Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa
File:                     3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          ws8ISeB3/o0FKnip6d8MzCgKOcAC079DbVzeiEGmEOA=
Subject key identifier:   51:CC:9C:27:C1:D3:7C:0F:51:19:B4:73:30:58:D4:B5:07:FE:83:5B
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       7921F5004E452DD4A166771B4B46D6D8D0BC41B6
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:54 +0000
ROA not before:           Thu 04 Apr 2024 11:01:54 +0000
ROA not after:            Thu 03 Apr 2025 11:06:54 +0000
asID:                     262868
IP address blocks:        177.20.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:f5:00:4e:45:2d:d4:a1:66:77:1b:4b:46:d6:d8:d0:bc:41:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:54 2024 GMT
            Not After : Apr  3 11:06:54 2025 GMT
        Subject: CN=51CC9C27C1D37C0F5119B4733058D4B507FE835B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:df:81:5a:e3:82:2f:2c:3b:74:14:0e:cb:
                    0d:00:c0:cc:db:2e:ce:d0:34:ac:68:10:e7:70:4c:
                    10:18:30:75:b2:f4:3f:13:64:70:19:a3:95:79:e8:
                    61:b0:d0:72:73:0d:10:d3:0d:d0:1a:6a:22:31:26:
                    b6:cf:50:5e:e8:95:6c:dd:b9:f0:dd:22:6c:1f:b6:
                    37:09:b3:37:f4:0b:49:4b:7a:d9:96:56:ce:a9:4c:
                    75:00:e1:ff:98:3a:bb:96:92:b2:93:9e:4d:b7:66:
                    68:53:67:e3:be:82:cd:4f:4c:39:8d:8a:b0:29:7e:
                    2f:77:18:42:5f:1c:58:fe:70:b9:c3:0b:78:93:9d:
                    35:65:ac:bb:a3:19:24:31:e4:2c:d2:65:a5:03:e3:
                    2e:f8:c0:44:4f:cc:ae:40:5f:d8:dc:84:2e:a4:48:
                    f4:fa:59:79:ad:d2:71:c0:62:ab:04:f1:71:4a:e0:
                    70:ed:a9:09:19:6f:2c:56:14:26:ee:87:50:8b:3a:
                    41:8b:b9:95:ab:73:c3:1b:f6:1d:bc:93:86:68:32:
                    d1:ce:43:b9:bc:43:da:a0:77:d3:45:ce:c5:9f:e7:
                    ae:a1:b6:ec:9f:f3:7d:6c:c0:ae:a9:66:62:b6:f8:
                    91:d8:1c:78:57:37:c1:58:7d:46:4b:8a:47:40:3a:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:9C:27:C1:D3:7C:0F:51:19:B4:73:30:58:D4:B5:07:FE:83:5B
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:da:8d:3a:e3:fa:6c:1f:ba:d2:a7:73:d2:82:57:b7:3b:92:
         64:67:99:33:11:69:99:71:92:fb:d6:87:3d:68:c3:85:57:89:
         47:7f:fa:d7:db:43:6f:98:af:48:66:23:c2:5e:4d:f1:91:dc:
         4c:a5:0e:18:82:4d:72:a0:b1:30:a1:93:43:d4:90:4a:8c:9f:
         36:be:26:f2:1d:6d:bf:4c:18:4b:90:fb:5f:5f:b7:5f:30:9a:
         d7:f5:13:d9:7f:5d:ef:ea:be:9b:f7:2f:e6:6c:43:64:f9:0b:
         25:a9:37:5a:a8:73:19:f1:eb:6b:e4:33:5e:dc:35:0a:74:77:
         03:5a:ba:41:26:3f:21:3c:1e:66:a4:72:4d:42:37:1a:e8:98:
         23:8c:bb:48:2c:f2:96:9a:33:55:11:97:51:b6:bc:60:b0:c4:
         d3:f0:4a:15:d2:20:86:73:cb:f3:33:09:b0:b1:14:d4:dc:7b:
         88:ae:7a:68:8f:b9:1a:d7:de:60:05:12:d7:0c:1a:9a:eb:bf:
         d3:f9:85:48:c6:e4:28:ae:d0:b9:71:31:aa:f4:d5:aa:e2:f2:
         b7:44:da:08:6c:cc:64:9e:6a:92:ba:5d:7b:da:b3:c5:a6:ca:
         ed:c3:37:1e:18:5d:e9:5c:a0:cc:50:ca:f3:10:ce:ab:7c:fb:
         db:56:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:43 2024 by rpki-client on console-fra.rpki-client.org