Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa
File:                     3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          7DOhMurgpJ+z1Jnq33A6wnDjyImc0ZDOrXrv+RPzukI=
Subject key identifier:   0A:8A:7F:C7:2D:1A:C8:53:AC:24:F5:7B:DF:76:D6:4F:8F:A0:A1:81
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       6E56A2D00FE957AED3AB3423129D5E752307DC55
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        177.22.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:56:a2:d0:0f:e9:57:ae:d3:ab:34:23:12:9d:5e:75:23:07:dc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=0A8A7FC72D1AC853AC24F57BDF76D64F8FA0A181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:ae:85:87:6b:8c:c9:ba:54:41:e4:85:b3:
                    f3:1d:db:3d:bb:8d:95:1f:34:ad:0d:b7:91:f1:02:
                    e8:c8:85:e7:77:9b:ca:78:9c:bb:4c:fe:1c:8c:62:
                    0e:25:04:5b:d2:11:53:ac:c3:da:f9:17:76:c1:f2:
                    ea:3e:fb:89:52:c1:77:4e:84:7b:65:dd:3c:47:df:
                    00:5d:c1:56:f8:d3:9a:07:f2:c6:52:b7:1b:f5:d1:
                    8e:32:43:a0:9b:45:c8:ad:f2:00:75:ff:f5:9b:e6:
                    6a:1b:77:b8:e2:76:b9:2e:66:70:07:96:7c:48:fc:
                    f3:29:c5:10:b4:a4:38:9d:ba:03:61:60:30:3c:37:
                    a2:e8:3b:15:ef:7c:77:43:ca:70:50:58:b9:a7:75:
                    ad:c8:13:7d:50:71:8f:f0:ca:1e:a2:22:63:0d:fd:
                    cb:c6:d5:57:77:94:98:05:8b:c9:20:b9:ac:fd:90:
                    bf:fb:64:6b:53:4c:82:d1:13:56:41:97:ee:6c:85:
                    cb:34:04:83:32:e5:9b:d6:fa:d5:60:c8:30:80:ce:
                    6a:7f:0d:53:96:54:b6:39:fd:ab:c5:cc:ff:87:98:
                    e1:c8:a2:bf:26:f2:4a:d1:c2:1f:a5:ed:8e:45:b1:
                    6d:53:a1:15:0d:9b:11:84:0d:94:3d:8e:6f:32:26:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:7F:C7:2D:1A:C8:53:AC:24:F5:7B:DF:76:D6:4F:8F:A0:A1:81
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:6b:45:41:dc:26:62:73:f7:09:8f:44:ae:be:e7:b5:7e:
         17:55:a4:15:c6:81:20:d6:d4:41:25:e9:64:5e:c2:3e:4e:8d:
         d1:0e:d6:05:c0:c9:c5:4d:58:80:99:ba:17:21:5f:9d:57:46:
         53:63:f9:8a:3b:78:ad:f9:eb:a4:99:99:93:53:b4:8f:c2:44:
         4f:aa:c2:ad:39:1a:86:2e:2b:80:99:12:11:95:99:04:7e:a3:
         01:2f:81:fc:b2:38:04:95:6c:00:76:14:79:ae:88:2f:35:2c:
         f8:25:f4:1d:e4:a2:17:c8:9d:2f:1d:17:70:24:d5:0a:88:1d:
         56:25:65:21:1e:8a:6b:a0:31:c2:fc:bf:3f:1c:cc:4b:9e:1d:
         8b:55:bd:8a:fd:3f:28:ce:f9:01:2f:4e:cd:cd:88:94:7e:f2:
         e6:1f:70:47:45:27:03:53:51:d5:56:4a:ca:36:0f:81:49:f9:
         82:cc:d9:fe:1f:16:70:ce:23:04:51:c1:13:32:a5:26:b1:c4:
         d4:a6:77:45:45:e4:09:67:4b:93:2f:04:7e:00:b5:7a:52:68:
         b0:19:4a:9a:48:37:8c:84:08:47:c4:24:fb:c2:ab:6e:24:57:
         4b:b2:31:3d:56:59:f4:27:d1:fd:43:be:8a:4c:66:9f:08:5a:
         8d:89:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org