Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
File:                     3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          e85TsBHj+eQWrh7ljfmSHinifUdQmSamWiB3A0+1xsc=
Subject key identifier:   92:B4:8C:58:C9:26:80:31:4D:A4:BF:6B:AB:3D:83:E6:B8:F6:22:A0
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       0E99407C07BFFAC874AE7F9E2EA3F5BF212412D2
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 03 Apr 2024 18:31:41 +0000
ROA not before:           Wed 03 Apr 2024 18:26:41 +0000
ROA not after:            Wed 02 Apr 2025 18:31:41 +0000
asID:                     262903
IP address blocks:        177.86.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:99:40:7c:07:bf:fa:c8:74:ae:7f:9e:2e:a3:f5:bf:21:24:12:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:09:a8:c6:7e:4c:b6:db:c1:2f:a7:31:19:
                    31:ab:4d:71:65:46:67:01:03:ee:b6:5a:66:f5:89:
                    91:80:93:54:d7:50:5d:2d:54:0a:9d:a6:3b:26:9d:
                    d3:74:4a:4f:01:8e:ff:b9:54:4b:f6:99:a2:98:7a:
                    a9:4f:72:e5:f6:3f:b0:6b:bc:29:44:d3:a7:a3:77:
                    ba:0b:b2:cd:7e:d3:f6:49:af:32:1f:34:1e:b4:5f:
                    0d:6b:e1:db:ca:12:ca:b6:90:a0:ea:4c:c5:e1:2e:
                    00:70:3b:f0:0d:fc:7a:8e:0c:04:82:ba:9a:3e:5a:
                    3f:69:9c:10:e1:e7:16:39:03:a9:ff:02:ff:67:e8:
                    b4:54:0c:fb:ec:be:bd:ad:ab:4e:db:84:0f:22:96:
                    a4:d2:3f:ce:5c:39:4d:49:9b:25:65:0f:0a:e7:85:
                    f8:95:de:f8:ea:70:7c:f3:00:20:f0:4d:72:04:ac:
                    9b:1e:22:4d:ff:8d:f6:a6:af:14:94:36:9d:3a:bb:
                    ee:37:f6:4a:2e:62:6c:ec:aa:87:1c:fe:75:1c:af:
                    23:b5:13:59:bf:b0:9d:e5:7b:80:51:21:96:19:32:
                    5f:fb:cc:c8:09:ce:0b:cb:81:87:9f:1b:cc:3e:bc:
                    1c:12:28:2c:a4:89:ec:d9:48:97:0c:6a:10:cb:53:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:8C:58:C9:26:80:31:4D:A4:BF:6B:AB:3D:83:E6:B8:F6:22:A0
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:a9:d2:08:9f:ba:71:41:1c:e5:f2:6c:bb:ca:2e:00:19:
         6b:e6:8e:24:32:80:80:6e:9e:c7:4c:51:97:4d:90:9a:65:bd:
         5c:98:2e:a2:ef:eb:8a:88:ae:3d:a1:a0:fd:0c:17:58:3d:15:
         c2:3c:7f:a1:20:f8:7d:d9:b8:de:26:ea:bb:9f:01:78:df:08:
         51:94:28:87:1e:6c:7a:d1:1a:01:7e:ec:e8:05:c1:92:88:12:
         59:ee:0c:e9:5c:09:5a:1d:73:29:6c:fd:4b:cd:82:e0:83:30:
         e5:ec:77:f4:1f:53:b6:dc:29:21:6d:cb:44:52:15:30:bc:e2:
         06:94:9b:ce:90:aa:8f:a3:2c:74:18:89:92:b6:44:ba:84:e1:
         c4:4b:33:d1:91:06:8b:45:9c:27:79:e9:0c:35:fa:a9:72:86:
         1b:9b:4f:17:cd:9d:6d:e3:3f:d7:c1:57:f2:0d:5d:ef:81:6f:
         56:2f:a4:83:cf:8f:f7:03:ff:82:8a:18:08:24:db:18:e3:86:
         7b:9d:05:32:ec:7a:9b:7f:71:bb:66:d9:e4:9d:5e:a9:d0:f0:
         40:de:a0:32:de:e3:95:66:48:f8:af:d0:25:ec:f8:bf:e8:6e:
         c2:d5:3b:31:f1:11:12:00:0f:02:f8:26:a9:a6:7a:c9:57:25:
         bb:9d:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org