Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa
File:                     3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (raw, json)
Hash identifier:          M0ofn+iYtqdL0ePQwgHtwSHu4QcHynTB9IugTEKpuu0=
Subject key identifier:   34:3F:41:88:D9:EA:C1:F5:D2:F1:04:D0:20:E6:5E:16:FA:34:20:05
Certificate issuer:       /CN=59705EC4540FCB5C4C3398C5820B274B6548892F
Certificate serial:       0863496A7BD7780841D7038DE288AAA2D87D4771
Authority key identifier: 59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa
Signing time:             Thu 02 May 2024 14:50:30 +0000
ROA not before:           Thu 02 May 2024 14:45:30 +0000
ROA not after:            Thu 01 May 2025 14:50:30 +0000
asID:                     271305
IP address blocks:        177.124.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.crl
                          rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:63:49:6a:7b:d7:78:08:41:d7:03:8d:e2:88:aa:a2:d8:7d:47:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59705EC4540FCB5C4C3398C5820B274B6548892F
        Validity
            Not Before: May  2 14:45:30 2024 GMT
            Not After : May  1 14:50:30 2025 GMT
        Subject: CN=343F4188D9EAC1F5D2F104D020E65E16FA342005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:30:e6:85:52:4a:d4:fb:c1:e1:1c:00:a5:
                    b4:be:30:d6:01:8f:e8:3d:87:72:0a:52:b9:5d:9d:
                    fd:20:7a:e1:39:6b:f9:94:aa:94:23:b4:ab:bd:02:
                    41:ac:b7:f0:ab:bc:00:01:d8:dd:be:38:8c:94:08:
                    69:54:82:eb:bf:5d:7d:f8:84:9c:61:cf:d6:2c:8d:
                    15:73:fe:08:88:da:81:65:7e:e8:7d:f4:1c:81:0f:
                    7c:cb:b5:ea:d8:66:92:06:17:c5:90:37:86:b4:71:
                    1d:39:55:71:3d:4f:3e:de:11:68:8e:a4:5e:04:e3:
                    49:57:80:71:bf:c8:81:cf:92:b9:f7:87:62:f5:99:
                    20:b2:21:af:81:44:df:1e:14:2a:dd:fa:1e:70:a2:
                    62:f9:f7:0b:01:6c:93:4c:b0:12:60:be:41:4c:23:
                    7e:9d:89:eb:6d:8a:fc:b8:0d:fe:ad:6e:fb:2a:4d:
                    43:32:d8:7b:17:2e:17:0d:57:5f:93:b8:39:70:5b:
                    6d:cc:53:01:a1:a6:1f:a3:47:d4:67:92:37:71:fe:
                    53:9f:5b:9c:8c:63:a3:4a:2e:17:c2:7b:1f:2a:c4:
                    1d:7f:b5:35:1c:a8:98:2f:b4:2a:3f:3f:92:6f:1c:
                    55:2a:c1:80:14:6f:e3:43:ef:47:e3:d6:fe:b1:87:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:41:88:D9:EA:C1:F5:D2:F1:04:D0:20:E6:5E:16:FA:34:20:05
            X509v3 Authority Key Identifier:
                keyid:59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:09:47:9c:09:88:18:c8:62:4c:44:e6:ce:10:75:e5:ea:08:
         ff:2b:a0:10:1b:55:4a:26:0b:8a:1c:2a:8b:aa:1d:2a:bd:41:
         95:a5:a7:9d:26:fb:6d:ee:cd:ce:82:34:ae:e6:5a:5b:59:f6:
         7f:ff:21:ff:82:40:86:eb:23:e9:7f:2a:4c:21:ec:f5:ca:3a:
         09:53:9c:7b:b3:f8:ec:ad:59:5a:88:78:0f:cf:30:41:0d:58:
         08:ec:1b:28:1d:f7:c0:93:6c:ab:10:0f:b1:8f:06:20:e4:24:
         92:78:8f:83:b6:50:9f:1f:6d:46:7f:62:4f:eb:88:21:44:85:
         75:6a:51:c7:ec:e6:b4:38:99:9c:e6:4c:d0:e6:4d:6d:fa:27:
         50:f6:dd:97:29:54:ec:0d:49:46:3e:60:c4:92:f7:7b:01:bb:
         16:a7:e8:b0:07:bc:68:c7:42:ec:5f:23:3c:bf:38:70:9f:d6:
         9f:5c:5a:57:53:3b:c0:09:c6:52:60:5e:fd:39:be:8f:ca:9d:
         73:1f:09:19:4c:c1:39:15:d6:40:45:58:62:ba:3e:0b:0b:0a:
         88:f3:11:25:48:ae:de:f3:38:70:f5:8e:c8:43:61:1e:dd:ba:
         8d:01:2e:51:14:73:4b:ed:f9:20:6b:e1:b6:e0:26:3b:e5:4f:
         73:fc:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 19:09:56 2024 by rpki-client on console-ams.rpki-client.org