Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          NSg+5fEtojfAhR3MN9Tpye7ayGfaOYJU6Sv3xGnQM78=
Subject key identifier:   00:4C:85:AF:ED:46:A1:2C:B5:C7:81:51:8A:63:F8:D8:17:F3:46:74
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       0529173AB51D14FC2152EC04A3EB1C22FD026C86
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
Signing time:             Fri 05 Apr 2024 04:21:28 +0000
ROA not before:           Fri 05 Apr 2024 04:16:28 +0000
ROA not after:            Fri 04 Apr 2025 04:21:28 +0000
asID:                     262462
IP address blocks:        177.105.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:17:3a:b5:1d:14:fc:21:52:ec:04:a3:eb:1c:22:fd:02:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Apr  5 04:16:28 2024 GMT
            Not After : Apr  4 04:21:28 2025 GMT
        Subject: CN=004C85AFED46A12CB5C781518A63F8D817F34674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:5e:d9:2c:4b:51:f8:0d:b9:8d:8d:89:f4:
                    7e:11:a8:9a:47:2c:63:64:93:90:11:d5:8e:39:72:
                    10:8b:88:7f:46:54:64:a6:a0:57:68:f2:11:e0:3a:
                    26:cd:22:3f:a4:b9:e3:d9:9d:4c:6a:21:46:a5:ee:
                    18:32:8c:c0:a6:72:02:43:b2:69:8a:bc:c5:b2:e5:
                    ae:e2:2c:5d:eb:62:5b:e3:2b:a9:ca:70:21:3b:84:
                    a9:37:03:84:1e:8c:6b:e9:0f:1c:7d:ec:6e:ea:5e:
                    d6:a9:7b:0b:b4:31:94:95:66:09:cd:73:f4:0c:a8:
                    9d:1e:23:c0:4f:32:0b:88:59:f7:bb:fe:0f:c1:66:
                    77:8a:78:03:42:db:21:45:27:39:58:d8:e2:91:d8:
                    6a:df:82:5e:90:44:64:9b:79:97:e3:75:ef:ac:4e:
                    7a:8f:e7:3a:50:55:3f:bf:62:61:82:35:f4:4b:6a:
                    4e:26:18:ba:2d:02:94:ee:37:03:81:58:bb:19:b6:
                    39:61:c7:27:3c:bc:c0:2e:af:6d:af:a2:35:f2:3b:
                    ca:c0:da:29:17:04:44:84:6f:e5:81:bd:c6:45:f5:
                    02:99:65:72:d2:04:1d:7e:44:0b:86:36:6e:1a:ea:
                    0f:ed:cc:02:73:cd:09:88:bc:df:9a:fa:3a:c2:d6:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:85:AF:ED:46:A1:2C:B5:C7:81:51:8A:63:F8:D8:17:F3:46:74
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:26:89:5c:4b:6c:2e:a6:5a:62:d4:09:c5:fc:b5:b7:3c:
         f2:f6:a7:60:4c:5c:2f:27:07:1f:93:ac:48:48:dc:6a:d7:5e:
         7b:7e:3d:e2:2f:40:dd:64:7e:70:2d:0c:9c:23:f6:21:31:5d:
         ef:ec:70:e4:a6:fe:ce:bf:fe:b4:72:a8:35:b3:31:50:0e:19:
         e9:8a:87:b3:9e:72:12:89:53:4a:eb:42:01:fc:cb:be:3c:fa:
         ca:11:c6:5d:04:29:a5:d1:13:47:e0:44:d6:9c:ba:03:5f:2a:
         aa:a6:89:6f:4b:9c:58:cd:e0:a5:a9:6b:e1:c8:68:21:e9:e5:
         1e:f0:2b:14:6b:6b:a5:40:cd:29:7b:3b:9f:28:5c:04:c9:c0:
         d9:4a:f1:99:5a:da:46:b2:12:c7:49:3f:88:06:fc:17:1b:ac:
         22:c5:b6:98:aa:98:46:25:b2:be:65:16:30:e4:f9:63:9a:bd:
         50:2b:a7:11:39:ab:89:2e:78:3d:9a:14:63:fa:79:44:5c:6f:
         e0:7c:ba:fb:2b:e4:df:ad:66:66:ca:7b:94:f2:47:3d:87:cb:
         a2:80:a4:9b:71:7a:e7:8c:49:dc:de:70:3c:bd:41:a7:97:c1:
         95:01:10:10:c5:79:a1:99:c8:4f:a1:cd:d7:1f:67:9f:14:8e:
         f9:a6:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org