Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          +0jAkpQag+Yz2MkHCkQWwJkTPIq2tQmQmRVH4fPImfc=
Subject key identifier:   97:55:61:E1:FA:B6:A6:F7:07:E9:CF:F7:54:C3:F2:64:90:CF:A0:C3
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       283580DE30BD3B3CCAD8A8C291D715C14F7F4D7F
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:04 +0000
ROA not before:           Thu 04 Apr 2024 00:51:04 +0000
ROA not after:            Thu 03 Apr 2025 00:56:04 +0000
asID:                     262866
IP address blocks:        177.12.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:35:80:de:30:bd:3b:3c:ca:d8:a8:c2:91:d7:15:c1:4f:7f:4d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:04 2024 GMT
            Not After : Apr  3 00:56:04 2025 GMT
        Subject: CN=975561E1FAB6A6F707E9CFF754C3F26490CFA0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:15:01:05:2f:3d:dd:15:6a:c2:01:2b:83:
                    54:30:b4:82:46:50:86:d3:29:82:6c:bf:21:e9:96:
                    74:f2:38:c1:db:61:c5:7d:70:4d:1e:0c:82:d8:49:
                    7b:a2:a3:63:ed:f0:05:f6:5f:8e:ce:52:de:6b:a6:
                    5d:46:59:1c:b6:aa:40:50:b0:b9:22:6b:2f:ba:22:
                    fd:b0:59:19:a4:9f:f6:4d:85:b4:50:fa:82:5b:1a:
                    a6:cf:56:58:1b:91:f8:74:48:03:7c:07:84:72:fb:
                    3f:6b:91:a1:d2:91:67:81:e9:0a:f3:40:52:12:e9:
                    36:84:14:b3:59:84:d3:79:bb:00:51:3b:67:18:52:
                    c0:7a:01:91:44:8e:d6:5b:72:8e:98:da:c2:01:42:
                    42:9b:41:79:9b:d7:96:d8:19:f5:7e:a6:e1:29:ab:
                    7f:98:86:70:4b:16:94:a1:f2:aa:2e:99:12:8b:92:
                    9b:a9:a7:56:0c:4e:ed:2e:08:04:d3:93:52:83:03:
                    f6:62:0b:c7:5d:75:18:e2:3f:b9:e3:39:37:bf:86:
                    81:ee:cc:8d:70:17:2f:80:38:46:7a:0a:b1:42:40:
                    85:0c:e3:14:e2:9c:09:70:4e:89:07:12:e3:6c:1b:
                    0b:91:ff:a2:e7:81:83:ce:47:f3:de:91:ff:1e:a7:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:61:E1:FA:B6:A6:F7:07:E9:CF:F7:54:C3:F2:64:90:CF:A0:C3
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:6a:d4:90:dc:0d:b4:b3:f9:a8:31:a6:fe:fe:43:af:75:89:
         82:f0:33:0a:6e:5e:a4:d7:79:08:9c:c8:2b:20:87:52:09:f7:
         af:ac:2b:e2:a5:d4:85:5d:ae:04:4e:6f:7c:86:c9:84:62:44:
         70:0c:c7:33:64:d6:84:22:db:2e:41:ff:58:5f:98:11:8e:5a:
         23:e2:34:e9:f6:d8:c5:d1:9c:2a:3d:88:b3:76:10:cd:60:23:
         cb:9e:a2:55:29:2a:ea:16:d0:0b:fc:d8:8c:d9:05:f7:13:db:
         f5:b6:20:0f:f7:43:08:63:7c:59:96:f1:44:55:a5:1d:95:96:
         50:d1:00:b7:3f:cb:42:a5:6f:9d:63:6c:05:7b:dd:0e:20:02:
         1a:a0:8a:96:25:61:70:67:2d:7e:56:9c:d2:45:fa:9e:db:41:
         0d:5e:97:36:25:31:95:14:56:a6:be:50:c0:4e:ff:82:77:b4:
         ef:70:54:bf:fe:9c:11:40:68:26:1d:f5:bb:9a:b0:e8:e3:60:
         e7:91:af:f1:89:8c:f6:78:a6:5d:62:64:cd:5b:15:7d:cf:99:
         ea:fa:a8:20:c6:a8:97:9e:6a:4f:d4:a4:24:bf:00:f4:97:0e:
         0b:6e:5b:c3:d0:62:d5:03:ee:02:56:1d:c9:e4:ab:5b:10:a6:
         06:df:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org