Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa
File:                     3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (raw, json)
Hash identifier:          GTMmaps83KIyQfD52BupOZEennV0bzOePHnC0MGWVz8=
Subject key identifier:   68:CA:B6:5C:9D:C2:3D:A9:8A:52:48:C4:EF:0E:2C:EF:FD:49:B6:8E
Certificate issuer:       /CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
Certificate serial:       0683819466BB9BEE7D72B7042E0569FC3E71D6E9
Authority key identifier: 02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa
Signing time:             Thu 04 Apr 2024 12:11:20 +0000
ROA not before:           Thu 04 Apr 2024 12:06:20 +0000
ROA not after:            Thu 03 Apr 2025 12:11:20 +0000
asID:                     28592
IP address blocks:        177.128.228.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:83:81:94:66:bb:9b:ee:7d:72:b7:04:2e:05:69:fc:3e:71:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B
        Validity
            Not Before: Apr  4 12:06:20 2024 GMT
            Not After : Apr  3 12:11:20 2025 GMT
        Subject: CN=68CAB65C9DC23DA98A5248C4EF0E2CEFFD49B68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:a9:b5:2b:d4:39:1e:91:1a:fe:b8:ca:54:
                    dc:c8:25:63:98:c3:1a:5a:d0:6d:19:72:a9:68:d3:
                    eb:3a:aa:b7:26:6b:9f:1d:98:6a:f5:4e:69:07:84:
                    f9:cd:82:ee:65:10:eb:13:d8:ab:55:4c:14:33:c4:
                    58:89:d7:17:a0:cc:cb:15:aa:26:91:1a:17:38:9c:
                    84:2a:e6:2b:55:23:32:1c:05:ab:e1:4e:c9:20:6b:
                    b8:a0:cb:c4:42:94:b4:f5:98:68:a4:b0:83:be:ab:
                    5f:c0:2c:8d:63:c1:76:2d:d3:49:94:53:a0:1f:05:
                    eb:53:82:0b:a6:c0:3d:1c:03:b6:ed:a4:6e:60:6e:
                    95:a3:7e:fd:6e:6d:b6:6b:3d:96:5a:19:6e:bf:6c:
                    3b:ce:36:72:f2:a2:5c:67:f4:1b:e5:28:78:51:76:
                    3a:7b:1e:23:3c:20:b1:20:33:6b:4f:58:b3:7b:ef:
                    3e:22:a0:85:8d:1e:8d:a2:e2:df:23:c7:7a:5a:e8:
                    c6:5f:2f:bf:02:79:d3:60:9c:b8:6b:b2:ab:09:81:
                    9b:b7:c7:2d:89:1f:42:12:c1:27:18:cd:34:0d:68:
                    c7:d2:b1:df:bd:f0:64:90:a4:ca:a7:e1:d5:b7:95:
                    b8:a0:35:a2:f8:b9:ee:29:9e:bd:d7:be:8a:55:d7:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:B6:5C:9D:C2:3D:A9:8A:52:48:C4:EF:0E:2C:EF:FD:49:B6:8E
            X509v3 Authority Key Identifier:
                keyid:02:A8:99:EE:C2:9A:12:C9:18:BD:AF:B4:FE:9E:A4:EE:76:04:F5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A899EEC29A12C918BDAFB4FE9EA4EE7604F57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/1/3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:c4:82:93:09:8c:04:2e:ec:81:e2:eb:dd:cf:bd:20:9a:
         67:98:58:88:5e:2a:4e:e1:a9:fd:04:46:60:d9:3b:5c:7e:10:
         ea:59:cb:81:c5:db:f2:98:7a:7a:a6:e4:a7:b9:41:b4:05:73:
         f6:9f:8e:fa:87:a4:27:0f:f9:2f:3c:c0:33:ad:7d:ea:97:1e:
         fd:79:9c:d4:2d:1f:5f:3b:25:c2:ee:29:8f:3f:6f:62:b3:90:
         b6:32:42:68:23:e4:ff:79:e3:e9:a9:67:c5:00:f9:7d:9f:96:
         c1:57:f5:1f:fb:96:d7:1e:49:82:85:0b:78:da:b9:b2:c2:91:
         8e:4d:50:96:84:ec:ad:83:f4:76:f4:98:aa:6c:92:99:ea:83:
         ef:ce:2c:ff:b4:72:72:17:d5:ae:ec:ca:dc:92:d3:3b:d2:8d:
         eb:b8:a6:3e:1f:d4:5d:6c:ec:7e:6e:22:9c:87:65:0d:ae:e7:
         0c:9e:a4:7b:d5:a1:9f:70:97:06:49:2a:75:c9:8c:94:1a:f2:
         00:db:6e:ed:69:8d:9d:5a:47:dc:b1:9b:97:5b:a2:a6:3f:2b:
         55:d6:5d:33:4c:7f:71:3a:a8:63:f4:2a:44:a2:86:81:59:06:
         c8:84:4e:b0:1e:b8:86:f0:50:e9:98:4f:41:9c:8b:66:32:40:
         d0:59:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org