Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          MK5ox9ASNfhSSOS8iRUF0LnEiJgILem/KR53C31qqdU=
Subject key identifier:   16:2F:F3:68:FA:0A:97:02:05:E0:BE:AA:35:E8:45:C9:0F:EE:D0:59
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       3DAE494F279ABC49CD2F6DCEFECC2DD42F217A90
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
Signing time:             Fri 05 Apr 2024 04:21:28 +0000
ROA not before:           Fri 05 Apr 2024 04:16:28 +0000
ROA not after:            Fri 04 Apr 2025 04:21:28 +0000
asID:                     262462
IP address blocks:        177.54.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:49:4f:27:9a:bc:49:cd:2f:6d:ce:fe:cc:2d:d4:2f:21:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Apr  5 04:16:28 2024 GMT
            Not After : Apr  4 04:21:28 2025 GMT
        Subject: CN=162FF368FA0A970205E0BEAA35E845C90FEED059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:a7:81:a8:04:59:e8:fa:c9:06:07:68:0b:
                    60:30:b0:61:ff:44:06:6d:1c:d5:c9:4e:63:92:fc:
                    2c:93:c2:49:b1:af:cf:b1:6c:bf:74:27:f9:fd:d8:
                    2d:dc:70:02:8e:42:09:95:c1:47:57:c8:90:87:e8:
                    c4:34:02:bc:a1:59:9b:3c:6e:86:27:85:4b:3e:50:
                    07:8a:15:99:a1:55:1d:a7:a1:da:c7:0b:bc:3a:87:
                    12:55:9d:a1:b0:99:9e:3d:24:d2:0e:91:4b:23:90:
                    48:6e:c1:40:41:ae:4f:eb:2f:30:e8:6a:d3:67:0a:
                    14:fb:86:5d:82:95:30:3f:49:df:df:00:fd:01:a8:
                    d2:b3:2a:19:b0:d1:a9:02:17:74:b4:42:1c:08:1a:
                    ad:5a:8c:0f:9b:71:94:f2:f4:1e:97:3e:87:6d:0c:
                    55:b0:9e:20:d8:a0:12:63:5f:6f:55:fd:29:0d:51:
                    2e:65:1a:0d:32:c9:b2:c6:94:d0:9c:42:53:f5:8f:
                    59:3c:8b:bf:63:a4:b1:a9:8a:82:0a:1e:64:20:13:
                    ff:ad:ed:6f:0a:b9:9c:ea:ef:21:1e:3a:0f:dd:63:
                    a4:dc:e1:9c:01:5e:6f:8a:a5:d1:65:13:f5:3d:a2:
                    f3:d0:16:3b:cd:fd:70:8d:6f:cb:e5:3e:cd:c9:0c:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:F3:68:FA:0A:97:02:05:E0:BE:AA:35:E8:45:C9:0F:EE:D0:59
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:f7:1b:ee:c6:75:3c:5a:89:56:3c:3d:e9:26:db:68:16:
         63:2c:ac:a6:9a:ee:06:3f:ab:28:40:2f:94:22:49:5c:07:a5:
         9c:27:60:8e:e2:a1:b2:7f:fc:df:a9:78:6c:f0:38:40:de:b1:
         cc:89:74:91:08:3a:d0:01:18:95:e1:df:c6:50:df:60:9b:53:
         31:4f:a8:95:b9:84:c6:51:11:e2:ef:05:e1:69:ea:b6:d0:c5:
         72:f7:a2:a8:19:98:2e:1b:a2:85:50:c6:4c:ab:be:82:74:82:
         5e:b5:d8:0d:ea:67:08:a5:27:58:31:12:8c:41:af:9d:ea:98:
         f9:77:c2:a0:22:be:d1:ac:93:dd:3d:8b:05:80:d2:b5:8c:35:
         08:55:14:b3:a4:e3:be:e8:23:94:1a:2d:20:fb:cf:e9:ce:8e:
         91:91:81:c7:5a:79:e0:f8:b8:b4:0b:c9:b4:2e:07:a3:05:a7:
         8c:96:9a:70:3f:94:09:c2:9b:a5:3d:e8:c6:7f:b4:f5:7c:a8:
         fa:56:9f:d1:7d:2b:c0:63:0b:fa:74:12:02:0d:12:70:65:e5:
         19:8a:22:cd:70:69:7e:40:8b:17:1e:33:c0:85:8b:56:53:e2:
         7a:c8:ce:91:e3:d6:3e:b5:a6:ae:eb:dc:97:dd:ea:30:4b:2b:
         0b:16:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org