Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa
File:                     3137372e3132392e36382e302f32322d3332203d3e203238363339.roa (raw, json)
Hash identifier:          AyoqRgv/pCwkuJeIf85xZKN9XSOkWE46smavNY6gzM0=
Subject key identifier:   22:92:8D:E2:73:90:06:12:06:DF:CA:2D:12:4B:37:F9:28:C9:B9:45
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       1FC618DE6663819B1272DD3605E259768E5D3E61
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa
Signing time:             Wed 03 Apr 2024 22:49:24 +0000
ROA not before:           Wed 03 Apr 2024 22:44:24 +0000
ROA not after:            Wed 02 Apr 2025 22:49:24 +0000
asID:                     28639
IP address blocks:        177.129.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c6:18:de:66:63:81:9b:12:72:dd:36:05:e2:59:76:8e:5d:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Apr  3 22:44:24 2024 GMT
            Not After : Apr  2 22:49:24 2025 GMT
        Subject: CN=22928DE27390061206DFCA2D124B37F928C9B945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:66:ed:88:9f:e2:90:fc:89:33:e6:c9:e7:
                    7d:38:42:2b:7a:c4:ca:bf:75:4c:c4:ba:3d:81:fc:
                    3d:07:35:33:3b:3e:9f:8d:2f:3c:0f:6f:bf:94:c1:
                    c6:bc:68:72:3e:72:ae:df:eb:81:90:fd:2c:15:66:
                    b8:b6:ea:03:e6:9c:ed:20:ec:aa:10:41:93:98:5f:
                    f1:b2:cc:47:cc:b6:95:35:7d:77:3f:b8:35:78:43:
                    36:f0:e1:a0:ed:84:94:d2:b4:87:b6:10:b1:92:c9:
                    7f:99:d7:d1:5a:8b:31:07:f5:16:9b:ac:50:27:1b:
                    5e:4b:b0:65:1f:24:db:bf:fc:57:4b:05:01:2e:68:
                    77:8e:fe:38:d2:73:76:0c:c7:d5:0b:5e:d9:f1:b6:
                    fd:87:bb:9c:de:66:df:98:cb:2e:8e:78:61:30:8f:
                    4a:97:63:7b:20:29:fa:8b:63:c5:a8:c1:b5:8b:c6:
                    6c:7c:d4:93:18:91:21:7b:5c:b2:3f:d6:a5:a6:46:
                    45:27:e7:60:ed:09:48:d9:ca:87:2c:a8:3e:db:e9:
                    f5:77:ef:ef:01:02:cc:f4:a5:47:fb:10:d6:a4:32:
                    9a:30:66:79:f4:ec:5e:3e:0b:5c:28:de:a6:93:a4:
                    fe:83:72:54:b1:82:ad:84:d9:ec:e4:20:81:16:de:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:8D:E2:73:90:06:12:06:DF:CA:2D:12:4B:37:F9:28:C9:B9:45
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:71:e0:11:aa:1e:42:6f:d6:95:bb:34:9c:f7:3d:35:3a:
         ee:48:a5:b6:22:77:0a:5a:5c:bb:48:f4:f8:b6:72:9d:73:d1:
         4f:d5:24:d3:da:43:04:dd:c8:15:b1:8c:0d:5d:64:f8:f1:03:
         02:c8:c8:c5:fb:20:b1:b2:8a:d1:13:91:fb:24:4e:8e:82:f9:
         0c:1c:50:d3:18:88:08:38:df:40:01:2f:26:19:99:d7:2b:26:
         80:99:41:da:f6:25:73:2f:ff:df:83:b4:10:51:ae:94:89:ae:
         9c:94:06:49:f4:55:a7:7c:85:0e:99:ad:cd:99:44:8e:d2:9f:
         61:ef:1d:38:65:e6:22:83:2c:9c:b3:c5:4c:53:9a:6e:6e:18:
         02:55:63:15:9c:5b:47:32:a2:a1:9d:cf:f2:18:2e:45:b5:3c:
         66:81:74:c5:fa:05:bc:57:36:e4:21:33:d0:e3:52:b7:8c:a6:
         d8:c7:f6:3c:e4:e4:20:2d:6f:29:12:2a:a2:cf:e2:39:b0:71:
         44:ae:62:46:2b:59:62:ca:c3:d3:78:06:38:73:a7:80:78:5a:
         b8:35:14:f3:92:8b:37:f6:bd:c0:8b:fa:5e:d3:93:26:6d:3c:
         62:40:3d:3f:08:5b:b8:3d:f2:a0:d4:ad:27:83:5e:81:8e:1d:
         09:e6:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org