:e5:82:b3:03:bb:69:97:75:a7:c2:bf:90:ea:51:f5:
         31:21:1a:37:74:a2:4a:df:14:28:3d:ba:3a:b1:73:04:f3:1b:
         ac:6a:bd:b1:53:3d:4a:6c:07:13:f7:fc:e1:11:0c:19:a9:7a:
         98:c3:8f:46:22:41:b1:41:75:27:0a:74:55:2d:a3:d0:4c:e9:
         69:05:35:64:97:d6:07:e1:3a:56:36:f6:19:9c:16:57:c2:bc:
         95:51:cc:7d:34:bd:25:cd:4d:80:0e:da:8f:6b:a4:28:ad:d1:
         48:17:24:32:8b:fc:b7:ba:fd:68:14:fa:62:cc:f0:2b:58:24:
         3f:99:fb:7c:19:b0:fd:84:ac:05:b8:e9:ef:22:47:a7:f2:a4:
         ff:94:d0:5c:0b:28:b7:0d:d6:32:88:54:9f:a3:5d:8d:11:8b:
         d8:4b:7b:15:ca:a0:ab:21:14:55:ba:d4:05:5e:e3:4e:9c:bc:
         27:84:85:fa:2c:38:2d:f3:ff:b1:74:1a:96:1a:63:d1:bc:27:
         14:d1:e5:8c:9c:f8:c4:85:67:5a:78:09:24:fc:ba:51:eb:42:
         44:26:9e:6d:59:b4:be:8b:1f:74:c7:74:bc:60:d1:87:f4:d6:
         bb:48:8b:3b:80:77:ff:1a:54:7d:33:de:18:1b:ce:3d:09:ff:
         2e:24:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:31 2024 by rpki-client on console-fra.rpki-client.org