Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
File:                     3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa (raw, json)
Hash identifier:          qidjcR9spwWEdO6s58QxoaSsC8B973GMbEn6u10Cebk=
Subject key identifier:   04:2C:C3:B6:AB:6F:E6:CC:02:36:8B:6B:34:F7:42:29:71:EC:3D:55
Certificate issuer:       /CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66
Certificate serial:       11AF58A7066D39380D2998AB4EDA28FBD3602EA9
Authority key identifier: 24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
Signing time:             Thu 04 Apr 2024 18:26:40 +0000
ROA not before:           Thu 04 Apr 2024 18:21:40 +0000
ROA not after:            Thu 03 Apr 2025 18:26:40 +0000
asID:                     271038
IP address blocks:        177.129.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl
                          rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:af:58:a7:06:6d:39:38:0d:29:98:ab:4e:da:28:fb:d3:60:2e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66
        Validity
            Not Before: Apr  4 18:21:40 2024 GMT
            Not After : Apr  3 18:26:40 2025 GMT
        Subject: CN=042CC3B6AB6FE6CC02368B6B34F7422971EC3D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:19:03:64:d2:99:cc:b7:63:db:b7:68:2a:
                    0b:83:58:d8:f1:a2:59:ea:89:4a:8d:f7:df:ff:96:
                    28:b0:ad:bc:e8:6a:ae:46:35:90:05:93:76:66:44:
                    ac:fb:41:7e:65:76:ac:63:18:3f:fb:1d:16:14:aa:
                    e4:89:ed:cd:a0:84:c8:97:6b:3e:73:a1:75:7a:73:
                    22:1e:eb:d3:44:0f:59:c9:a5:a4:b9:86:c9:0c:9d:
                    73:c5:e8:3d:2a:3f:d0:93:4f:12:8b:6d:d1:8b:cf:
                    14:0d:fd:ce:a6:07:77:af:23:b1:a7:86:ea:17:c8:
                    c4:e3:9e:e3:aa:fc:d8:58:56:9b:2e:07:70:64:c9:
                    8c:07:59:bd:e2:3a:4c:b5:24:d6:36:7b:89:53:8a:
                    fe:80:d5:1d:57:06:fa:93:8b:57:c7:fc:40:27:f5:
                    9c:c3:8f:f5:4c:97:31:65:04:c2:46:d5:85:fe:80:
                    e5:bb:1f:d5:2c:2c:9d:ec:5e:2f:1c:32:27:70:98:
                    c4:fe:ac:50:20:2f:ac:02:f4:e1:33:54:7b:70:48:
                    81:71:41:f4:67:93:6e:e0:02:e9:8f:22:f6:36:01:
                    f1:15:32:c7:76:94:59:3a:99:01:2b:f7:27:eb:27:
                    f6:36:13:9f:42:1a:57:3f:47:6b:a7:53:74:f2:4a:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:C3:B6:AB:6F:E6:CC:02:36:8B:6B:34:F7:42:29:71:EC:3D:55
            X509v3 Authority Key Identifier:
                keyid:24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:83:7f:27:40:09:7f:dc:f3:e3:da:b6:71:f6:e4:a8:16:
         e4:e5:1a:b2:19:ec:1e:9f:5e:f2:67:02:41:c8:a5:f7:c2:a8:
         de:29:8e:9c:6f:a1:8d:1b:98:d7:88:68:dd:ab:5d:93:96:ea:
         b6:8d:9b:52:b5:1c:e8:7f:51:21:c9:9d:d6:f7:41:5e:9c:61:
         d1:b3:88:99:79:a8:fe:f6:45:80:e1:6d:54:2e:82:20:84:87:
         35:96:10:78:34:f9:ea:50:23:a8:d9:09:23:72:71:8c:6d:05:
         99:4f:cd:d3:bb:fc:e5:59:9c:55:e8:37:be:b9:a9:a7:36:4f:
         a6:16:d6:ff:4b:42:ff:98:b2:cf:56:ed:59:29:6a:0a:b6:14:
         ca:b0:fe:00:78:3b:43:70:d7:9f:d6:c8:65:1c:56:0b:7f:2a:
         54:34:67:7e:3d:c4:ea:92:4f:7f:49:f1:80:f6:2c:da:0b:3f:
         cb:be:fb:3f:1f:5a:9b:20:02:b2:92:59:d3:8f:af:17:1a:a6:
         ef:48:a7:aa:e8:bf:5c:49:bd:3e:17:8d:89:a7:4b:fc:ec:73:
         43:10:fa:82:59:de:cb:d0:55:4a:6d:af:12:f4:d0:49:e2:3d:
         4e:48:00:4a:50:f3:26:a7:70:2f:e7:5a:08:80:80:fb:c6:f5:
         43:c0:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:02 2024 by rpki-client on console-ams.rpki-client.org