Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3136382e3139342e39322e302f32322d3234203d3e203238323934.roa
File:                     3136382e3139342e39322e302f32322d3234203d3e203238323934.roa (raw, json)
Hash identifier:          2DagrGcr4+lMwtSPHZnSF3CxYyLuqBLowoDeSh6y2qk=
Subject key identifier:   74:CE:2B:F0:14:82:78:3F:A9:F5:DA:75:1C:C1:34:9C:09:4A:CF:92
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       6885C321260269BD06B08B01AECA9862FBF829A4
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3136382e3139342e39322e302f32322d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:24 +0000
ROA not before:           Thu 11 Jul 2024 11:52:24 +0000
ROA not after:            Thu 10 Jul 2025 11:57:24 +0000
asID:                     28294
IP address blocks:        168.194.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:85:c3:21:26:02:69:bd:06:b0:8b:01:ae:ca:98:62:fb:f8:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:24 2024 GMT
            Not After : Jul 10 11:57:24 2025 GMT
        Subject: CN=74CE2BF01482783FA9F5DA751CC1349C094ACF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:5a:50:d3:56:90:be:77:7a:1d:82:c5:38:
                    90:ec:4d:63:a2:a2:47:6c:1e:68:dc:49:74:2e:9a:
                    36:9b:04:2f:ce:bb:0b:0a:3b:86:ad:27:8c:2d:2f:
                    f7:21:e3:52:a9:52:ec:b5:14:f0:ba:e5:be:d2:1e:
                    32:1a:3f:b2:ba:4c:6c:bb:74:44:01:5d:c2:72:f2:
                    47:48:fd:c9:aa:94:71:32:07:67:01:3f:0f:0f:10:
                    c2:4f:67:a9:58:b0:ec:b9:a3:62:00:7f:ee:c3:90:
                    d9:c1:e5:a9:6a:d3:20:94:24:26:d9:fd:f2:a0:a2:
                    24:d5:37:25:47:1d:1f:61:a9:26:91:3e:a5:91:77:
                    f0:eb:02:db:24:2f:aa:44:eb:00:3d:6f:5a:ff:8e:
                    69:47:91:74:56:8f:78:dc:a7:8d:00:ec:7f:a2:d3:
                    37:45:5b:4e:8c:b6:49:76:b8:8a:f4:dd:b2:a8:6b:
                    10:ac:c3:24:49:38:e8:bc:c5:7b:b6:df:3f:2e:ef:
                    00:c2:1b:31:fc:6b:09:b6:30:6e:94:66:9f:09:77:
                    69:32:18:a7:b4:ca:ad:26:54:1a:6a:73:69:6e:82:
                    90:90:9e:6f:0e:18:bb:3e:b3:04:f7:9b:1d:01:68:
                    15:90:44:a8:f6:26:75:61:f6:57:d7:fd:a4:4d:7f:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:2B:F0:14:82:78:3F:A9:F5:DA:75:1C:C1:34:9C:09:4A:CF:92
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3136382e3139342e39322e302f32322d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:54:c7:1f:77:66:30:42:b1:15:8e:b0:39:c6:8c:24:e9:
         e4:a0:65:a7:da:42:03:1f:48:6b:10:aa:51:73:cf:6b:1f:fc:
         94:18:13:12:7f:7c:bf:68:98:bb:31:4f:21:4e:70:27:13:44:
         bc:81:8b:26:7c:b1:7b:db:8a:90:e5:ab:4b:bd:88:36:a3:a4:
         5d:81:39:1c:e9:6f:27:a3:4d:fe:75:45:01:42:27:c7:3f:43:
         59:db:38:b5:43:77:52:23:d4:21:0c:0d:dc:bf:d6:2c:50:0a:
         99:60:38:15:d0:33:62:56:3d:e4:30:d5:da:26:0c:f0:4d:8d:
         b6:c0:cb:84:cf:22:3a:46:25:ad:42:2c:bf:17:46:ca:56:b8:
         a9:e8:98:33:3c:39:d0:42:ce:9c:cb:0c:cb:fe:94:89:54:ff:
         fb:e6:ed:53:4e:fc:a9:a5:10:9e:1a:38:b0:a5:69:dd:28:78:
         2d:93:3a:66:bc:fe:d4:0b:7d:68:d1:5f:e4:12:69:de:63:69:
         66:41:4b:a6:71:6c:45:64:70:01:ab:1e:eb:fd:e0:c1:53:9d:
         80:cf:2c:f5:b7:6b:14:23:cc:05:ee:d8:8e:31:0f:9a:07:04:
         ce:fe:47:1a:b8:d7:b6:44:45:d9:28:02:68:a2:f4:9c:c2:17:
         12:62:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org