Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa
File:                     3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa (raw, json)
Hash identifier:          UYOWfevb9MlLAfDgfs5CbtBwq5tY2oMo2vaqr02Qndo=
Subject key identifier:   EB:2F:AB:9C:67:27:83:60:96:33:24:3A:EE:BB:9B:A6:92:3B:C6:DE
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       4A93D8EC8DB7F6961039B9E1E931EB8DC7661768
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:50 +0000
ROA not before:           Thu 04 Apr 2024 11:01:50 +0000
ROA not after:            Thu 03 Apr 2025 11:06:50 +0000
asID:                     262868
IP address blocks:        177.20.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:93:d8:ec:8d:b7:f6:96:10:39:b9:e1:e9:31:eb:8d:c7:66:17:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:50 2024 GMT
            Not After : Apr  3 11:06:50 2025 GMT
        Subject: CN=EB2FAB9C672783609633243AEEBB9BA6923BC6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:98:d5:98:39:1c:1f:5f:e2:a3:08:7f:fe:
                    85:7e:76:49:8e:84:13:7f:69:38:85:38:90:a3:59:
                    b3:7d:cd:40:8b:cb:a3:2f:71:4c:73:eb:58:61:96:
                    09:85:c7:00:16:4f:d3:38:0a:5f:51:4e:5b:8c:e7:
                    c9:d3:7a:51:3c:10:36:03:cc:ec:81:43:68:29:b3:
                    c9:4b:38:2b:c3:02:80:b9:a9:50:63:a0:b1:15:01:
                    a1:33:b3:f1:41:25:17:90:fe:73:41:62:0a:94:20:
                    da:e7:0d:0e:08:01:26:f3:8a:5e:e9:49:21:9b:2b:
                    07:9e:54:35:2c:8b:24:90:ef:00:50:00:0b:56:7c:
                    14:b1:68:08:72:da:0d:87:12:9f:0f:bf:fa:2e:6a:
                    2c:40:f0:12:b7:24:f3:d6:91:65:59:41:06:e4:37:
                    f5:c0:d4:5e:35:ac:fe:f2:93:88:ac:f3:46:88:d9:
                    54:84:e1:de:84:35:23:df:7c:d1:09:35:16:0b:04:
                    36:62:c5:01:6f:b8:8b:07:1d:4f:30:36:0a:3f:8a:
                    7a:2a:3d:ac:71:37:78:26:d3:b4:40:98:d4:13:48:
                    60:d4:68:36:8d:87:28:13:26:cf:99:b0:d5:3e:32:
                    f7:c3:60:f1:de:29:b5:1b:74:6a:c6:ef:67:79:00:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:AB:9C:67:27:83:60:96:33:24:3A:EE:BB:9B:A6:92:3B:C6:DE
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:a4:f2:14:97:40:df:69:d2:c9:0e:68:d2:40:b7:14:1a:
         08:f6:03:5d:7d:93:88:5b:71:fa:4c:1d:78:d7:ec:9c:07:2e:
         c8:5a:db:ef:d7:8b:eb:ae:e3:43:2d:43:80:e5:aa:c4:f6:ab:
         62:a3:55:56:e1:13:aa:75:db:35:73:ce:04:24:37:93:fc:13:
         75:c5:73:7a:71:76:55:ae:0e:1e:10:62:18:54:52:77:cd:84:
         18:53:32:60:8e:40:f8:c8:f4:a9:58:a4:09:12:e5:30:4e:98:
         63:43:36:d2:e7:22:5e:16:19:c2:0a:a6:24:f6:42:44:4d:29:
         16:9c:fa:24:dd:49:fd:74:13:e2:ce:53:5c:44:3c:8e:bf:6b:
         cf:6d:0e:11:38:6a:83:8f:70:87:a5:e0:70:ab:52:fe:0c:09:
         28:74:7e:60:27:61:75:2c:a4:67:25:71:21:67:ab:af:43:c1:
         2d:1b:de:15:59:72:04:18:c1:4e:91:cc:47:61:39:f3:22:da:
         9f:01:f3:16:db:b3:5a:bd:b1:f5:f5:d4:7b:23:90:72:50:3f:
         bf:1f:3c:c6:fd:76:f2:8b:c8:1c:59:1d:32:9c:9f:eb:84:a0:
         e5:e2:17:b0:af:45:79:ed:30:ba:86:54:ba:1a:ef:45:66:75:
         10:39:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:35 2024 by rpki-client on console-fra.rpki-client.org