Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          DD9l1wAEQlTr1FE4eFm21oldJFLYDC77WNcHBlYa+XY=
Subject key identifier:   21:04:95:BF:B7:2A:18:ED:DF:9F:31:F7:87:F0:A8:8B:EC:7B:4C:F0
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       6B82F47154E21AEF34A772BC4AA529539FB53B35
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:07 +0000
ROA not before:           Thu 04 Apr 2024 00:51:07 +0000
ROA not after:            Thu 03 Apr 2025 00:56:07 +0000
asID:                     262866
IP address blocks:        177.12.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:82:f4:71:54:e2:1a:ef:34:a7:72:bc:4a:a5:29:53:9f:b5:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:07 2024 GMT
            Not After : Apr  3 00:56:07 2025 GMT
        Subject: CN=210495BFB72A18EDDF9F31F787F0A88BEC7B4CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:6e:08:5d:31:4e:b9:b0:02:07:03:4e:c3:
                    a4:92:d5:91:6b:c3:57:bb:28:5f:ac:38:03:a4:f7:
                    a4:2d:9c:57:b6:94:cb:a1:af:2f:89:88:d6:18:74:
                    0b:16:01:d7:27:b8:97:73:f7:89:fb:ff:6b:53:57:
                    86:ba:22:63:09:f1:2e:23:78:29:d3:e3:2e:19:ac:
                    4b:e4:32:95:ce:11:26:ff:5a:10:a3:8a:72:a9:98:
                    b3:48:81:1b:23:af:3f:5d:85:65:ea:80:59:0b:65:
                    04:a7:20:b4:b3:59:df:b8:4f:d8:a3:20:d7:92:dc:
                    52:6f:f8:e3:aa:a7:00:4b:dd:c0:fa:48:18:9b:d0:
                    ac:3b:8a:ad:52:20:b9:e6:b7:ff:82:a8:e2:8d:6e:
                    e2:e7:0b:d9:d0:da:51:5b:a3:ac:a3:b4:3f:a5:18:
                    61:4e:fe:3e:0d:42:55:0e:d0:31:c2:9c:fe:d3:3a:
                    c9:9c:c8:48:92:15:a0:c3:ee:8e:34:eb:2a:0e:55:
                    84:c6:a2:83:fa:31:68:85:29:21:21:80:14:00:b2:
                    53:d1:eb:cb:f7:6d:55:43:eb:35:71:b1:b1:2a:dd:
                    92:0c:e6:88:03:3a:71:4d:19:07:99:5d:ce:64:d9:
                    92:bb:6f:3d:12:34:71:21:5c:94:a2:03:44:a1:f9:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:95:BF:B7:2A:18:ED:DF:9F:31:F7:87:F0:A8:8B:EC:7B:4C:F0
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:2a:b4:ae:04:25:b8:fe:dd:9f:46:b2:26:d1:99:68:ce:4a:
         df:95:79:2e:80:55:2c:f7:21:22:a6:3b:da:13:ec:d9:84:e6:
         15:0b:42:66:45:a3:66:f0:8d:f7:27:d0:70:72:4d:be:85:2a:
         ea:f2:61:e3:89:bd:5d:b9:66:2a:4d:9c:ad:36:e9:6f:0e:14:
         df:91:c6:93:5e:c3:dd:50:72:fe:bb:11:ef:c4:e4:74:d9:76:
         7c:a5:4c:c7:47:cf:9a:4b:98:6a:d6:bd:59:56:9a:f8:47:e7:
         67:35:66:9b:02:21:b7:f2:12:4e:03:5a:cf:f8:40:1e:b7:64:
         1f:34:16:e1:4f:28:5e:70:93:4a:e9:ac:44:5d:64:81:98:a4:
         40:b2:87:89:13:ea:4d:e4:a0:63:e8:d8:2a:60:ca:19:24:a8:
         f7:c2:bf:e7:b6:3e:df:34:a4:ab:48:b2:f8:e1:37:1f:74:ef:
         73:ff:9c:54:42:19:eb:62:55:d6:f0:f4:7b:ab:c1:49:e5:95:
         fd:ff:ec:85:ee:79:71:f8:a1:18:cc:a5:cc:eb:26:17:c8:27:
         c3:ec:4b:f6:7c:15:01:a4:21:0e:12:28:89:06:99:bc:be:9f:
         3c:48:54:88:44:d7:ad:29:16:be:a9:15:ea:44:30:74:75:29:
         dc:82:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org