Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137372e3232312e302e302f31392d3234203d3e203238323934.roa
File:                     3137372e3232312e302e302f31392d3234203d3e203238323934.roa (raw, json)
Hash identifier:          elvB7O8V3RDgK93PYjGEWmiJxz0rQNqWWMxX2nxA+6c=
Subject key identifier:   A4:93:6B:E2:19:FB:4D:5C:80:36:F7:A8:EC:5A:59:A4:23:0D:99:8C
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       6EFB81153C4F433618920D8DEE62ED49FECA1E13
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137372e3232312e302e302f31392d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:33 +0000
ROA not before:           Thu 11 Jul 2024 11:52:33 +0000
ROA not after:            Thu 10 Jul 2025 11:57:33 +0000
asID:                     28294
IP address blocks:        177.221.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fb:81:15:3c:4f:43:36:18:92:0d:8d:ee:62:ed:49:fe:ca:1e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:33 2024 GMT
            Not After : Jul 10 11:57:33 2025 GMT
        Subject: CN=A4936BE219FB4D5C8036F7A8EC5A59A4230D998C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:10:a8:54:1f:d7:44:b4:e9:04:a8:f6:29:
                    7f:1f:c0:b3:3e:5d:46:ec:8b:36:12:42:7a:ce:62:
                    42:f8:7f:09:8b:4f:5c:22:ff:f2:e5:01:eb:30:47:
                    72:16:e3:b8:8b:d3:22:ab:e6:29:15:44:c1:08:01:
                    07:c6:43:e0:df:88:b6:11:93:e9:05:fc:b6:9d:55:
                    fe:52:33:da:c7:0e:31:fc:aa:31:be:cc:d4:16:fb:
                    82:e0:42:17:f3:56:64:31:e4:b7:e4:fb:e8:1a:c5:
                    81:e8:be:e7:69:f0:d0:5d:5d:11:ad:dd:b4:0d:79:
                    bd:e2:ed:12:32:85:16:ff:89:10:84:a1:0c:ad:ea:
                    66:1d:f6:7e:fd:3b:a6:06:b8:83:09:53:f0:d4:f4:
                    74:cc:ce:05:8a:84:2f:f7:bc:91:7f:9f:7c:ad:9a:
                    51:28:74:f5:18:2f:e8:13:d8:8c:c3:53:81:21:8f:
                    cd:46:6a:0c:32:8d:b3:7b:41:47:5c:70:ef:31:09:
                    fa:ae:55:3c:63:3e:79:af:49:f6:85:d6:35:37:ae:
                    94:c9:f3:a8:b4:a6:e2:05:4b:34:d7:05:f8:0a:0a:
                    6d:2d:c7:85:08:0b:8d:7c:f0:5e:a0:dc:0b:64:16:
                    d8:4d:40:2e:d6:55:7d:38:32:26:fa:89:35:fe:f4:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:6B:E2:19:FB:4D:5C:80:36:F7:A8:EC:5A:59:A4:23:0D:99:8C
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137372e3232312e302e302f31392d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:44:a5:19:4a:9b:7d:db:88:1f:92:56:da:56:82:75:89:ed:
         bb:e4:05:61:15:95:f7:34:56:10:cb:ea:cf:cf:5f:81:d1:22:
         24:18:c4:50:cf:d6:d9:b0:f4:b7:9d:50:a8:54:9f:d2:0e:1a:
         19:8f:c1:c2:38:1a:bf:06:b9:7c:48:27:c4:d9:fd:07:4b:aa:
         bd:c8:4b:e1:c8:a0:9e:12:1e:66:7e:2e:c8:be:b7:49:5b:5e:
         dc:99:5b:9f:40:04:aa:83:9f:45:6e:83:09:67:eb:c7:91:f0:
         84:8b:df:40:b9:99:e7:34:1c:97:c1:16:ae:c8:57:5d:52:03:
         cd:53:9f:6c:0d:21:b5:c1:ef:de:31:12:79:a5:81:be:a2:94:
         2b:97:4a:89:e9:9e:b8:a8:91:b0:ef:b5:d8:c3:4c:14:41:e7:
         05:60:c3:cd:82:96:91:79:d2:70:8f:4d:ad:e6:1e:dd:9e:46:
         36:dd:bd:2d:c6:cc:4f:ea:ed:80:c5:db:e4:59:35:87:16:52:
         77:02:17:f7:ff:cb:4c:b3:63:83:4a:f3:06:f5:58:95:1a:a9:
         b8:7e:0b:9e:fd:ef:fb:b8:d2:b1:93:a0:31:62:f0:03:56:ed:
         e8:1c:11:f6:c0:37:b2:d5:92:3d:4f:2d:30:cc:9e:b7:7a:70:
         1e:5b:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org