Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32322d3232203d3e20323632383638.roa
File:                     3137372e32302e3231362e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          CddCcBNw8LjOp6Mj+b9yg/dA4Bn/eFC3GSR8Zyozv0s=
Subject key identifier:   DD:C1:80:E1:01:57:42:13:B9:47:15:D8:1A:D0:20:AB:9B:C7:95:49
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       0CACB78A38540FCE3A92918F2283D9E4CED81FBA
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:56 +0000
ROA not before:           Thu 04 Apr 2024 11:01:56 +0000
ROA not after:            Thu 03 Apr 2025 11:06:56 +0000
asID:                     262868
IP address blocks:        177.20.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:b7:8a:38:54:0f:ce:3a:92:91:8f:22:83:d9:e4:ce:d8:1f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:56 2024 GMT
            Not After : Apr  3 11:06:56 2025 GMT
        Subject: CN=DDC180E101574213B94715D81AD020AB9BC79549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:59:bd:fd:f6:b3:3d:cf:85:a6:5b:5e:c3:
                    95:7a:80:24:26:9b:07:46:2e:37:d3:a7:3a:db:9a:
                    15:42:55:70:95:bc:d7:f2:b2:cb:00:31:dd:5f:50:
                    32:9a:84:40:bf:a8:1e:59:50:63:5c:0e:e5:59:fb:
                    76:f1:ea:d8:ca:c8:e2:66:98:5c:d7:a9:72:07:2a:
                    7e:14:ea:a6:69:d8:a5:1d:9c:18:6c:cb:46:27:b3:
                    a4:d8:31:97:4d:f2:65:13:c1:bb:9e:68:42:3b:31:
                    2a:28:1d:a5:c3:64:ef:98:91:61:76:aa:52:f5:b1:
                    6e:5a:0f:0f:4e:82:c1:38:ce:17:fd:29:30:75:38:
                    5c:10:c2:e7:a0:d5:0c:bd:14:83:99:95:7c:e7:17:
                    b9:f6:07:c3:cf:0a:42:45:1f:3e:d2:6a:9b:a6:2f:
                    9e:c7:ac:21:fc:7d:f6:2c:d8:f8:41:95:e0:cb:ca:
                    fa:ba:89:36:05:50:7b:26:c9:6a:26:90:71:db:e0:
                    8a:54:34:52:53:5b:ed:f6:fb:33:92:0c:45:d9:45:
                    4a:3d:8a:eb:1a:02:f6:4f:a9:d8:dc:a8:31:6c:7c:
                    6c:f5:2b:0f:f6:f6:74:e3:e2:3a:36:f9:16:2d:e4:
                    68:01:b7:8b:a8:64:35:be:21:b0:7c:e6:14:21:65:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C1:80:E1:01:57:42:13:B9:47:15:D8:1A:D0:20:AB:9B:C7:95:49
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:98:54:00:28:a6:d2:5e:bc:ce:f7:89:71:7d:4d:ac:62:
         9d:ca:c6:92:5c:f6:f5:bb:bb:05:a4:60:9e:9a:47:75:5b:fe:
         8b:d3:57:79:93:4e:d6:c4:a8:30:a0:96:a3:3a:31:a5:f1:fa:
         21:4b:af:04:5d:43:13:e2:11:c8:38:e0:5d:54:51:9a:7e:cf:
         3e:ce:37:58:eb:2d:e0:c3:5c:09:cb:86:40:b4:d1:88:b3:23:
         28:31:82:a6:74:b7:c5:a0:85:b0:59:3a:89:e9:fe:dc:fa:ea:
         ee:3e:82:dd:64:73:e1:cf:cc:70:d8:b4:f7:99:73:26:5e:31:
         f8:87:9c:56:7d:c6:65:22:4b:6c:48:0a:fc:64:1c:cc:0a:b7:
         d8:d9:e2:38:75:4e:80:4c:6d:4b:ef:99:88:94:e9:84:19:83:
         94:a3:8e:15:56:4f:07:d5:bb:a8:1e:00:27:1e:54:03:af:fb:
         92:9e:1d:7b:98:57:ec:a7:61:f6:f9:d0:44:2b:7f:23:e4:5e:
         cd:38:06:65:9d:3b:74:6d:96:54:4f:c6:00:d4:41:be:7e:55:
         c6:c2:14:93:c5:8a:f4:73:41:90:75:46:b9:ef:9f:3c:19:0c:
         24:b6:09:19:3c:df:41:a0:46:43:bd:e2:44:47:63:3b:e1:43:
         70:38:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:35 2024 by rpki-client on console-fra.rpki-client.org