Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232392e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3232392e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          OPh/IJLSfcn4aes6F/2YsjtNAr6sB2zQbGO0OqD7KgY=
Subject key identifier:   69:C4:26:32:19:E5:84:BD:6F:EF:01:0B:C5:DF:83:B4:52:57:D2:60
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       5CF7CA1BE3637893C72E0398413015D8595FBE33
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232392e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:05 +0000
ROA not before:           Wed 03 Apr 2024 21:09:05 +0000
ROA not after:            Wed 02 Apr 2025 21:14:05 +0000
asID:                     262313
IP address blocks:        177.105.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:ca:1b:e3:63:78:93:c7:2e:03:98:41:30:15:d8:59:5f:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:05 2024 GMT
            Not After : Apr  2 21:14:05 2025 GMT
        Subject: CN=69C4263219E584BD6FEF010BC5DF83B45257D260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:53:be:74:8a:2c:79:2e:34:8d:25:44:d8:
                    3b:e7:f2:4f:b7:a0:35:5f:59:d7:ff:1c:67:54:7f:
                    71:8e:23:d8:08:54:9d:97:9b:03:74:1b:fa:49:57:
                    3c:77:1f:20:b8:fa:85:40:77:3d:c9:6d:d3:7e:28:
                    6b:56:e5:04:cd:56:81:c2:b0:d1:66:a9:a3:74:10:
                    95:e7:a6:97:5a:16:bd:dd:19:f0:27:67:4d:71:dd:
                    5e:79:bb:11:2c:84:5b:ee:df:ea:bc:b9:2d:e4:8f:
                    23:c6:16:de:b1:96:15:8f:1f:89:eb:1d:7a:29:61:
                    df:03:f1:3c:4c:1a:f2:27:d6:12:a1:91:da:06:ca:
                    38:d2:82:ef:08:3d:cd:b7:1c:13:c6:f2:71:76:36:
                    da:22:9f:17:d5:c4:6d:80:f2:69:cb:9f:d4:1c:be:
                    2d:12:7d:3a:25:90:e1:b3:39:c0:e9:81:59:e5:26:
                    e5:f2:cd:c9:ab:e1:9a:14:00:2b:92:db:e7:65:a2:
                    8a:05:c7:6e:52:f0:74:52:19:38:78:94:7f:75:26:
                    90:7d:a4:2f:30:e3:40:66:56:ab:7b:7c:7d:77:dc:
                    ed:71:30:be:59:b5:17:61:29:08:a1:4d:61:c4:f8:
                    8d:ca:0b:a8:71:41:f0:0d:13:25:15:d9:e7:34:fb:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:26:32:19:E5:84:BD:6F:EF:01:0B:C5:DF:83:B4:52:57:D2:60
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232392e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:b3:eb:9b:1d:b2:c8:2b:a5:4f:91:c6:11:a3:56:47:ce:
         28:22:37:7e:73:81:6d:3f:67:4f:6f:44:a6:b8:07:7c:85:d5:
         6b:02:b8:8f:16:15:a9:87:d1:0f:7a:fb:73:a2:00:31:35:77:
         44:ba:30:e9:49:fb:c2:33:db:15:3d:c5:c3:ea:cb:fb:30:df:
         27:eb:dc:dc:6e:85:7c:af:08:c5:06:a8:e8:ed:fd:17:a1:75:
         a3:7c:ed:cf:a3:61:c7:eb:d2:2e:11:0c:ba:e1:fc:39:6c:e1:
         d7:7b:45:a0:6b:c2:74:a0:99:f6:72:b9:af:b7:49:a7:62:f0:
         46:77:9f:42:31:0a:94:86:9d:62:ab:3e:3e:79:f2:21:7d:d9:
         e2:76:c2:a8:01:74:34:ce:fa:68:64:b8:90:08:6d:66:cf:4c:
         59:f7:d5:a1:ac:87:b8:d5:9c:5f:26:31:b3:7a:3a:ec:f0:c0:
         7c:7e:db:60:14:f1:c9:d4:2c:39:0b:a1:37:86:77:c2:12:4e:
         29:1a:32:86:46:06:fd:54:4e:e9:bb:f5:c0:2d:b8:35:7e:cf:
         b0:83:75:3a:15:f1:42:85:2f:d6:b1:82:d8:b6:44:94:77:7e:
         b3:30:e9:23:57:43:7b:de:36:13:f4:07:5c:6e:82:93:94:64:
         38:bc:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org