Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138382e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138382e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          uMCrp7TOHxIzBO8qo81S5XmQglwBOjlvpcbbSteBJmE=
Subject key identifier:   9A:DD:62:3C:FF:3A:14:C5:CC:FB:4A:C7:E1:65:78:DB:ED:C5:C4:CA
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       54A96F36C15EFDAC3708EC6199CA2A20039F3601
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138382e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:11 +0000
ROA not before:           Tue 25 Jun 2024 15:16:11 +0000
ROA not after:            Tue 24 Jun 2025 15:21:11 +0000
asID:                     28306
IP address blocks:        177.91.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a9:6f:36:c1:5e:fd:ac:37:08:ec:61:99:ca:2a:20:03:9f:36:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:11 2024 GMT
            Not After : Jun 24 15:21:11 2025 GMT
        Subject: CN=9ADD623CFF3A14C5CCFB4AC7E16578DBEDC5C4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:8a:e1:57:71:8e:de:ff:fa:37:4d:74:9e:
                    d2:81:b5:05:0e:1a:78:3b:29:5e:aa:de:94:35:4e:
                    1e:17:9d:47:f2:a1:e5:25:2f:76:a6:b5:ca:9b:f7:
                    88:da:f0:cf:4c:ee:32:06:0a:3a:e4:aa:da:87:fa:
                    ed:89:f2:e2:fb:14:a1:5d:d1:be:5b:93:be:f4:79:
                    3f:f7:90:33:c3:dd:bc:9e:86:35:32:5d:56:bb:cd:
                    17:89:ee:13:bf:d0:24:cf:a2:ba:03:14:bd:d3:6f:
                    0b:41:b1:b7:65:45:53:7c:4b:21:2b:e1:be:d4:b6:
                    f4:ea:45:e0:0a:7c:67:98:44:c5:a7:be:0c:0e:7a:
                    96:3d:42:86:db:6c:ed:0b:09:a8:5f:f6:21:15:d4:
                    66:29:a1:57:e0:8d:c2:da:0f:16:91:7e:43:be:d3:
                    e2:6f:f1:58:53:fd:db:ce:33:28:5c:a5:bc:7e:fe:
                    c6:4f:0c:df:a6:ba:5e:17:d2:e8:96:77:ab:17:ed:
                    81:19:d0:03:a3:01:df:e8:19:fe:38:81:50:e9:92:
                    dc:bc:a7:12:8e:91:6c:16:af:ec:ca:d7:52:b7:98:
                    6f:07:c3:e9:af:3b:29:61:bf:ca:62:2f:64:4e:06:
                    ca:40:d7:49:e3:a3:48:46:6d:a3:94:02:44:f1:78:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:62:3C:FF:3A:14:C5:CC:FB:4A:C7:E1:65:78:DB:ED:C5:C4:CA
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138382e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:33:f5:c4:1d:12:f7:7d:5a:cd:49:50:53:56:2f:ff:5c:d2:
         51:63:36:17:58:14:ac:6a:1a:20:db:47:c2:ce:ba:99:1b:5e:
         ef:04:de:3f:77:e4:37:b6:a0:78:ea:2f:90:dc:0a:09:2d:d2:
         83:5c:c2:9b:d0:74:8a:2c:8f:53:ad:fb:44:2b:80:73:6e:10:
         52:f2:68:2c:80:6b:94:9b:62:c4:f4:44:e4:18:2a:22:f6:46:
         33:a3:da:ab:ef:c5:58:ab:29:4b:00:ee:c8:c2:41:ed:29:15:
         d3:77:8b:e4:e5:d2:80:d1:21:c4:4b:36:a5:8a:b8:db:49:a6:
         ea:fb:6d:f6:cc:4e:74:1c:a0:cb:14:2a:82:0a:37:79:3b:83:
         0f:24:3d:f6:af:1f:83:ae:13:ed:d3:90:ea:55:b4:21:41:53:
         74:7b:6e:00:2f:17:e4:64:6b:5d:2a:dc:82:48:84:33:dd:76:
         3d:f9:db:37:47:ee:41:9a:59:a2:47:a4:f5:6b:2b:59:b2:8c:
         35:e4:29:b2:fc:11:0e:0b:6b:e3:3d:d0:3c:ae:e7:0b:27:ac:
         07:a6:ce:c0:4d:71:93:93:03:9c:76:cb:57:22:d2:43:df:af:
         71:b2:77:eb:eb:1b:47:aa:b3:ff:4e:86:6b:dd:cb:26:67:91:
         fb:d2:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:34 2024 by rpki-client on console-ams.rpki-client.org