Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32312d3231203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32312d3231203d3e20323632333133.roa (raw, json)
Hash identifier:          nB+CM7+Q1SUC/D0OihCaqk2UgxUyfQOL2dMJHXbzg2M=
Subject key identifier:   62:08:79:EC:F6:DB:6B:4D:C4:00:96:0B:38:B1:4B:5A:CA:8A:02:13
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       59983A54A9174367D38D2A3C77DFC12308284F45
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32312d3231203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:04 +0000
ROA not before:           Wed 03 Apr 2024 21:09:04 +0000
ROA not after:            Wed 02 Apr 2025 21:14:04 +0000
asID:                     262313
IP address blocks:        177.105.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:98:3a:54:a9:17:43:67:d3:8d:2a:3c:77:df:c1:23:08:28:4f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:04 2024 GMT
            Not After : Apr  2 21:14:04 2025 GMT
        Subject: CN=620879ECF6DB6B4DC400960B38B14B5ACA8A0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:ef:2c:41:29:0c:23:62:b7:19:2a:04:11:
                    e2:00:41:a9:7a:5f:46:a5:17:0c:2a:4a:7e:a0:8b:
                    66:19:87:12:13:9d:44:49:03:55:29:7f:3e:2c:e1:
                    1b:7b:13:0b:d7:37:3e:f6:5d:51:ed:d8:5f:8f:42:
                    c6:76:ca:cd:d7:e3:0d:d7:23:b9:13:5b:a5:12:67:
                    47:b9:7d:8e:28:ef:45:3e:f9:9b:25:75:6a:22:fe:
                    50:07:6f:1e:af:d0:cf:ef:11:a4:2d:ec:61:fa:87:
                    5e:ce:7e:9c:cc:af:4f:db:32:18:4a:39:62:a1:e8:
                    91:51:2e:b6:f3:61:26:e1:ad:d7:85:2d:5b:9b:7e:
                    36:1e:cc:a7:42:9f:47:11:50:0b:da:81:00:f4:7c:
                    38:94:fe:01:4a:d4:fc:07:09:10:64:a8:24:41:c1:
                    c3:0d:83:64:35:cd:5c:a7:86:3c:41:64:34:af:e9:
                    0a:35:d2:fb:29:1e:d0:be:01:36:a8:19:29:23:82:
                    a8:25:f1:bb:d0:a5:24:6a:03:b0:e6:61:8d:00:bc:
                    6c:79:56:87:db:27:6b:62:5d:ce:ef:f5:4d:22:5b:
                    97:fa:80:b8:9b:fd:c4:83:e3:7e:d3:c1:9e:f8:6f:
                    96:4b:e4:77:75:31:d5:35:11:be:72:37:5a:37:5a:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:79:EC:F6:DB:6B:4D:C4:00:96:0B:38:B1:4B:5A:CA:8A:02:13
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32312d3231203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:03:70:58:24:0a:74:a5:41:75:48:f5:ce:a2:c9:ed:48:d3:
         d6:0e:56:40:3b:e4:83:59:ef:8d:01:4a:3b:dd:4b:93:a6:63:
         32:18:9d:a3:f1:b8:d4:d2:c6:bc:38:4a:14:cc:44:58:11:85:
         f6:87:19:d6:38:fc:8c:6d:ef:4d:1f:cc:8f:77:fd:a4:8b:bb:
         46:fd:3e:75:6b:79:79:e0:b5:86:d1:6d:20:f8:f0:39:c0:e0:
         ca:c2:80:06:16:69:70:aa:48:57:d0:68:a6:f9:8e:20:0d:2f:
         74:97:a3:a5:09:f2:0b:cf:9f:b2:37:34:8e:d1:52:5c:1d:88:
         f4:b6:21:bf:2c:7b:d0:40:87:05:74:73:ce:b0:c1:3a:9f:3d:
         63:dd:38:75:ba:73:6d:0c:13:d2:79:ce:5f:92:04:34:05:0f:
         59:08:06:39:29:52:2a:04:c9:bd:83:14:31:72:e7:c7:e4:7d:
         46:90:ee:d6:c9:48:22:94:90:e8:b5:9b:80:63:d5:06:20:cd:
         9a:de:c1:ad:7e:d5:12:fc:74:09:29:59:83:66:ad:e7:ae:bf:
         6f:12:07:77:8b:95:b5:8f:a7:c9:43:a4:c9:6a:48:f2:f0:3f:
         02:3d:c3:37:dd:a5:8d:8b:f3:00:35:3f:28:95:50:6a:d6:11:
         ab:91:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org