Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
File:                     3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (raw, json)
Hash identifier:          pghV6kNL80loGHXFha4+lXbYUCsA3Ovlw/3RCKd9yQc=
Subject key identifier:   6F:7D:78:F3:36:D6:17:56:9B:D2:9A:AE:68:9F:E1:1D:2E:4E:C2:BE
Certificate issuer:       /CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
Certificate serial:       12236635FCC6385E58059BD997D28897216A15CB
Authority key identifier: 39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     263135
IP address blocks:        177.190.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl
                          rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:23:66:35:fc:c6:38:5e:58:05:9b:d9:97:d2:88:97:21:6a:15:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject: CN=6F7D78F336D617569BD29AAE689FE11D2E4EC2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:e9:5a:fa:8d:a0:93:f4:d2:e5:2a:64:e8:
                    2b:1c:55:9e:1f:59:45:d6:da:16:20:72:a1:85:3e:
                    6b:43:ae:6e:de:e0:6f:e0:af:27:68:d2:7e:64:77:
                    6c:15:1f:83:8e:48:0b:2a:5b:5b:bb:79:ba:3b:20:
                    73:9d:fa:e0:2c:81:99:2e:75:3e:86:1a:eb:b4:e5:
                    bd:05:0e:76:ab:ce:8c:7a:4f:74:96:b3:3a:65:d9:
                    aa:17:39:fd:39:17:87:1e:7f:b7:a5:63:70:c1:1b:
                    3a:73:19:10:e6:f2:16:8f:62:f7:4c:dd:5a:a8:ca:
                    6a:d0:1e:11:43:bf:1f:42:9b:55:3e:36:75:73:ba:
                    f5:e0:8a:35:f3:63:5c:0a:12:44:4a:c1:d1:9b:a5:
                    65:de:27:82:c0:2e:98:fe:f2:4e:2e:89:22:ad:0f:
                    4d:c1:a7:39:38:55:d0:72:75:58:c6:40:b2:16:17:
                    1d:2f:71:74:96:ff:1a:5e:46:9b:5e:05:3f:ad:77:
                    60:27:36:65:9d:ef:64:4a:51:c4:39:06:df:24:f2:
                    a6:82:61:fd:ba:ac:cd:a7:49:9c:5d:88:ee:f2:cc:
                    af:b5:ff:ee:28:07:82:05:85:97:74:49:27:7d:93:
                    bd:e3:d4:7f:90:91:6e:e8:8c:43:86:be:35:e3:7b:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7D:78:F3:36:D6:17:56:9B:D2:9A:AE:68:9F:E1:1D:2E:4E:C2:BE
            X509v3 Authority Key Identifier:
                keyid:39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:db:da:e8:c5:15:a1:d5:fe:e9:87:fd:43:f6:46:92:18:2c:
         53:f6:4b:03:12:58:bd:0a:43:c1:78:ff:4a:86:f7:ef:a3:de:
         87:62:80:b3:71:70:6f:3d:67:45:f4:30:a9:ce:62:0f:36:a1:
         b2:66:dd:90:1e:b3:b1:2d:d2:e2:8f:71:8f:5a:9d:1b:3b:e5:
         f3:3b:58:67:ea:e7:c6:d1:29:fb:63:8c:5e:f8:13:b6:6c:a3:
         59:d0:b1:83:74:fd:a3:07:cd:03:dd:b5:07:b0:6e:df:e6:a9:
         93:e6:1b:4a:dc:d2:22:96:b7:35:e6:a8:bb:f4:46:52:16:48:
         58:fc:a8:58:4a:03:b0:11:d0:54:04:b6:7c:9e:29:d9:66:83:
         24:d0:80:14:fd:c3:e0:dd:a2:d0:6b:54:d0:0d:80:68:07:b4:
         f0:66:a3:a2:56:63:23:a9:f3:51:1d:3f:7f:1e:10:32:b0:21:
         3c:a3:86:3c:c6:91:85:4d:5f:89:9a:3c:79:3c:f7:71:c9:3a:
         1f:1b:f3:c9:d1:48:37:cb:4c:49:ba:9f:28:d7:4f:4f:a3:38:
         a0:d0:a3:7f:8a:74:62:80:e8:12:f7:fc:8f:50:40:20:3a:91:
         74:35:3d:e8:1b:c0:e9:ec:ef:43:75:14:d2:07:7d:68:52:60:
         6c:0f:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org