Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32342d3234203d3e20323730373337.roa
File:                     3137372e3232312e3133362e302f32342d3234203d3e20323730373337.roa (raw, json)
Hash identifier:          lXHCe/kMfnc7iJQ0OYgsKg2uiR0ilmnOVhX6hC4MJbk=
Subject key identifier:   44:36:C0:24:77:57:02:AF:61:43:0B:08:F9:10:CC:3C:CC:B2:65:D9
Certificate issuer:       /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial:       5DC68C97CEA4C7F8230FCB455B4BCD0979646A28
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32342d3234203d3e20323730373337.roa
Signing time:             Fri 02 Aug 2024 11:28:07 +0000
ROA not before:           Fri 02 Aug 2024 11:23:07 +0000
ROA not after:            Fri 01 Aug 2025 11:28:07 +0000
asID:                     270737
IP address blocks:        177.221.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
                          rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c6:8c:97:ce:a4:c7:f8:23:0f:cb:45:5b:4b:cd:09:79:64:6a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
        Validity
            Not Before: Aug  2 11:23:07 2024 GMT
            Not After : Aug  1 11:28:07 2025 GMT
        Subject: CN=4436C024775702AF61430B08F910CC3CCCB265D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7d:3b:8c:71:f7:fe:02:7c:e4:76:a4:f7:1e:
                    5a:bb:8c:ad:e7:09:95:22:85:c6:62:bd:3b:fc:04:
                    de:3f:cf:72:c3:6f:3e:35:c5:92:4b:85:a6:09:9d:
                    0b:6f:3d:67:c6:a5:41:e0:00:2a:04:31:73:e9:52:
                    77:28:03:69:05:14:98:d8:e4:f6:da:be:83:4b:74:
                    4d:8f:f5:d2:27:1c:a9:76:32:6a:77:03:73:23:99:
                    88:70:b2:3f:a9:67:5d:d4:00:eb:59:27:a8:6e:7f:
                    ef:f4:57:3a:b3:ef:bf:ca:12:67:10:d1:9e:74:54:
                    60:59:b4:ce:65:71:1c:6f:0b:85:d3:43:5f:c7:45:
                    1e:e9:fb:f0:d8:03:1b:17:c3:bd:bd:05:a1:78:11:
                    db:6d:44:e7:24:b7:57:a8:f4:52:f2:ff:ee:6e:2b:
                    2f:bc:9d:c4:56:e7:81:2c:c0:8c:36:5c:8a:e9:8a:
                    6f:12:02:7e:ab:f4:a4:55:f4:3f:13:58:2b:26:7c:
                    68:6a:52:a3:a0:88:d3:5d:e5:9c:aa:a8:45:e9:f3:
                    9f:bd:fc:d7:ab:ee:83:5e:09:20:3b:9b:1d:c4:1f:
                    c5:71:8f:a0:47:d7:2c:63:66:3d:51:d0:28:dd:4b:
                    5c:32:82:11:af:71:87:43:5b:f8:8f:89:e4:a7:22:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:36:C0:24:77:57:02:AF:61:43:0B:08:F9:10:CC:3C:CC:B2:65:D9
            X509v3 Authority Key Identifier:
                keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32342d3234203d3e20323730373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:ac:c7:8b:46:a2:ea:a8:6e:c3:f0:e4:5c:ae:8a:cb:55:
         f9:af:7f:84:eb:87:6d:c7:5d:db:80:a4:6f:78:2d:67:aa:fb:
         8a:0e:75:c7:de:76:6c:ec:e4:70:1b:70:8b:e6:89:3a:a2:5c:
         c7:e4:31:08:11:07:cd:53:ee:c6:6d:18:11:66:fb:db:ff:9d:
         f6:3d:59:cc:9f:4b:26:5b:52:66:12:93:79:ea:1c:1d:51:81:
         5a:8e:a7:54:13:3a:60:13:6e:61:e6:44:10:0b:6b:ab:11:5d:
         99:bc:ea:4b:db:37:11:61:6e:7a:76:27:9a:39:e5:9f:8e:b8:
         35:62:b3:47:79:f3:b2:0c:47:5f:89:1c:98:6c:29:17:1c:ab:
         9c:a7:90:f0:53:39:75:fd:74:6a:14:d8:23:41:57:f8:d2:96:
         4c:60:87:ee:af:6a:83:3b:93:99:d4:6a:a5:5c:08:6d:3b:6d:
         08:76:91:f6:13:20:61:33:91:34:06:8b:dc:b4:04:c2:ec:47:
         59:7d:c0:cd:fe:bb:62:4a:1f:52:21:6a:5d:07:0e:2e:9d:0d:
         e3:42:c9:14:53:f4:b8:06:fa:a2:7e:66:34:db:7e:06:01:e3:
         56:2d:98:31:61:43:ba:61:77:a6:69:9f:bb:78:eb:27:de:aa:
         6d:d1:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org