Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa (raw, json)
Hash identifier:          SSy5DVNeZUfiG/GcT7mdpyD8A52ZTzutH07g/MYKHYI=
Subject key identifier:   76:07:B5:C9:05:79:CA:B4:76:11:32:00:70:8C:27:4A:21:7B:D0:A2
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       762D664FECA8ACC598EC528808060BBA444EF502
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:05 +0000
ROA not before:           Wed 03 Apr 2024 21:09:05 +0000
ROA not after:            Wed 02 Apr 2025 21:14:05 +0000
asID:                     262313
IP address blocks:        177.105.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2d:66:4f:ec:a8:ac:c5:98:ec:52:88:08:06:0b:ba:44:4e:f5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:05 2024 GMT
            Not After : Apr  2 21:14:05 2025 GMT
        Subject: CN=7607B5C90579CAB476113200708C274A217BD0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:c1:ba:27:3f:5c:90:f6:43:f8:e8:aa:15:
                    8c:d8:7a:ec:dc:d1:f8:d7:78:f7:fd:20:90:87:d6:
                    5c:23:ab:48:ad:e8:e5:7a:ac:44:fd:0b:9d:50:52:
                    c4:63:1f:d4:56:85:ba:45:c0:c3:f3:21:ef:1a:12:
                    35:92:e3:b2:9d:f4:1c:99:c5:7e:1e:c1:32:82:cd:
                    6c:9b:f7:af:16:28:67:6b:9d:9d:5f:1c:7b:4a:be:
                    88:67:1b:46:5e:50:a7:74:b7:4f:e4:3a:7d:06:8e:
                    c9:da:ce:cc:f7:a2:38:8a:2b:7e:4a:9f:31:78:b4:
                    69:91:0d:68:cd:d2:f6:f5:fc:a2:79:dc:23:fa:65:
                    ee:ec:8b:28:f9:95:9a:77:c6:63:6b:40:9f:11:d4:
                    0f:37:db:cc:a2:18:de:e7:d5:c2:c0:3d:30:22:03:
                    d5:4b:ce:cf:de:52:14:3a:80:e8:2d:88:37:60:e1:
                    19:2f:7f:50:9b:37:f4:48:f0:c6:d0:d4:0a:64:02:
                    d4:20:73:1d:04:14:1d:23:92:46:d5:39:be:4f:c6:
                    cc:c2:68:83:ab:9c:fe:78:7a:87:74:8b:52:b9:f7:
                    74:ef:10:04:4c:3a:b6:20:09:49:5f:ce:cd:40:00:
                    63:b0:47:f2:57:7d:c0:9d:43:2b:ea:1b:10:60:ff:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:07:B5:C9:05:79:CA:B4:76:11:32:00:70:8C:27:4A:21:7B:D0:A2
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:7c:41:1a:04:78:17:87:d0:2b:eb:44:6d:8c:da:88:be:
         0e:4e:f5:29:bd:5b:90:40:19:ae:4d:a8:71:3e:7c:2f:9f:4d:
         93:a2:84:78:09:ba:34:cd:12:f7:14:f1:07:d8:25:19:22:b1:
         76:5a:eb:d5:09:19:4e:c6:b7:83:57:ff:15:e4:cc:36:b4:15:
         60:00:bd:04:fd:e2:5d:14:07:6a:8c:c6:74:f2:47:aa:ba:b2:
         2d:a2:ae:08:43:65:1e:cd:62:67:1d:af:bb:a6:42:30:e1:2b:
         0a:68:af:ee:fc:4f:ef:39:67:10:d1:41:b7:8b:fb:7a:ab:df:
         a4:44:cf:7c:a1:9c:ac:e2:f5:bd:66:b9:98:56:fb:02:4f:ca:
         50:a3:f3:24:d1:9e:e0:c7:23:26:07:bc:ec:15:58:ae:33:5d:
         4b:34:9e:9b:e8:1e:8e:21:36:db:2d:af:b3:6d:24:ff:6d:46:
         59:55:2c:8a:2d:6d:9e:d0:d0:5e:70:77:15:0f:40:49:a5:bd:
         90:2a:7f:97:8a:70:5e:30:04:49:30:f1:1b:34:c5:9d:e0:ad:
         fc:82:e8:dd:f1:f7:99:bf:09:f9:e0:4d:f7:cd:f8:65:0e:6f:
         54:49:8b:40:31:0b:51:c6:a2:c3:78:3f:0d:d2:72:d2:c0:3f:
         b6:40:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org