Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138352e302f32342d3234203d3e20323633353633.roa
File:                     3137372e32322e3138352e302f32342d3234203d3e20323633353633.roa (raw, json)
Hash identifier:          qSwKz4eS5JDtwo2mPbohZB4vMakSWWVaH94ztFWYAKo=
Subject key identifier:   A0:8B:DD:63:42:EC:5F:D0:B8:AF:2F:DD:52:7E:9C:5A:B8:46:4B:AC
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       77A765A640437B80C5E18907E076610D03837084
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138352e302f32342d3234203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        177.22.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a7:65:a6:40:43:7b:80:c5:e1:89:07:e0:76:61:0d:03:83:70:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=A08BDD6342EC5FD0B8AF2FDD527E9C5AB8464BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:d0:91:40:fd:00:7c:64:3e:3c:e4:44:a5:
                    3a:4a:53:e3:b1:5b:66:46:2a:13:c8:ec:d9:94:21:
                    d0:f1:2f:3a:c9:b9:52:0c:16:87:ef:19:18:c2:f1:
                    ca:75:96:20:86:6d:89:ad:fe:b6:cd:37:00:e6:08:
                    89:0e:f5:38:7a:0f:12:ce:d6:fd:90:66:c5:16:b4:
                    86:66:ac:26:2f:24:57:4c:bf:9f:33:22:fa:e5:96:
                    08:84:4b:78:78:73:d2:f4:58:fb:f7:f5:3b:5c:b0:
                    9f:e8:ce:db:bd:0a:61:5a:38:79:41:72:38:a6:2f:
                    b0:1d:25:6e:5c:e4:bd:25:11:7d:47:97:e3:4a:11:
                    b9:1e:50:04:d1:c9:cc:55:1d:b9:ca:0f:44:9f:df:
                    1f:26:45:e1:8d:f3:68:2c:1b:f7:06:29:e4:77:33:
                    9c:9f:c8:05:d2:ce:04:a2:dd:c1:e1:ca:f9:5b:54:
                    9a:87:44:1c:fa:4b:aa:a5:81:59:c1:24:96:fd:c5:
                    52:26:08:cb:72:b9:f8:b9:03:e0:47:c3:00:ff:46:
                    9a:0a:b8:ee:68:e9:b8:3e:a5:85:c4:9b:91:a0:06:
                    1e:2d:85:7c:26:57:29:a6:f8:ba:a5:b5:60:d7:28:
                    ef:3a:0c:2d:03:b8:90:fc:9a:ac:a4:77:f9:46:ca:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:DD:63:42:EC:5F:D0:B8:AF:2F:DD:52:7E:9C:5A:B8:46:4B:AC
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138352e302f32342d3234203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:86:30:82:d8:c1:2f:49:d2:d7:0f:68:e9:0a:0e:5f:9c:cb:
         e2:94:2f:e3:e4:3f:92:b3:f9:80:f1:86:20:c4:ae:e7:fe:b3:
         ac:3d:58:c5:9f:8d:b4:df:a3:c1:fd:1c:cf:e5:43:f5:90:74:
         1c:39:32:f5:85:46:f7:dc:7c:5a:2f:b5:5b:21:d4:27:bb:f7:
         c3:de:de:91:e3:75:79:2d:10:7f:4c:a3:10:9a:06:82:4a:bb:
         40:70:0e:2d:d7:05:6c:b9:04:b8:82:df:25:34:26:62:0b:56:
         62:1f:90:63:d4:8c:63:0b:e8:19:b3:6f:69:4b:5a:96:2f:c9:
         1d:c2:b4:2a:95:f0:e3:96:c0:3f:61:47:c2:ee:94:1f:1c:4f:
         4b:c8:68:27:91:b2:da:16:0b:e5:d9:fa:27:32:0f:32:87:27:
         a4:b2:39:e7:5a:59:75:2d:b5:92:c5:42:82:18:60:33:d8:c1:
         3c:60:69:12:84:f8:7b:9f:b2:d2:56:9f:06:dc:b5:57:a8:9e:
         f4:75:ae:e2:06:e6:89:fd:61:50:00:20:90:da:87:1e:05:68:
         41:00:e9:de:8d:a0:9b:f5:7b:18:45:ee:3d:a3:60:b9:5e:6c:
         6d:c0:7c:aa:75:4d:65:8c:26:3a:9b:64:4c:5c:14:b2:fd:33:
         4e:fe:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org