Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138342e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          E8u5sJ3tmUeaLrMaUcUhevQ+/PTIQCSdMbYMKwwbwaw=
Subject key identifier:   02:87:1C:45:90:A8:0C:3E:8B:33:80:77:A3:2A:C4:3F:D4:B2:81:63
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       608D4E1FFA725AD7A45CD8D9E7110A11DC07B4E6
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:13 +0000
ROA not before:           Tue 25 Jun 2024 15:16:13 +0000
ROA not after:            Tue 24 Jun 2025 15:21:13 +0000
asID:                     28306
IP address blocks:        177.91.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:4e:1f:fa:72:5a:d7:a4:5c:d8:d9:e7:11:0a:11:dc:07:b4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:13 2024 GMT
            Not After : Jun 24 15:21:13 2025 GMT
        Subject: CN=02871C4590A80C3E8B338077A32AC43FD4B28163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:ff:31:6e:98:5b:41:18:73:46:5a:bb:93:
                    3f:4c:12:0d:f6:a1:73:5f:0c:b1:37:59:05:0d:fa:
                    76:9c:84:3f:44:27:f5:a5:1e:73:17:cd:9e:72:47:
                    8d:f7:3b:b1:92:f4:8d:60:19:99:0c:17:ba:7a:19:
                    03:bf:3e:6c:d5:df:4d:b7:e6:88:f7:df:9c:25:f8:
                    6b:c4:35:02:b7:25:cb:87:6c:5c:2e:89:86:2c:31:
                    f8:95:be:4b:5f:3a:d6:85:ff:3f:6a:a4:d1:02:62:
                    58:b5:35:90:63:d4:19:5e:ed:43:84:6e:03:73:02:
                    fb:b2:d6:ac:aa:f6:2d:47:31:e2:d4:c2:8b:f1:1f:
                    e0:35:6e:c9:3d:90:a8:d3:40:6d:ab:97:80:e2:18:
                    84:7e:c6:2b:11:60:2e:9b:97:03:2b:5d:98:81:60:
                    76:75:cb:0f:7d:35:75:0f:db:a2:c0:5e:3f:2b:d6:
                    b5:98:2a:2b:a2:ac:5d:51:83:1b:40:c0:54:f4:35:
                    b5:1d:b1:1d:95:d6:b1:69:3f:1b:f3:be:50:1b:da:
                    db:f4:b0:ae:a5:ec:47:51:d7:f0:50:c6:89:25:ee:
                    a4:23:09:60:74:99:5c:72:62:7d:58:77:9d:7a:34:
                    2e:58:75:14:3e:0d:e5:a8:aa:3e:65:7d:6e:35:9a:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:87:1C:45:90:A8:0C:3E:8B:33:80:77:A3:2A:C4:3F:D4:B2:81:63
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138342e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:74:9d:8a:75:91:2c:47:96:18:3e:4e:0c:cb:52:2b:37:29:
         66:9b:f3:82:f8:a9:37:15:c8:2d:48:98:06:b9:00:30:ac:46:
         10:a8:16:87:51:fb:f6:1f:a0:a3:f8:6d:4d:c3:b8:f7:64:87:
         6e:86:fe:4f:4e:07:e0:4b:61:cc:e0:4e:e1:bf:ff:70:ff:33:
         8a:a1:5d:e9:c4:ce:73:c6:fb:d2:34:c8:3f:6b:a7:86:2d:08:
         af:97:27:f2:28:f7:dc:0f:66:c1:e9:da:1d:f5:ba:c0:b0:86:
         d0:21:f4:36:90:48:58:52:33:a9:47:bd:59:c7:be:22:33:c6:
         3d:c3:04:3d:c1:b4:b0:2c:ba:99:07:88:b9:19:2e:02:b4:16:
         b4:89:5d:23:ba:26:ef:a4:20:f1:2d:67:7a:50:d2:95:16:4d:
         02:47:aa:1b:04:4d:94:02:c9:25:f4:07:2a:25:0f:1d:8a:a7:
         1d:c0:f5:3c:fe:71:96:a8:8f:1c:78:53:8a:61:67:fc:99:87:
         ca:06:20:c2:38:54:4d:ea:66:b5:d8:3d:64:3b:4b:dd:9f:0b:
         1c:cf:d2:7a:92:76:46:cd:f8:e9:1a:6d:d8:49:ce:25:3d:98:
         6e:d8:5e:cb:aa:28:0a:0f:9d:ef:62:81:4b:52:a2:c5:d9:2d:
         d8:38:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:34 2024 by rpki-client on console-ams.rpki-client.org