Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
File:                     3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          8nCkCNpJqAbewq5is2V4/pxd17mZ6I88Yayc+iPcf0Q=
Subject key identifier:   1B:E6:53:E3:C2:47:D3:5A:6B:D7:97:C5:D2:7C:F0:AC:DC:27:61:E1
Certificate issuer:       /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial:       2FF00ACC13F0B3F729C853527111D49E063FE722
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
Signing time:             Sun 28 Jul 2024 21:05:18 +0000
ROA not before:           Sun 28 Jul 2024 21:00:18 +0000
ROA not after:            Sun 27 Jul 2025 21:05:18 +0000
asID:                     263424
IP address blocks:        177.91.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f0:0a:cc:13:f0:b3:f7:29:c8:53:52:71:11:d4:9e:06:3f:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
        Validity
            Not Before: Jul 28 21:00:18 2024 GMT
            Not After : Jul 27 21:05:18 2025 GMT
        Subject: CN=1BE653E3C247D35A6BD797C5D27CF0ACDC2761E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:f2:4d:c7:ce:f7:c3:80:34:06:e5:bc:78:
                    58:f4:de:34:d4:01:89:21:d8:71:27:a1:40:f8:89:
                    64:44:9c:91:2f:3b:ad:1d:8a:52:de:98:53:02:69:
                    b2:59:ec:f7:03:93:63:e1:c3:d1:0f:b2:74:27:27:
                    47:f8:4b:19:30:da:30:20:40:92:da:2e:8d:2e:69:
                    89:01:78:28:23:11:84:f1:9f:13:eb:9d:5e:42:83:
                    ec:77:57:a1:3d:de:62:87:b7:55:6d:c4:b9:21:fd:
                    f9:8f:78:f9:75:45:a6:06:ee:ee:42:37:e2:b6:cd:
                    28:1c:37:81:8c:22:97:73:22:2e:90:71:50:cf:07:
                    a2:f3:f8:13:a3:45:4f:8b:b2:4e:7e:3c:0a:50:b7:
                    ff:3c:ac:e5:59:17:63:33:e5:c6:a1:ca:07:c5:fb:
                    26:36:ce:40:ce:ad:d3:13:46:61:8e:67:a0:44:a3:
                    22:94:bb:fa:09:24:db:65:43:89:ff:36:30:4c:19:
                    ea:85:b0:29:28:73:e4:56:78:8c:ba:15:dd:e8:9c:
                    4d:0b:fe:1c:19:18:b1:dc:a3:eb:e1:b8:dd:37:13:
                    76:f5:40:1f:a3:63:08:51:19:40:fd:d7:b6:ef:7f:
                    a1:03:e5:b1:85:c1:6c:74:66:a7:52:dc:d4:93:35:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E6:53:E3:C2:47:D3:5A:6B:D7:97:C5:D2:7C:F0:AC:DC:27:61:E1
            X509v3 Authority Key Identifier:
                keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:14:1c:d7:43:5e:57:d2:41:38:06:27:b8:78:17:ed:a9:
         df:36:f9:f5:2e:a5:4e:31:d7:b9:d1:60:1d:72:15:72:83:b1:
         68:f0:e0:67:5f:49:3f:5e:45:e8:b1:b2:d7:10:07:ae:df:bb:
         99:09:84:58:a1:3f:aa:93:ba:fe:77:99:28:50:78:e0:be:39:
         74:4d:20:e8:ad:7c:5a:90:85:63:82:5e:ee:ea:80:de:51:c6:
         dd:73:7e:4d:5a:9a:bf:5b:c9:83:48:ef:19:a6:ba:15:6f:30:
         c9:1b:84:ea:9e:30:7a:a9:25:cc:69:e7:41:a6:fd:cc:81:73:
         cd:55:92:cd:08:79:d7:ae:f9:18:15:d9:bc:f3:5e:e2:fc:98:
         c1:75:27:d3:28:0f:f5:5d:dc:d0:12:d3:1d:d2:0f:b2:a4:f9:
         ca:2f:a8:4d:34:15:6c:92:6a:d1:aa:17:d7:74:60:bf:55:49:
         17:69:0a:2e:d1:b6:6c:0a:2c:18:2e:e2:20:a9:ae:a0:d2:6d:
         8d:44:06:4e:24:a1:f3:b1:0e:e2:4d:c5:62:a7:c2:14:80:dd:
         a3:d0:66:cc:6c:10:d7:2f:3c:53:a9:2b:c4:3c:8d:75:cc:a2:
         aa:da:61:7d:a8:95:0e:ae:3e:a2:12:f1:cd:55:a1:46:05:35:
         02:b9:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org