Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa
File:                     3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa (raw, json)
Hash identifier:          +8dDwH0YWbzaCbir2YILLjugARBCFnuN7XxuUz344qk=
Subject key identifier:   65:B9:17:51:1F:41:86:4E:6C:00:E5:0D:C0:03:21:D2:A3:2E:38:46
Certificate issuer:       /CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
Certificate serial:       74EB21F86998F9DE2FFD61201105500A99611457
Authority key identifier: 80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa
Signing time:             Fri 01 Nov 2024 19:54:57 +0000
ROA not before:           Fri 01 Nov 2024 19:49:57 +0000
ROA not after:            Fri 31 Oct 2025 19:54:57 +0000
asID:                     262469
IP address blocks:        177.47.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl
                          rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:21:f8:69:98:f9:de:2f:fd:61:20:11:05:50:0a:99:61:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
        Validity
            Not Before: Nov  1 19:49:57 2024 GMT
            Not After : Oct 31 19:54:57 2025 GMT
        Subject: CN=65B917511F41864E6C00E50DC00321D2A32E3846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:11:3f:25:94:f0:53:2e:7e:3e:9c:13:26:
                    17:05:c0:23:49:26:6e:a3:59:2b:75:c2:bb:5a:99:
                    91:a8:06:c1:6f:cf:e0:bd:96:1d:a1:1e:86:20:d2:
                    8b:b4:8b:27:be:f6:f0:b6:65:42:0b:a4:4e:6c:cc:
                    b7:6e:ad:fb:0e:d6:05:ad:cd:76:4c:d9:14:d0:2b:
                    51:4c:98:4f:d7:40:d9:dc:6d:15:1e:45:c0:bf:68:
                    c4:85:46:fb:06:d1:77:3d:4d:4a:93:9d:ff:85:28:
                    6e:f6:c1:28:78:00:5b:bc:1a:5f:8f:59:fc:e2:1f:
                    6f:a7:92:09:71:5a:c2:5a:9b:ca:b0:3f:3e:61:0c:
                    6f:cc:5e:2a:41:14:ed:35:2c:22:1f:ca:06:cc:b7:
                    7b:8a:ca:9f:9b:ec:0c:2b:2a:19:1f:9f:93:29:df:
                    eb:e3:2f:6d:2f:92:76:0b:34:18:b9:c8:0d:11:8b:
                    b4:c1:de:64:1a:f5:f0:dd:57:8c:a1:58:a5:c7:a9:
                    b4:5f:92:74:65:a4:fb:d2:62:e4:fb:bd:10:cb:d7:
                    81:52:7d:d8:02:ca:4f:25:40:e6:9f:79:50:56:66:
                    8f:1f:8a:0c:c0:20:6e:b9:84:d1:2a:ee:33:2e:b9:
                    cd:0d:48:c0:ec:bf:ec:c5:4c:af:fe:a4:77:0c:21:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:17:51:1F:41:86:4E:6C:00:E5:0D:C0:03:21:D2:A3:2E:38:46
            X509v3 Authority Key Identifier:
                keyid:80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137372e34372e3136302e302f32302d3234203d3e20323632343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:85:62:84:c1:5a:9c:73:be:d6:1c:9d:6c:37:e4:47:a1:
         ba:b7:49:15:56:5f:68:24:9c:bb:a8:7f:ec:93:22:ba:4e:7e:
         1f:14:e1:78:e3:df:30:7d:8f:5d:4a:1b:29:fc:6a:c4:91:82:
         2a:c0:c4:f8:9e:ae:d8:ef:a1:44:ea:3b:9f:d5:8d:97:4a:74:
         76:ab:d8:16:dd:6e:74:03:f1:1b:a1:dc:b5:89:70:31:fb:b0:
         3a:9d:8a:53:6a:c8:44:9f:83:5d:55:35:19:17:8b:14:1b:3c:
         c9:f3:1d:22:a2:42:4e:42:2f:34:db:33:02:c1:64:c4:ab:4b:
         08:3d:8d:5d:5c:46:51:1a:f7:63:8d:8f:4c:f0:4a:45:c8:cb:
         c9:9b:30:2a:0b:ed:3a:18:9f:b9:90:a3:32:1f:18:57:96:ef:
         46:5c:03:71:3d:ad:3b:7e:5f:f3:d9:d5:f7:f2:4f:cd:7e:07:
         60:b8:e5:ca:33:5c:b8:46:f1:a0:61:cb:b1:a1:a6:9e:4a:c1:
         93:06:22:9e:e8:f7:d1:85:23:01:86:0f:aa:07:85:d3:6a:a2:
         53:3c:04:e6:13:2c:5d:7c:9d:9a:04:dc:72:86:26:42:28:ca:
         ee:c0:8a:7b:80:d1:70:6d:31:77:82:a3:01:d4:b8:e2:98:9f:
         f2:86:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org