Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa
File:                     3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa (raw, json)
Hash identifier:          /OtitO3TfOAlnF/2atA2KBaxCrqJ89EoPEFqggWSfWs=
Subject key identifier:   62:D1:44:FD:82:03:2E:86:4F:59:57:3D:29:CF:BC:04:1B:71:8A:A0
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       7021C7F548E25B689F8DF80B4DE4B1C5777223CF
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa
Signing time:             Mon 19 Aug 2024 07:16:14 +0000
ROA not before:           Mon 19 Aug 2024 07:11:14 +0000
ROA not after:            Mon 18 Aug 2025 07:16:14 +0000
asID:                     262523
IP address blocks:        177.67.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:c7:f5:48:e2:5b:68:9f:8d:f8:0b:4d:e4:b1:c5:77:72:23:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Aug 19 07:11:14 2024 GMT
            Not After : Aug 18 07:16:14 2025 GMT
        Subject: CN=62D144FD82032E864F59573D29CFBC041B718AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:b4:3b:6d:37:7c:e9:de:e7:a7:51:17:e1:
                    96:39:0c:6e:a7:69:c2:0a:7f:f2:fb:52:f7:32:51:
                    c3:23:03:5f:00:81:ae:31:1c:6f:8d:ca:49:7c:8c:
                    d0:1f:d5:b5:94:29:b5:7e:d3:42:95:ac:5c:65:95:
                    29:8d:13:21:01:d1:ef:e9:0b:f7:27:13:a7:a7:3d:
                    a9:73:da:78:cc:0a:5a:99:02:ae:93:b3:0d:f7:72:
                    e1:09:3e:92:f9:25:66:0b:28:76:f7:f3:af:91:09:
                    ec:07:83:8f:70:74:ea:c7:a4:f4:ca:e9:18:f3:bd:
                    0e:69:35:b2:07:ce:64:aa:ac:b0:1d:d3:91:75:74:
                    08:72:70:1e:ff:cb:0a:6c:ad:84:26:67:85:bb:ee:
                    c9:79:fe:dd:86:3b:fb:82:00:5a:1c:21:e9:35:08:
                    3d:c6:70:1f:3e:f6:5a:ce:ae:fb:ac:a9:19:79:c0:
                    8c:7a:61:9d:90:67:25:80:66:ae:f7:5f:26:20:2a:
                    a7:1b:6a:f7:b6:59:2d:3d:6e:7e:55:b1:c0:f5:ee:
                    f8:ef:03:b4:45:37:6c:1d:13:b4:4d:f3:e9:9a:cb:
                    ae:f1:5e:b9:c0:38:7b:16:ea:a0:d5:f7:be:cc:2c:
                    56:b3:ea:98:69:68:7b:bd:44:1a:c5:50:ca:fb:d6:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:44:FD:82:03:2E:86:4F:59:57:3D:29:CF:BC:04:1B:71:8A:A0
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137372e36372e3137362e302f32312d3234203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:15:eb:41:10:48:c2:c0:5b:76:9f:1d:f1:f9:90:61:0b:d9:
         5a:0f:c9:1d:cf:bf:9f:c7:3a:42:a1:53:0a:b6:a9:ad:a7:5a:
         02:96:a3:3a:01:bc:1d:00:6a:ef:63:6c:8b:e3:30:49:34:f6:
         d2:5d:88:5b:55:59:bd:18:e9:f5:a3:f3:f4:5e:9b:b3:0c:1f:
         6b:7e:d8:79:f8:85:20:7d:16:34:7b:8f:62:6b:4a:f1:42:96:
         3e:89:e6:01:0a:69:53:94:69:06:59:f7:83:8f:ff:75:c4:84:
         2b:13:ee:6f:f9:c1:be:fe:3a:3c:5e:d4:96:82:83:2a:e0:a7:
         59:1d:b2:5a:dd:7b:14:91:09:eb:b5:4c:dd:10:e1:74:73:a7:
         3c:1f:5f:a5:fb:b7:fb:85:96:9b:8e:75:3e:06:d8:5c:2a:7c:
         44:57:94:77:bd:0f:d5:a6:02:24:71:ae:c3:2b:a6:41:45:c3:
         1c:59:7a:e5:7c:e5:2e:70:62:df:6f:42:50:a3:b1:cb:13:4f:
         f3:d4:57:d2:18:de:d2:f7:8a:1d:96:5b:35:73:5a:0d:f3:f8:
         7e:ed:b1:06:35:dc:ae:9e:b7:cf:1e:43:aa:df:ab:9b:43:94:
         5b:b3:a0:b3:33:05:11:0b:e1:fa:ba:99:7f:dd:96:2b:11:8b:
         42:86:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:40 2024 by rpki-client on console-ams.rpki-client.org