Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32312d3231203d3e203238333036.roa
File:                     3137372e39312e3138342e302f32312d3231203d3e203238333036.roa (raw, json)
Hash identifier:          urlUmTMtm1Mi+N+jscyGu/CXrRnkMGJKTuIxuGQeEr8=
Subject key identifier:   F3:A3:63:FA:36:88:38:7A:5C:ED:77:15:47:B6:49:54:27:82:CB:BD
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       29C6EA160108403F2BE0CFCB735721B98A0A5A06
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32312d3231203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:18 +0000
ROA not before:           Tue 25 Jun 2024 15:16:18 +0000
ROA not after:            Tue 24 Jun 2025 15:21:18 +0000
asID:                     28306
IP address blocks:        177.91.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c6:ea:16:01:08:40:3f:2b:e0:cf:cb:73:57:21:b9:8a:0a:5a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:18 2024 GMT
            Not After : Jun 24 15:21:18 2025 GMT
        Subject: CN=F3A363FA3688387A5CED771547B649542782CBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:e3:71:85:97:7a:5e:f9:ee:23:ff:3e:22:
                    92:3f:65:d2:38:82:3e:62:93:8c:03:9c:7f:e9:62:
                    24:2d:bb:07:25:c7:de:15:fe:9d:7b:8b:0e:99:56:
                    e0:3e:32:c0:07:16:0c:17:fd:9d:05:1e:91:c9:6b:
                    17:49:e5:0d:b9:65:95:14:58:2c:61:7e:53:db:4d:
                    70:dc:77:b8:10:98:1a:e7:ff:b8:03:32:86:f9:12:
                    35:dd:b4:3b:76:f3:9e:d2:2a:57:be:dc:b5:81:52:
                    8a:13:cc:ae:34:47:0a:2c:c4:8d:f5:e3:2c:b1:ea:
                    e8:fd:16:f4:77:28:e8:2e:ef:c9:bf:59:35:7c:ef:
                    dc:35:b2:2e:82:d1:ff:b9:c8:bd:fe:8d:ae:48:f3:
                    05:ea:1e:33:2a:ba:2a:57:8d:0c:65:d6:20:37:25:
                    47:e7:5f:4c:97:b3:35:2f:e7:b9:44:15:8d:3c:50:
                    90:c2:45:92:1c:dd:8a:04:e6:95:fc:6a:87:2d:e5:
                    ae:68:a9:4f:30:8a:04:73:95:9a:f8:87:ba:b7:8e:
                    a2:fb:55:5e:a4:30:b8:2c:62:1b:e3:46:aa:2b:ae:
                    1c:de:22:12:10:e7:db:52:46:42:17:5e:36:10:55:
                    19:ce:17:f0:8c:52:68:43:2b:fc:19:98:12:1a:6c:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:63:FA:36:88:38:7A:5C:ED:77:15:47:B6:49:54:27:82:CB:BD
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32312d3231203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:cd:84:d0:a1:71:65:32:3c:8e:5f:b6:5c:6b:45:63:0c:
         13:de:57:b1:30:5b:7a:0d:ba:23:3b:ff:00:a4:de:86:59:b9:
         8f:57:63:53:cb:a7:cb:83:2b:f6:19:d9:44:10:68:2e:d6:1d:
         ad:04:4e:35:c8:55:a5:fe:41:37:90:b3:bd:7c:55:9e:97:c7:
         cf:ae:3b:e0:05:18:ea:ce:06:00:aa:7d:a5:07:44:fc:29:c2:
         67:ad:07:ba:55:66:9d:ba:3c:98:88:56:07:af:4a:f9:43:67:
         8c:ec:e3:b8:c6:5d:ca:91:db:3e:b7:38:d9:c8:14:77:71:95:
         0a:04:7c:c2:ed:65:19:89:c9:cc:89:64:0a:37:48:46:32:17:
         b7:cd:2d:be:b8:76:f1:3a:72:f3:a8:16:a2:0c:e4:c2:27:03:
         c4:06:56:33:48:04:4f:d4:4d:53:29:ae:56:98:d7:5e:b6:06:
         88:2d:ec:51:41:e9:08:a7:72:b1:cc:87:82:32:07:87:4a:b8:
         55:b1:a4:0f:fc:d7:e9:a8:fb:eb:be:e4:b4:b0:d4:6c:56:92:
         8d:cd:82:35:7a:8a:a1:5e:92:37:93:15:1f:d3:50:4b:6d:c6:
         49:60:36:77:1f:7b:61:c3:ac:61:75:07:93:7d:86:25:33:19:
         04:ee:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:33 2024 by rpki-client on console-fra.rpki-client.org