Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa
File:                     3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (raw, json)
Hash identifier:          YH72k/QxuheBCgdjU+s21PdbAKz2JNFIC0hQBapRFmw=
Subject key identifier:   9C:A3:F2:73:D8:C5:F3:9F:00:F1:F0:91:34:95:F8:D3:81:61:0C:D3
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       740FFE1D33DDA73EB07CCD003353C38665A5C9FB
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa
Signing time:             Thu 04 Apr 2024 13:19:26 +0000
ROA not before:           Thu 04 Apr 2024 13:14:26 +0000
ROA not after:            Thu 03 Apr 2025 13:19:26 +0000
asID:                     271589
IP address blocks:        177.184.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0f:fe:1d:33:dd:a7:3e:b0:7c:cd:00:33:53:c3:86:65:a5:c9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Apr  4 13:14:26 2024 GMT
            Not After : Apr  3 13:19:26 2025 GMT
        Subject: CN=9CA3F273D8C5F39F00F1F0913495F8D381610CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:81:0c:9d:5f:40:33:a9:17:45:da:7f:e3:
                    1d:dd:84:6b:2a:98:20:ef:92:ab:97:80:20:0c:fe:
                    79:31:4f:49:eb:cb:c7:36:7d:45:63:1e:80:b2:23:
                    5a:c2:76:21:a7:24:28:77:78:ed:29:f6:b0:2c:e8:
                    77:66:b2:9f:9b:1d:49:3f:8e:d9:c5:cc:27:32:f2:
                    6f:8c:62:bb:25:54:35:93:a8:96:8f:18:c9:8f:5d:
                    d0:69:00:fd:d2:a9:7e:bd:9f:d5:04:46:df:38:66:
                    93:06:cf:4f:33:94:d2:74:37:01:a9:36:6e:cb:07:
                    aa:42:2f:5f:db:f2:78:22:8a:84:65:86:34:95:6b:
                    8a:75:54:ff:a0:07:67:19:1c:f6:68:bc:3c:ca:d4:
                    86:85:a9:61:b2:ef:17:c2:bd:e9:b2:5f:3e:bd:1d:
                    20:71:83:55:b4:c0:33:75:92:38:26:4d:1e:39:77:
                    7e:59:2b:06:78:2a:90:86:5e:23:2c:57:9e:99:90:
                    3e:55:a4:80:5c:83:37:ab:42:5b:19:29:c0:69:e6:
                    24:5b:a6:55:e7:cb:5d:e6:99:94:28:89:d5:da:1f:
                    ba:82:33:bb:ec:81:f8:23:fa:b2:30:c6:dd:75:bc:
                    23:01:89:97:6b:c3:ef:78:48:75:10:f9:da:ba:36:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:F2:73:D8:C5:F3:9F:00:F1:F0:91:34:95:F8:D3:81:61:0C:D3
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:ff:b8:1e:cd:4c:db:13:c8:af:0f:fa:88:34:c4:af:6e:
         da:fd:0f:3f:0c:4a:62:fd:cc:3e:7c:a3:49:b2:14:ee:66:85:
         a9:ad:00:b3:42:6d:4f:92:01:59:dc:68:7a:c5:e3:34:f7:68:
         ff:14:84:c7:fb:c4:97:95:8b:4e:0b:f4:ff:9f:97:1a:52:71:
         77:26:a1:5d:4d:12:e2:06:03:dd:22:98:af:b8:07:af:5d:fc:
         28:2f:4f:02:9c:46:43:e4:3c:cf:f8:71:a2:ab:65:3a:c0:71:
         da:f6:97:2f:3c:b3:48:40:de:d1:6f:35:e4:68:7e:06:65:e3:
         92:79:c5:f0:ee:08:fa:a8:77:35:0f:0f:69:1c:ea:f1:59:cb:
         46:b0:17:27:d6:b4:dc:5f:4f:1e:e5:00:9d:cf:52:82:67:7d:
         63:94:53:7a:b1:b6:fa:20:ed:e5:5c:b2:b5:2b:ca:e1:3b:41:
         8d:4b:71:83:f7:9e:2d:e9:24:cd:61:54:e6:39:91:82:32:bc:
         01:db:4d:af:c5:0a:31:0a:62:05:19:be:a0:82:3e:73:ca:79:
         25:17:79:49:27:de:dd:8c:67:dc:3f:7f:50:42:8d:4a:1c:96:
         e9:ab:fb:ef:11:89:bc:a7:3e:6b:47:1b:86:a1:3e:ef:61:67:
         16:1d:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:12 2024 by rpki-client on console-ams.rpki-client.org