Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          lH9Ilekly+sPbBySO3U5pYAx3AQV4yeilZJTpmeTL2k=
Subject key identifier:   84:8F:B9:9A:21:2A:E9:3D:63:7B:3B:88:F7:C0:D3:29:88:EC:4D:B6
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       3DDF8D0395566AEB43E29BDAFF3BDDE9BC0A0B40
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 03 Apr 2024 18:31:41 +0000
ROA not before:           Wed 03 Apr 2024 18:26:41 +0000
ROA not after:            Wed 02 Apr 2025 18:31:41 +0000
asID:                     262903
IP address blocks:        177.23.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:df:8d:03:95:56:6a:eb:43:e2:9b:da:ff:3b:dd:e9:bc:0a:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:ed:dd:d1:28:25:98:a5:97:2d:f5:0d:8e:
                    07:5f:ba:97:d2:de:15:d2:45:e8:d7:e2:96:17:cd:
                    6b:db:75:97:b0:a8:c1:10:7d:af:de:43:ff:ac:9f:
                    c2:80:d0:02:26:59:0d:1e:d1:89:91:2d:c1:1d:45:
                    fc:3b:b0:94:83:56:02:78:fb:c9:09:74:8c:6e:32:
                    94:d6:be:26:b5:d1:02:1d:b0:b0:8c:ed:5f:3c:8e:
                    cb:46:71:53:ad:13:5b:2d:0f:67:be:ea:d1:d6:29:
                    7b:0f:b2:5b:27:3c:16:1e:a6:ca:5d:e6:39:b9:b3:
                    69:03:03:e4:b4:bf:19:f1:90:b3:ac:bf:8f:bf:14:
                    86:ca:c7:d9:55:77:98:4e:93:67:46:d1:6b:bc:3b:
                    f1:78:a2:2d:ba:dc:6b:ed:fd:2c:88:10:b9:f5:23:
                    0f:58:cc:0b:37:14:24:0a:fa:8c:58:33:d6:09:0e:
                    ca:53:ce:d1:cd:00:f1:cc:45:e9:8a:cf:c7:75:31:
                    fb:54:c2:4f:8a:eb:0a:ae:7b:fb:fa:5f:4d:2c:90:
                    8d:1e:4a:49:16:fd:07:a5:32:3b:81:10:3c:07:d7:
                    4a:f0:ba:cb:47:61:e6:a0:c1:76:ae:9d:be:f5:9d:
                    87:73:c0:c4:bc:1a:07:c4:59:48:1e:40:cb:eb:8b:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8F:B9:9A:21:2A:E9:3D:63:7B:3B:88:F7:C0:D3:29:88:EC:4D:B6
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:cf:8f:70:15:93:d7:20:74:e3:a8:36:4e:84:64:3e:1b:05:
         b6:40:65:49:f0:e4:20:9f:fb:ed:a6:1e:26:e3:72:6e:44:bc:
         bb:15:65:9b:76:61:19:eb:e4:7a:4f:72:9e:03:7c:65:d4:6e:
         4b:3c:3f:47:01:f7:fc:25:f6:c0:21:d3:34:4b:85:e5:0b:ee:
         cb:9b:c4:93:fd:85:4f:1d:71:58:87:f5:86:2b:49:4f:b7:64:
         ae:17:53:b5:bc:fb:c2:33:38:3b:90:c8:04:3f:1c:07:17:4b:
         7b:51:fe:34:44:77:49:6b:0c:91:b8:e3:b4:9c:a5:21:62:7a:
         cb:97:c1:57:8a:fb:76:c7:85:78:3f:e0:38:51:d0:87:f4:57:
         5b:4d:47:2e:ae:a0:f3:fe:bd:7a:a6:b5:a8:00:66:e6:28:25:
         c5:1e:21:3d:cd:61:a6:99:65:16:42:2f:c2:ca:ed:42:08:80:
         ad:11:f4:74:65:b1:ec:c2:d1:2f:e9:61:e3:54:3c:35:51:b0:
         2a:15:78:40:ce:92:78:3c:95:50:5d:77:fa:65:ef:ae:9f:3d:
         f3:e1:2e:8b:be:96:53:44:36:dc:5f:51:5d:ad:f4:82:b6:ee:
         1a:e9:4e:a0:92:73:b4:6f:84:96:78:ce:ac:9b:28:47:56:91:
         ad:3e:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org