Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138312e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138312e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          tPcw6qDkhpoZxSLriq/Y+heGCM+Vyh4/XY9Mi0l6LxU=
Subject key identifier:   5D:A0:40:9C:06:54:83:82:3C:82:EE:2D:C3:A2:78:EA:39:5E:02:15
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       37F4E3B541B88742A15DF56299EC8A8F21AC0AC2
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138312e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:10 +0000
ROA not before:           Tue 25 Jun 2024 15:16:10 +0000
ROA not after:            Tue 24 Jun 2025 15:21:10 +0000
asID:                     28306
IP address blocks:        177.91.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f4:e3:b5:41:b8:87:42:a1:5d:f5:62:99:ec:8a:8f:21:ac:0a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:10 2024 GMT
            Not After : Jun 24 15:21:10 2025 GMT
        Subject: CN=5DA0409C065483823C82EE2DC3A278EA395E0215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:98:7c:c3:1d:a8:54:9b:0a:8a:a7:36:01:
                    d5:fb:76:b3:60:a5:f1:b3:40:67:d0:b8:16:a3:fc:
                    0f:86:1b:16:95:e2:7a:f3:e9:c1:bd:12:9b:76:ec:
                    71:91:16:4b:3b:84:19:3f:a5:be:25:b2:0b:db:bb:
                    68:1e:c3:e2:de:31:68:3b:9c:d5:1f:6e:24:f8:fe:
                    5c:23:94:b9:51:83:46:37:fa:c7:7d:a3:4a:31:36:
                    70:f8:54:68:33:cb:23:c4:9c:6f:2c:44:2f:0e:8c:
                    dd:57:96:40:d1:7b:ab:dd:0a:bc:81:75:09:2a:ec:
                    09:02:0b:6c:89:be:28:57:5f:d2:8d:0c:8f:c2:c4:
                    8b:0b:c9:86:d4:23:41:7a:b6:4b:aa:4b:8d:92:50:
                    c5:0b:f0:62:d0:62:74:72:2c:3c:ad:c5:14:2e:a1:
                    c0:68:81:1a:b0:91:48:70:82:d0:99:35:cd:b0:6f:
                    b1:bb:74:1f:a5:a4:13:55:c4:97:2d:85:4d:88:b3:
                    c1:e8:88:cd:5f:f8:39:1e:f6:b6:66:c9:7c:f9:0e:
                    c0:27:18:a8:43:4b:5e:b4:f3:cd:40:18:21:c1:fd:
                    90:ab:dc:66:87:11:3c:68:02:cc:1a:21:82:a3:a2:
                    59:f0:6d:84:4f:04:bd:38:7a:fa:c2:e1:fa:71:87:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:40:9C:06:54:83:82:3C:82:EE:2D:C3:A2:78:EA:39:5E:02:15
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138312e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:ba:21:91:26:f7:0f:ee:3a:f5:a4:9a:4b:08:6a:c1:e8:
         98:cd:cf:5a:1b:86:85:2e:5b:51:15:bc:3d:eb:07:2a:03:e2:
         63:3b:cd:c7:5a:f8:8f:45:45:c5:30:95:21:10:f2:51:c6:6a:
         34:ea:3b:ce:66:e9:01:05:be:0e:6f:b3:91:c1:e3:07:10:3c:
         d5:10:7c:df:31:66:c2:0a:8b:32:15:0f:4b:db:f3:74:f2:08:
         8e:0b:1f:e3:0d:b2:b6:af:82:89:cb:3c:81:53:0a:49:7d:53:
         0b:1f:58:87:53:c7:85:cf:a7:e1:de:9c:d6:bd:12:c6:7f:b9:
         25:d6:06:a5:f3:da:09:c4:28:08:4e:86:ab:5c:2c:34:6e:7a:
         ce:f0:74:5d:0f:5c:16:9b:86:b3:37:86:ab:71:98:25:68:bc:
         f3:38:e1:c5:43:b7:d9:6d:22:42:35:8f:6c:81:d7:4e:56:1a:
         3f:26:4a:2c:24:68:48:57:98:2e:34:df:af:2d:b9:f8:18:33:
         19:e1:3b:0a:d9:e4:15:20:37:08:9b:83:f7:b3:91:5a:8e:fe:
         1c:fd:cd:bf:99:79:38:41:d8:f0:87:d4:7a:d6:a1:3d:7b:93:
         62:71:ac:8a:6f:fc:af:b4:01:30:83:c1:59:d1:41:52:3f:a6:
         a4:63:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org