Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa
File:                     3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          h58mC9ZHfG/6A/T6X2ascjZFBUtpzUVGo3mGTQERtmA=
Subject key identifier:   C7:83:05:53:96:D7:8A:FD:99:2D:6C:47:91:B3:32:36:57:36:E6:49
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       0198DC8D3E07EF126EDD8BD1F045FAFF6A10257F
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa
Signing time:             Wed 03 Apr 2024 22:06:16 +0000
ROA not before:           Wed 03 Apr 2024 22:01:16 +0000
ROA not after:            Wed 02 Apr 2025 22:06:16 +0000
asID:                     262302
IP address blocks:        177.10.204.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:dc:8d:3e:07:ef:12:6e:dd:8b:d1:f0:45:fa:ff:6a:10:25:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Apr  3 22:01:16 2024 GMT
            Not After : Apr  2 22:06:16 2025 GMT
        Subject: CN=C783055396D78AFD992D6C4791B332365736E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:fd:05:17:d5:25:1b:b5:4f:a5:9c:d9:35:
                    5b:f1:b0:b7:20:78:8e:5f:b8:58:b7:83:9e:a6:12:
                    2d:3e:95:70:0c:60:b9:d9:7f:74:50:5d:48:2c:06:
                    2b:8a:0f:2c:9b:20:37:d5:11:e5:45:76:f5:52:09:
                    44:5c:27:a4:37:47:0c:83:7f:0e:d9:31:e3:af:d9:
                    b5:e7:a1:cc:9b:7e:b0:98:4d:26:46:e0:11:33:88:
                    9a:ae:7b:b8:8c:0d:9c:28:66:23:49:ab:7b:47:87:
                    59:7f:24:a5:25:e5:1d:4b:69:c3:63:4f:26:43:5b:
                    03:50:19:2d:80:b1:85:e4:f4:b6:25:ef:23:7e:a1:
                    55:2d:8d:c7:83:ac:e2:dd:24:03:07:3a:19:e8:98:
                    7b:5a:2c:4c:92:1f:3d:b5:eb:b5:e0:2e:97:77:87:
                    10:2e:2c:b0:03:93:c5:b2:eb:ca:50:41:09:51:6a:
                    90:0a:cc:c2:6c:42:f4:8b:ff:93:70:05:9b:53:0f:
                    84:3c:14:cf:b9:57:b3:14:ed:91:e8:f3:f8:36:e4:
                    2c:41:48:ab:8c:8b:ec:4b:43:eb:0a:ec:1e:e4:3f:
                    92:2d:c4:28:ac:ce:1c:83:2b:07:5e:4b:1d:c5:ec:
                    c4:ce:3a:85:63:83:a5:e1:46:31:fd:dd:15:a6:7a:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:05:53:96:D7:8A:FD:99:2D:6C:47:91:B3:32:36:57:36:E6:49
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:5b:09:ec:2e:68:d6:e6:72:b6:ca:48:aa:98:fa:6f:56:
         a1:53:1b:79:86:99:f0:13:cb:65:9a:da:b8:6e:f3:ef:03:1e:
         af:21:03:46:8b:8f:5e:53:89:c4:81:7c:48:c2:dc:5e:46:e5:
         e7:03:aa:45:2f:2c:e6:87:6b:40:5a:72:6d:c1:d3:0b:f0:ac:
         fd:47:b8:95:8e:58:eb:77:0d:5f:5a:a8:95:22:e1:ae:cd:c9:
         5a:f5:69:e8:2a:1e:3c:c5:df:c4:95:06:af:44:b1:59:c2:9e:
         cd:59:b3:5d:c9:fd:19:43:35:12:e5:e5:0f:9b:40:38:d6:3c:
         39:37:06:77:2b:60:05:62:9d:6b:fb:5c:41:9e:d7:b7:63:dd:
         18:83:7f:4d:5a:d7:b2:23:c7:8f:90:4c:81:5c:82:dc:67:30:
         e0:c6:ba:62:f1:22:a8:59:ae:f6:32:61:5b:64:b1:9e:16:41:
         05:83:f7:0f:af:c4:c2:0f:8f:df:52:0c:c8:32:d5:82:24:4b:
         30:66:39:c4:1c:3c:91:a9:53:10:13:be:5d:9c:25:45:e6:92:
         b2:cb:f6:d2:ff:b0:e8:28:52:a9:33:ce:35:28:c5:f6:ad:f2:
         97:50:43:92:22:7f:12:92:ec:59:76:14:63:c2:eb:c6:51:8b:
         3e:43:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:55 2024 by rpki-client on console-fra.rpki-client.org