Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa
File:                     3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa (raw, json)
Hash identifier:          li5trPZuMvTy5YhngALG+RLibGRO7biJVadC3FY6jME=
Subject key identifier:   65:81:1D:B4:0C:82:E7:49:FB:72:39:8B:63:1E:97:6F:B8:D9:27:EA
Certificate issuer:       /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial:       598F5B404B58F35F4DB74A798E86DE4F8FFB4626
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa
Signing time:             Fri 02 Aug 2024 11:28:08 +0000
ROA not before:           Fri 02 Aug 2024 11:23:08 +0000
ROA not after:            Fri 01 Aug 2025 11:28:08 +0000
asID:                     270737
IP address blocks:        177.221.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
                          rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8f:5b:40:4b:58:f3:5f:4d:b7:4a:79:8e:86:de:4f:8f:fb:46:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
        Validity
            Not Before: Aug  2 11:23:08 2024 GMT
            Not After : Aug  1 11:28:08 2025 GMT
        Subject: CN=65811DB40C82E749FB72398B631E976FB8D927EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:7f:91:4c:0c:f0:68:47:aa:0e:fc:41:39:
                    24:d8:b4:73:a0:61:d2:3b:8c:57:1e:df:63:82:f1:
                    d3:9f:fb:12:22:7b:1b:48:9b:5a:ce:a9:c2:59:17:
                    05:8f:c6:bd:fd:55:7b:b6:7f:b5:65:8e:9d:7c:87:
                    c1:f6:e2:db:15:6a:5d:d8:f3:23:ed:ab:8d:d8:98:
                    51:35:93:d1:fe:2c:5c:f9:bd:e5:68:da:35:e2:a9:
                    cd:f2:16:3a:9a:c6:69:cf:2e:87:99:e8:87:cf:bd:
                    8a:09:3e:b6:89:5f:b4:df:09:2e:06:71:f7:61:ad:
                    89:12:62:b5:b8:de:b8:51:10:6e:40:89:2e:0d:86:
                    44:62:99:3c:e5:f6:91:d6:93:61:72:5d:f4:de:4b:
                    d7:db:7f:55:f4:6f:8a:32:b5:e8:67:5c:e3:03:25:
                    59:c3:11:f4:26:a1:17:e4:55:a3:34:a3:29:80:7d:
                    12:25:18:b7:0d:94:48:ef:f8:67:25:e1:db:1d:a9:
                    ac:a7:bc:a8:04:02:e8:4a:88:b1:94:b7:bb:2d:f6:
                    72:e5:86:78:dd:a9:38:5a:86:86:8e:7a:96:07:44:
                    b3:24:f9:63:bd:9d:8f:79:1b:4a:d4:90:92:f2:35:
                    24:b3:1f:15:7d:35:39:de:01:d9:fd:98:48:85:f7:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:1D:B4:0C:82:E7:49:FB:72:39:8B:63:1E:97:6F:B8:D9:27:EA
            X509v3 Authority Key Identifier:
                keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:43:1c:5b:69:1f:f0:52:b8:21:e3:a0:84:d3:80:08:22:3a:
         a4:07:8b:c8:40:5f:0b:ed:09:c2:9c:2b:cf:58:d6:df:92:73:
         1d:33:f3:0c:ba:a8:dd:d3:72:03:2b:7c:cc:7c:5e:a9:2a:ac:
         74:84:c8:62:a2:4e:40:51:ae:8d:44:4f:f5:e9:06:52:2a:79:
         9d:79:a4:e4:aa:5c:0b:0f:17:4e:c0:cc:66:a0:cc:71:32:65:
         31:45:66:b8:46:17:de:53:e6:65:2b:81:ae:c2:c5:50:81:94:
         af:88:2b:b4:cc:69:85:57:26:82:8a:74:87:96:cf:48:65:28:
         40:2c:cf:da:e2:bb:e1:75:65:4d:d5:9f:78:3d:c5:49:a6:34:
         5c:26:13:ba:e4:41:43:6d:3c:3e:82:84:55:be:c2:d7:33:9e:
         ea:cf:e4:47:80:4a:55:54:a5:d3:e3:32:12:b2:e4:fe:5a:78:
         ee:f5:88:47:46:69:f0:1d:c5:30:88:43:69:68:27:4f:f7:e1:
         53:26:af:d3:59:03:70:b8:60:b8:eb:f4:c3:19:a1:f3:ce:ca:
         3d:d5:6a:e6:d0:10:a3:ed:e9:c8:3b:ac:65:f5:9f:cd:09:47:
         e5:30:b2:92:84:62:ca:14:a1:eb:d2:d9:44:41:d1:6e:38:a2:
         48:3e:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org