Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233312e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233312e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          Wv2S8pg7ZKLeVrSDw8DE30OIIHUsfzrVltPlqETOHn8=
Subject key identifier:   69:F9:E5:DC:2B:B6:57:70:6B:7C:40:06:E5:8B:86:49:1A:12:03:D5
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       2B508C4CB94536338926551DE60E4753FD55FF93
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233312e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:06 +0000
ROA not before:           Wed 03 Apr 2024 21:09:06 +0000
ROA not after:            Wed 02 Apr 2025 21:14:06 +0000
asID:                     262313
IP address blocks:        177.105.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:50:8c:4c:b9:45:36:33:89:26:55:1d:e6:0e:47:53:fd:55:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:06 2024 GMT
            Not After : Apr  2 21:14:06 2025 GMT
        Subject: CN=69F9E5DC2BB657706B7C4006E58B86491A1203D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:6f:ad:5f:b5:20:96:a8:2a:b3:f2:0d:8d:
                    48:ce:61:b8:41:f0:b1:f9:2a:5c:d8:89:2c:ab:22:
                    e0:cd:30:85:66:cc:29:44:4e:47:f3:91:03:7b:9c:
                    36:37:d3:98:0f:fc:93:4b:86:cf:9e:33:1c:d1:32:
                    be:e1:37:bd:e7:4e:ca:b1:19:ff:52:4e:40:3b:88:
                    73:0a:54:91:f2:4d:8c:90:43:e1:df:a5:87:a2:8b:
                    bd:3e:77:ec:8f:a6:c8:5d:3a:6b:de:e1:62:21:f1:
                    25:c2:9f:f9:79:ce:cb:f2:e3:86:ad:66:dd:38:58:
                    ec:d0:66:aa:cd:0c:28:9c:27:1b:c5:2a:d0:f7:f4:
                    43:17:55:80:38:83:82:06:9c:91:c8:6f:72:2e:f3:
                    24:78:11:13:4f:5e:c1:6d:37:d8:84:18:7f:19:1d:
                    3c:b6:b4:e3:46:45:12:30:85:68:5b:53:6d:bc:21:
                    df:a6:bb:e0:ca:ef:93:83:97:4c:ff:6d:7c:68:6b:
                    b0:d4:5c:ae:a8:2d:06:80:b7:ab:62:27:e8:ff:5d:
                    bc:ed:c8:d5:12:85:fa:90:d3:66:c4:6f:d6:4f:0f:
                    c6:b0:69:4d:20:cc:c6:55:6e:1b:8d:20:82:71:b8:
                    8e:a0:ac:01:9d:43:d3:80:29:d4:ef:7d:d9:48:ff:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F9:E5:DC:2B:B6:57:70:6B:7C:40:06:E5:8B:86:49:1A:12:03:D5
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233312e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:47:40:07:a4:1b:bd:80:32:8d:b1:f7:d2:49:a8:87:01:
         e7:0e:3e:21:7d:07:bc:36:5d:96:4c:22:9c:9f:40:22:85:2b:
         53:6f:f1:0e:85:43:14:fd:09:6b:c1:98:07:67:34:6a:c2:60:
         19:01:bb:ff:4e:d0:9a:ff:92:83:1a:ce:a3:0e:ed:6d:65:de:
         a1:6a:be:55:5a:f1:9e:47:61:45:02:e7:73:a8:9e:e6:6e:ca:
         3a:19:8b:57:02:fc:78:d8:32:a3:d8:b7:37:73:83:75:ed:d1:
         ec:e9:c9:f7:55:2f:ae:ab:04:1d:c4:0d:45:46:25:0b:b8:19:
         0c:cb:30:6a:f3:27:c3:70:2a:c3:44:e9:1e:dc:00:de:3d:7d:
         5e:65:69:70:90:13:51:d3:bf:31:55:5a:0e:be:07:07:7d:b4:
         69:87:f2:f8:65:95:7d:74:9b:8b:bb:e7:3c:f5:3a:92:65:8f:
         e1:6d:45:0c:1f:9e:ee:ab:51:33:22:d9:4b:5a:1e:2a:6f:b7:
         c0:f4:8f:f2:6e:2f:79:5a:95:8b:11:74:c7:e9:6f:9e:9c:94:
         9d:11:a7:21:51:8b:7c:bd:1c:ab:a1:36:15:22:ee:13:a0:70:
         2f:6f:4e:f8:c3:f7:1b:c2:64:f9:31:06:55:c6:00:98:52:e1:
         ea:38:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org