Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233352e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233352e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          qfaJ4vWlSRT67iQ7UZyBAjQkFaJ2mza+pafkco9GteM=
Subject key identifier:   0E:9F:58:BB:E8:D3:40:7C:B4:8A:04:87:99:8A:6A:D3:73:C4:A2:CF
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       02DFB011D4FCA768450BB3D611EB1CFEB94446D0
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233352e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:04 +0000
ROA not before:           Wed 03 Apr 2024 21:09:04 +0000
ROA not after:            Wed 02 Apr 2025 21:14:04 +0000
asID:                     262313
IP address blocks:        177.105.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:df:b0:11:d4:fc:a7:68:45:0b:b3:d6:11:eb:1c:fe:b9:44:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:04 2024 GMT
            Not After : Apr  2 21:14:04 2025 GMT
        Subject: CN=0E9F58BBE8D3407CB48A0487998A6AD373C4A2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:63:21:96:be:2a:4e:d9:8e:2c:c4:9e:21:
                    0e:ce:15:a7:a5:9d:4f:8e:18:d4:b0:7a:0c:1b:8a:
                    01:2b:0c:e7:d0:86:7e:7c:4d:19:cc:d9:92:df:5e:
                    6c:0c:8d:4e:eb:1e:56:42:9c:7c:d4:08:5a:0e:e6:
                    1b:a0:fd:53:98:13:ad:bd:dd:be:16:38:d0:c3:36:
                    26:0a:d2:f9:63:a6:6f:b8:57:e5:05:22:03:2f:38:
                    70:2a:2e:f2:c0:44:e6:67:3d:a8:00:b9:ed:3f:a2:
                    ad:22:2a:7e:38:d0:2f:ae:c2:9d:98:e3:e6:05:9a:
                    90:9b:53:d1:6e:a3:31:b3:c4:a0:04:1b:07:8a:f1:
                    5a:e1:f2:3c:b5:04:f7:6c:07:7f:18:6a:a9:05:fb:
                    54:1c:51:da:1e:61:ac:73:2d:29:89:44:16:4b:00:
                    dc:1f:67:68:be:c2:61:97:94:97:e8:67:7a:63:10:
                    aa:c5:60:92:e6:b5:e4:ee:a0:39:e9:23:9c:a9:0d:
                    54:f8:5a:f5:c3:3e:e3:fe:90:49:40:f0:36:1e:bc:
                    60:4f:aa:12:a1:e7:fb:c6:08:52:55:0c:cb:9f:14:
                    35:6d:d4:58:92:aa:35:e8:fd:20:91:44:91:29:19:
                    a2:fb:03:93:3e:97:c0:4b:d4:d2:b4:5c:da:cc:95:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:58:BB:E8:D3:40:7C:B4:8A:04:87:99:8A:6A:D3:73:C4:A2:CF
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233352e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:0e:b9:27:f0:c3:14:91:b0:eb:ae:ec:f4:92:47:d5:eb:
         99:dc:3b:03:ef:3e:7d:ff:03:52:5b:e6:6c:2b:0d:e6:aa:15:
         8b:c6:75:05:64:50:57:b4:ef:c2:bf:d8:49:b0:c9:3f:50:cf:
         51:e0:4f:f3:ce:8a:f0:4d:6c:ce:53:11:0c:52:69:cf:2f:0b:
         0e:34:53:e7:5c:2f:71:27:ff:82:31:74:d9:50:a1:80:ab:65:
         f0:85:5b:3b:07:4f:5b:bb:f0:bb:ce:13:08:2f:d7:cc:55:26:
         ce:27:fb:5f:fc:f3:37:12:18:a3:6e:fb:e5:17:86:bb:31:43:
         1b:0a:eb:54:53:ed:69:0d:47:7e:6d:68:14:a2:d8:39:f3:c2:
         3d:95:66:f6:a7:0c:8a:a9:62:59:7c:34:3d:fd:7b:e5:2d:ff:
         55:6e:d6:44:c5:a4:33:e3:76:9e:84:da:53:17:46:f4:cb:f1:
         87:7b:27:9d:e7:20:0d:c6:d3:7a:c7:f4:66:f4:47:44:98:3e:
         a8:a4:0f:bf:2e:cf:ac:98:2d:24:72:51:10:c2:6e:c2:fc:f1:
         3a:5e:4d:0e:b4:15:df:77:02:71:7e:49:c7:47:13:eb:92:0e:
         6e:26:75:89:8a:f2:ec:30:8d:56:1a:1f:ee:8f:c6:c9:d3:93:
         be:0d:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org