Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32332d3233203d3e20323632333133.roa
File:                     3137372e3130352e3232362e302f32332d3233203d3e20323632333133.roa (raw, json)
Hash identifier:          0dxTYP6N1g/EooNWZgC0Ge9Kdy8b0AWTAsL7JJBCFCE=
Subject key identifier:   BA:EE:9D:84:F4:88:B5:73:B6:A1:DF:46:97:0F:69:A8:5A:8B:7C:CC
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       4A376AC2CDBE96EE17F81BF97D0D7A5870730A08
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32332d3233203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:06 +0000
ROA not before:           Wed 03 Apr 2024 21:09:06 +0000
ROA not after:            Wed 02 Apr 2025 21:14:06 +0000
asID:                     262313
IP address blocks:        177.105.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:6a:c2:cd:be:96:ee:17:f8:1b:f9:7d:0d:7a:58:70:73:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:06 2024 GMT
            Not After : Apr  2 21:14:06 2025 GMT
        Subject: CN=BAEE9D84F488B573B6A1DF46970F69A85A8B7CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:7e:f6:ea:30:5b:ff:9f:1a:17:1f:e0:a2:
                    71:ea:b4:05:c4:39:73:2a:b8:64:21:2a:ac:85:f1:
                    04:e9:12:5a:a9:a9:2f:08:72:f6:af:06:3d:89:85:
                    13:40:9b:c5:a0:2f:73:8b:78:5e:15:3c:ed:fa:b4:
                    c5:8f:50:b3:65:98:a2:27:be:fe:9a:61:6b:f1:92:
                    51:11:42:6e:c8:6b:bc:8d:69:99:a3:35:1a:c6:25:
                    80:b7:0e:21:a9:d8:f7:bc:66:29:64:3a:6b:73:4f:
                    bc:1b:e3:ef:b9:94:de:92:1c:25:2f:cd:c7:80:36:
                    ac:89:be:47:5d:bf:36:89:3b:85:9e:fc:7f:b1:8f:
                    30:e0:c1:58:64:62:84:ab:03:c2:49:de:c8:f1:ee:
                    2f:6b:ee:c6:45:e0:3d:0a:cc:9b:8b:fc:a1:35:6e:
                    c7:ab:f3:b9:49:fc:5e:39:58:4a:e0:17:05:56:a7:
                    08:3f:dd:30:dc:01:e3:f9:a8:a6:1b:0f:8f:75:30:
                    ab:0f:45:58:26:d1:c8:f6:36:66:d4:5b:a6:9e:fb:
                    91:4a:c6:a5:17:52:35:a4:89:01:6d:80:0c:69:89:
                    22:e1:79:9d:9b:7f:17:ca:3b:a5:e6:94:a1:ee:73:
                    54:90:12:67:eb:0e:de:d0:5c:12:6f:ce:b6:ab:6f:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:9D:84:F4:88:B5:73:B6:A1:DF:46:97:0F:69:A8:5A:8B:7C:CC
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32332d3233203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:29:da:49:ff:2d:7e:f8:19:16:03:d8:84:aa:58:aa:66:
         41:b4:c4:0a:08:a2:40:33:8a:aa:66:17:fb:da:98:7e:4e:d4:
         b6:ad:8b:b4:ae:f8:51:61:9e:6f:8c:0b:d0:82:e5:56:dc:13:
         c8:be:16:ea:86:85:16:c7:6e:38:ec:c0:d5:01:47:f9:fa:7a:
         e6:94:c3:94:dd:13:34:fc:c6:16:5f:16:27:c7:79:03:5f:b1:
         16:49:b9:15:85:bb:c5:19:7e:a1:7b:ba:17:b5:43:50:7c:d7:
         8c:9e:0a:ce:c5:ad:d0:fb:fd:25:b3:e0:24:fa:91:4d:00:8d:
         ef:77:b8:ae:14:5c:65:ef:95:f6:31:27:88:d3:92:0b:26:e3:
         51:b8:78:68:f6:13:1f:ac:07:1a:e3:a2:a1:d4:16:4d:95:59:
         85:44:11:82:c4:40:64:1a:8c:6c:79:64:09:66:9a:d5:26:d5:
         ec:e9:3e:63:5e:30:97:05:ae:82:dd:3f:41:7e:c1:72:0f:ca:
         d4:97:ef:03:f7:e7:9f:31:e4:bc:88:98:27:66:6b:da:97:db:
         ef:85:05:fc:d5:4c:30:4b:84:c0:f8:ab:19:9f:0f:fa:f7:e2:
         01:3d:c0:02:8e:fb:9e:b1:93:65:24:39:c3:fa:25:18:c7:9c:
         c4:63:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org