Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa
File:                     3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa (raw, json)
Hash identifier:          nnasuiImwJYxyL2TtX1QmkHKSPzBz6hM7kd7xe7NcR0=
Subject key identifier:   3B:77:CA:3E:10:DA:36:36:CE:B0:47:4D:74:E9:53:12:74:91:8D:E9
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       52D492A94E0FC7232AC6F1726B280C4A6D733817
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:43 +0000
ROA not before:           Thu 11 Jul 2024 11:52:43 +0000
ROA not after:            Thu 10 Jul 2025 11:57:43 +0000
asID:                     28294
IP address blocks:        186.226.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:92:a9:4e:0f:c7:23:2a:c6:f1:72:6b:28:0c:4a:6d:73:38:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:43 2024 GMT
            Not After : Jul 10 11:57:43 2025 GMT
        Subject: CN=3B77CA3E10DA3636CEB0474D74E9531274918DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:a5:a3:d4:20:d6:34:54:b9:79:da:dc:af:
                    3a:ac:dc:cc:a3:3d:3a:11:cc:4b:cf:c2:ca:59:a7:
                    f6:66:30:38:db:e6:e1:31:54:a0:08:b8:f1:ca:12:
                    9c:2a:96:6f:50:30:d5:70:5a:26:75:f1:da:29:f4:
                    1b:3c:b7:99:d7:ac:7d:65:5e:23:96:71:34:1e:57:
                    0d:6d:39:33:91:02:d3:13:af:ec:7c:33:4f:dc:90:
                    7a:b2:1c:d5:39:1a:da:0f:a0:ed:bf:47:d4:89:89:
                    ff:ce:ee:f4:e1:c8:09:4f:b7:97:a3:28:da:1d:14:
                    76:52:08:3c:dd:31:ba:85:98:ad:7a:35:3d:33:46:
                    63:09:bf:e3:0c:9f:b1:22:59:64:40:fa:86:aa:32:
                    17:1c:b7:62:d7:e9:d0:7a:ba:fb:8f:58:f7:e7:0a:
                    71:2f:d3:5a:97:0f:6d:9d:c8:b3:3f:a3:f7:48:b2:
                    ee:22:78:8b:59:9e:ff:25:8a:9c:fc:3b:c3:f9:20:
                    5d:6a:7a:60:c9:b1:60:68:9b:a9:60:9e:9b:6a:c5:
                    36:05:a7:43:ae:10:a5:42:5a:26:a7:22:1b:6f:36:
                    5f:f9:1d:e1:26:0e:cf:5b:e6:96:f4:6f:b2:ac:81:
                    f7:76:34:be:ac:9c:53:0c:ba:c8:1a:b3:36:8b:70:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:CA:3E:10:DA:36:36:CE:B0:47:4D:74:E9:53:12:74:91:8D:E9
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138362e3232362e3132382e302f32302d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:67:5f:31:da:6d:eb:84:1a:f5:2a:7c:ec:07:92:bc:52:34:
         dc:5d:ac:f5:be:92:44:4f:21:34:c2:16:53:83:7d:fc:95:38:
         a0:a0:e6:a4:8a:5f:cb:15:ec:16:6f:a8:b2:33:79:1c:0a:ec:
         94:6c:9a:f6:de:ee:47:4f:c2:9a:6e:37:5e:7b:b9:44:28:25:
         7b:b5:22:88:28:a2:3b:10:45:f9:38:8e:ed:27:01:3a:5c:ae:
         cd:6c:01:60:76:1e:a0:be:14:fb:c1:c8:70:cf:c6:45:0b:f7:
         d7:b4:6f:db:58:1e:e5:e6:88:61:36:a5:d3:44:39:64:ec:73:
         69:ab:a1:60:b8:be:44:33:6e:47:6f:e4:e8:b0:bd:77:21:f8:
         76:c9:1b:3f:82:c0:50:81:14:60:b3:df:52:15:a9:d3:83:7f:
         4b:5e:83:b7:ea:85:66:3a:58:62:77:45:15:90:2a:e9:84:ae:
         be:9c:32:58:2d:35:03:ee:17:0e:c4:e8:f0:5c:ee:18:a3:9a:
         9c:19:e3:f7:57:10:0b:6c:33:d9:d6:43:b2:d8:d6:81:33:bc:
         14:21:de:dd:26:f0:d5:f9:93:63:fd:1d:1e:a9:8b:79:c1:92:
         b4:e1:df:69:8f:cb:0c:2d:ce:0c:6a:ca:fc:ae:d0:4f:d3:28:
         93:67:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org