Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          mrTgXODhnqxyQ4ns/gmfHkyheo1j0Gk9CaqxrpghH7Y=
Subject key identifier:   C3:DF:F9:26:D5:C4:80:7A:8F:BD:0F:D2:8D:09:CE:AB:43:0E:66:20
Certificate issuer:       /CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
Certificate serial:       6B0AF631F96FE7CA640C766DD0D46F82757460CC
Authority key identifier: A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
Signing time:             Thu 04 Apr 2024 02:33:37 +0000
ROA not before:           Thu 04 Apr 2024 02:28:37 +0000
ROA not after:            Thu 03 Apr 2025 02:33:37 +0000
asID:                     263604
IP address blocks:        177.71.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0a:f6:31:f9:6f:e7:ca:64:0c:76:6d:d0:d4:6f:82:75:74:60:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
        Validity
            Not Before: Apr  4 02:28:37 2024 GMT
            Not After : Apr  3 02:33:37 2025 GMT
        Subject: CN=C3DFF926D5C4807A8FBD0FD28D09CEAB430E6620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:9c:6e:6e:4c:c3:a6:b6:a1:0a:b0:49:71:
                    8a:be:85:d7:d7:63:77:f2:ff:70:d9:0a:50:e0:99:
                    31:12:8d:0d:a7:d0:fa:93:3b:78:8d:60:9e:7d:6f:
                    10:bf:b0:28:d6:00:75:1f:fc:15:05:1d:4d:ea:7f:
                    52:8b:a2:c9:4c:6a:25:13:b6:0b:8c:4d:e8:6c:79:
                    ec:19:d5:61:8d:2f:f9:51:a8:b2:36:03:6b:90:1f:
                    7e:37:01:6b:a6:ef:5b:8b:cd:35:84:c8:53:f1:6c:
                    a4:a0:9d:6a:66:b1:fa:e8:d2:99:b3:40:0e:90:47:
                    a9:9a:76:8e:fc:7d:f1:d7:20:eb:02:af:90:56:b2:
                    3d:94:c7:4e:f1:9a:b8:72:6e:2f:ac:1c:25:96:0d:
                    58:51:65:5a:3f:5e:fd:f9:87:81:3c:0f:6f:79:b0:
                    31:3d:d3:7e:29:82:09:0f:df:7d:fe:03:8c:e4:27:
                    20:65:e7:d2:e3:99:55:35:b9:39:7d:53:dd:19:ce:
                    09:10:c0:ec:55:9a:d2:18:d0:2d:be:60:d0:36:6e:
                    87:be:11:e4:91:09:8e:3b:9f:d2:71:57:b2:cb:42:
                    af:be:05:5a:d6:6f:b7:c6:f0:ba:f6:10:78:36:48:
                    10:d7:d9:f9:ff:7b:62:0e:2d:fb:67:c6:61:fe:28:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:F9:26:D5:C4:80:7A:8F:BD:0F:D2:8D:09:CE:AB:43:0E:66:20
            X509v3 Authority Key Identifier:
                keyid:A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:bc:c8:56:2c:ce:bd:64:ed:a0:88:5d:df:82:06:23:55:d4:
         59:e9:af:9f:f0:d6:45:9a:00:c8:3d:55:e8:4e:5c:35:ab:4e:
         36:6f:e8:26:63:ad:2f:ae:c2:08:6d:de:39:43:31:be:bd:11:
         76:14:a6:6b:b3:e3:da:bc:4f:51:f1:5a:3b:bc:07:8f:41:3e:
         11:c7:31:dc:ca:b1:68:aa:bd:e6:e9:79:d1:31:fc:e9:70:d2:
         9b:67:2d:1d:9a:50:5c:91:b6:8d:d1:3d:43:41:cb:62:73:db:
         6f:18:a6:dc:ab:a7:81:60:98:86:93:6c:8a:e9:05:45:73:fa:
         73:52:dc:76:28:b2:8a:24:16:9b:f7:71:7b:6e:f8:70:4b:d6:
         ee:91:76:b4:1f:d8:87:ac:55:f8:72:61:02:8b:be:45:68:08:
         cb:f8:f7:64:1a:b2:99:dd:3f:29:b5:a7:bc:89:58:62:43:2b:
         c2:cc:cc:7e:99:70:f7:77:3e:67:14:ad:3d:bc:b4:dd:f1:3c:
         19:a3:d2:91:ec:f6:27:84:db:c5:e4:75:76:d1:89:bc:96:60:
         10:c5:14:bc:ba:97:c7:21:47:11:e6:39:61:5d:b8:6b:c3:58:
         20:a8:31:78:a9:62:ba:09:eb:26:6e:c6:28:b5:14:fe:64:32:
         92:c4:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:54 2024 by rpki-client on console-fra.rpki-client.org