Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
File:                     3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          K9lpqOplosXo/mn9OnZZ0RWAb7TQKRGrt60HwCceTDA=
Subject key identifier:   BB:8B:F2:7F:32:0D:04:E0:B8:6A:10:6C:6C:82:EF:F2:3C:F4:9D:19
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       4B378C6456157C9FC391FA2F5F9040C3B035D40C
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
Signing time:             Wed 03 Apr 2024 22:06:16 +0000
ROA not before:           Wed 03 Apr 2024 22:01:16 +0000
ROA not after:            Wed 02 Apr 2025 22:06:16 +0000
asID:                     262302
IP address blocks:        177.87.132.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:8c:64:56:15:7c:9f:c3:91:fa:2f:5f:90:40:c3:b0:35:d4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Apr  3 22:01:16 2024 GMT
            Not After : Apr  2 22:06:16 2025 GMT
        Subject: CN=BB8BF27F320D04E0B86A106C6C82EFF23CF49D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:29:af:ef:da:96:3f:a6:16:12:c6:f0:94:ed:
                    98:49:d9:98:4a:76:ce:3c:5d:ef:7b:13:89:81:6c:
                    00:18:60:21:fa:f7:3f:35:1e:b8:1d:35:ca:13:27:
                    20:c7:1e:a7:f0:98:9a:53:2d:b0:ee:67:ac:29:0c:
                    21:b3:a6:b8:4f:12:5c:d8:80:ab:bb:30:b4:a1:b5:
                    f5:b5:fa:68:bd:94:a7:ed:ed:6f:5f:7c:55:65:c7:
                    4d:90:a3:76:1a:b8:13:4d:e2:75:d3:e1:67:40:b9:
                    41:a4:01:64:55:00:60:c5:9e:86:a8:67:74:59:ce:
                    f6:0e:f7:98:ee:ed:dc:18:ac:1d:ec:36:b4:30:35:
                    50:3a:42:39:e0:ee:82:82:ec:ae:06:fe:f2:f5:4f:
                    44:6d:b2:7c:6f:3d:2f:ae:95:4e:32:7e:65:7c:81:
                    37:e4:7d:73:82:e6:c0:c9:25:0d:71:b9:f0:89:c7:
                    c7:e3:21:27:a4:bb:dd:c2:01:0e:b8:7c:2c:92:05:
                    38:f1:d7:3d:00:55:b4:52:b2:27:f8:27:1f:9d:e9:
                    3a:3b:67:44:ab:b4:ec:55:36:78:17:58:b1:6c:2d:
                    b4:6b:d7:bd:03:45:cf:9c:58:28:9b:a0:df:fa:a0:
                    81:43:56:8b:2f:8f:ac:4c:9c:41:94:96:b4:ed:aa:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:F2:7F:32:0D:04:E0:B8:6A:10:6C:6C:82:EF:F2:3C:F4:9D:19
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:67:a0:7d:30:36:fa:80:93:34:b4:21:3e:fb:0d:3d:64:
         ac:3f:ce:1e:a1:d2:3a:4e:ec:8d:de:11:1a:52:32:ab:18:fe:
         ef:07:5f:53:6c:1d:a5:0b:3a:42:fd:31:69:42:74:74:c2:aa:
         2f:d0:e0:94:ca:6b:50:60:04:28:82:2a:19:62:3e:c7:f3:2a:
         24:60:60:97:49:15:3e:20:5d:5a:63:c5:86:6a:87:08:9b:5a:
         77:3e:7a:0e:a1:eb:b9:eb:ee:21:a3:5e:ee:65:fd:61:75:fe:
         2d:af:51:d3:e7:94:6d:ed:d3:28:c1:19:66:9c:d7:5c:59:14:
         80:68:e7:50:09:1e:dc:5b:57:d0:3d:e5:ed:d0:5b:56:f3:24:
         69:3b:bb:8f:73:ed:29:54:22:ed:41:6e:71:6c:82:ac:19:36:
         bc:12:62:58:2d:fb:e4:a0:0b:d9:8e:54:29:cf:1c:3c:64:0f:
         48:c1:39:90:96:38:61:26:81:e7:7d:8c:5f:b4:55:4c:52:b3:
         60:6b:d5:44:d2:e4:4f:b0:b0:7e:94:23:40:36:2d:b3:9c:1a:
         36:94:4a:68:62:4f:9e:64:94:f9:a2:20:84:9e:8e:7a:1e:87:
         05:11:4d:74:30:aa:35:c8:44:fe:25:8c:33:38:f7:c3:a0:d1:
         d0:57:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:59 2024 by rpki-client on console-fra.rpki-client.org