Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32322d3232203d3e20323632333133.roa
File:                     3137372e3130352e3233322e302f32322d3232203d3e20323632333133.roa (raw, json)
Hash identifier:          JgKum/8QLvHAl/bwppJQxJYuqu50m6AZr+SbbOm01u8=
Subject key identifier:   08:7D:58:CD:40:CA:D6:21:EC:78:46:56:EC:C0:97:14:83:94:02:D2
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       72AF368AD302A5C2B3E2711F9372F2A0093E4C4A
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32322d3232203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:07 +0000
ROA not before:           Wed 03 Apr 2024 21:09:07 +0000
ROA not after:            Wed 02 Apr 2025 21:14:07 +0000
asID:                     262313
IP address blocks:        177.105.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:36:8a:d3:02:a5:c2:b3:e2:71:1f:93:72:f2:a0:09:3e:4c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:07 2024 GMT
            Not After : Apr  2 21:14:07 2025 GMT
        Subject: CN=087D58CD40CAD621EC784656ECC09714839402D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:75:e9:70:2a:12:92:50:95:a6:48:9e:48:
                    1b:90:7d:c1:e9:cc:58:71:1b:c5:41:c0:b8:1d:91:
                    50:55:4e:b6:22:6a:ef:99:42:e4:48:c5:8c:e6:57:
                    cc:22:a1:3f:07:d5:9d:8b:26:4e:39:0e:0d:7c:2c:
                    3c:71:f7:e7:c5:72:7f:e3:2d:d3:06:c9:f5:14:76:
                    ed:f9:0a:ec:87:c1:e7:ac:48:72:0f:d4:ad:d2:5c:
                    f2:e1:8d:b5:49:c8:14:b5:d6:d7:73:90:55:60:46:
                    c1:e5:b0:3f:b3:63:4e:c6:45:bd:c2:ea:fe:1c:80:
                    49:f4:ea:66:e5:71:bd:99:48:bb:b6:1a:4b:fe:c0:
                    d7:89:23:f2:79:b0:33:64:7e:ff:01:dc:c6:aa:31:
                    51:a6:f2:f9:a8:13:15:3a:f4:21:f9:ff:28:2b:64:
                    b2:49:d7:a6:45:f3:8c:f3:ae:49:63:f7:70:6d:6c:
                    aa:12:eb:56:cf:95:63:f3:ba:c4:11:83:b8:75:bd:
                    55:ea:fa:67:cc:e4:5f:41:45:0d:85:34:22:c5:ef:
                    48:eb:46:1d:c1:2e:29:55:21:03:29:c9:20:86:03:
                    52:a1:f9:b2:55:13:27:9f:9b:54:28:1a:df:2f:24:
                    f5:a0:de:4f:f8:1d:e5:fa:a8:5c:f4:b3:cf:a4:c7:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7D:58:CD:40:CA:D6:21:EC:78:46:56:EC:C0:97:14:83:94:02:D2
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32322d3232203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:97:74:e5:32:41:d9:34:14:e1:37:01:78:ec:b2:88:c5:1f:
         5c:7e:f4:92:76:49:89:e5:3b:6b:fe:5e:e0:dc:9e:81:19:72:
         09:fc:c0:53:15:98:06:d7:32:cb:ea:09:3f:c3:ce:3f:4f:59:
         b2:24:98:d5:c2:30:e7:ac:c5:83:e8:13:12:6d:e5:a7:53:f0:
         4e:9d:4e:bd:6d:4b:d7:0a:1d:f4:bf:69:e4:d2:2f:77:9d:f0:
         c1:f0:00:4b:23:7c:cd:7e:8f:7c:27:ce:3d:94:c1:e9:1d:3a:
         4f:32:9e:c5:6b:5c:db:c5:0c:d8:ec:b0:7a:db:83:f5:10:5c:
         34:8c:8e:6b:f5:de:d0:b0:85:2b:57:ec:e5:f5:0f:36:ab:69:
         5e:7f:80:b0:a5:76:61:a0:13:1a:79:27:11:56:15:30:e9:7c:
         30:25:21:13:3b:6c:c0:3c:a2:c6:a3:5f:69:8d:27:4b:2d:c8:
         e7:94:2c:16:80:a9:14:47:6a:78:a0:47:3b:e1:1c:c5:e7:5e:
         97:2c:f8:05:ee:e8:78:c6:86:3e:d9:ca:e8:e0:69:9a:a9:fa:
         c5:80:da:e6:8b:af:64:98:a5:99:cf:8a:af:c0:3c:5f:a2:d9:
         81:92:2c:14:40:31:30:ad:02:f5:25:ee:47:64:a6:14:49:ff:
         a9:2e:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org