Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa
File:                     3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa (raw, json)
Hash identifier:          yy/Lp6fZchfWY8ib1EpSkbUGQox7HklUJcrj3dkan7g=
Subject key identifier:   4A:67:65:AF:2E:E3:EF:78:38:91:4C:05:8D:1B:2D:4B:75:DD:9B:F6
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       433527DCCA8324ED6776316927DA08C1A7E200F5
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa
Signing time:             Fri 05 Apr 2024 05:41:04 +0000
ROA not before:           Fri 05 Apr 2024 05:36:04 +0000
ROA not after:            Fri 04 Apr 2025 05:41:04 +0000
asID:                     262288
IP address blocks:        177.154.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl
                          rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:35:27:dc:ca:83:24:ed:67:76:31:69:27:da:08:c1:a7:e2:00:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Apr  5 05:36:04 2024 GMT
            Not After : Apr  4 05:41:04 2025 GMT
        Subject: CN=4A6765AF2EE3EF7838914C058D1B2D4B75DD9BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:28:bb:96:af:f1:fb:5d:64:7c:b1:fe:5a:
                    81:9b:d3:ff:80:46:8e:2c:80:f0:88:05:fb:24:32:
                    b4:f3:9d:d9:c1:23:ce:e3:94:9c:dd:c9:6e:e3:3a:
                    b1:23:46:18:8c:84:fd:d9:82:46:ca:96:6b:07:59:
                    0c:7f:99:ed:fa:2c:9d:4d:8c:6c:9a:39:eb:81:91:
                    9a:94:af:5e:6a:21:ad:11:b7:a5:fb:88:37:4c:b6:
                    a2:db:70:8e:02:5b:cd:4e:09:17:1c:b1:ba:c5:ee:
                    cb:7b:2b:45:c2:16:ea:5b:97:7d:8e:5e:77:69:76:
                    93:a1:3d:f5:0b:e9:ab:0d:e3:f4:5d:f5:52:44:ba:
                    b8:13:b1:80:52:97:1f:07:7b:70:3b:f3:5f:fe:2b:
                    af:0a:f0:60:5d:ac:0e:b6:de:c8:83:00:01:52:9b:
                    5d:ac:c2:44:05:88:07:d5:ea:1d:2d:be:e3:cf:e3:
                    7a:61:04:37:75:04:91:b9:73:4c:5f:15:7a:1a:57:
                    36:60:42:52:72:b0:3f:95:a9:a5:80:4a:c0:fd:75:
                    54:bd:43:1b:9d:fe:ba:ec:b3:ee:8b:c8:77:24:91:
                    8e:62:3e:4a:b7:71:eb:11:be:f5:cf:37:29:98:7e:
                    c7:e2:5a:de:ff:12:f9:3b:5e:da:3a:6f:74:2d:c6:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:67:65:AF:2E:E3:EF:78:38:91:4C:05:8D:1B:2D:4B:75:DD:9B:F6
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:bf:e7:3b:3d:9b:70:5d:40:bf:62:bb:22:87:d1:90:62:
         08:f1:d8:00:67:32:e3:b6:c8:8c:cb:ec:85:f6:79:cd:8d:66:
         00:e0:c2:c5:d3:8e:ed:86:41:3b:b6:91:75:dc:c1:c5:88:80:
         1e:d6:8e:03:71:6d:24:2c:f5:e3:84:db:98:1c:fc:11:fc:83:
         2c:b8:af:0f:84:04:92:4d:57:b1:3e:73:eb:8e:de:90:fb:43:
         0a:fb:8b:f6:80:4d:bd:7d:71:82:71:7c:1e:f8:6f:ad:d3:40:
         9c:b2:d5:58:a5:77:35:c9:53:70:db:a2:d7:b6:4a:38:f3:84:
         50:90:f6:df:e3:5f:24:d2:e2:e8:6c:63:03:3f:28:79:9f:52:
         e8:dd:44:32:67:62:3e:3f:33:d3:3c:9f:c9:08:5c:49:d9:20:
         17:71:51:2e:f1:8b:37:2c:6c:d7:71:93:d3:b7:fb:1d:ba:4d:
         e9:50:0f:23:7d:8b:8e:c8:46:21:e1:ed:33:0a:10:4f:d9:f0:
         85:85:3f:72:22:63:7b:d0:37:1b:a3:59:1a:d2:61:3f:3c:4f:
         89:7f:10:12:9f:06:e2:3a:c4:af:25:89:0a:ba:34:e2:5f:6f:
         f5:96:31:8e:54:1f:9d:1f:fe:21:75:43:27:e5:27:f1:de:58:
         6b:8d:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org