Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa
File:                     3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa (raw, json)
Hash identifier:          Lqf1sBnJ7Rj+qcqISdlpYSNfRj/YjW5/SCICXK4jNEc=
Subject key identifier:   0F:66:AD:41:A6:05:7D:C8:28:0C:90:24:AB:4A:43:D1:EF:6F:7C:30
Certificate issuer:       /CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
Certificate serial:       F1DD5EAFE653D063D5AAF710FE3E687589A213
Authority key identifier: 37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa
Signing time:             Thu 04 Apr 2024 00:56:11 +0000
ROA not before:           Thu 04 Apr 2024 00:51:11 +0000
ROA not after:            Thu 03 Apr 2025 00:56:11 +0000
asID:                     28615
IP address blocks:        177.131.192.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:dd:5e:af:e6:53:d0:63:d5:aa:f7:10:fe:3e:68:75:89:a2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
        Validity
            Not Before: Apr  4 00:51:11 2024 GMT
            Not After : Apr  3 00:56:11 2025 GMT
        Subject: CN=0F66AD41A6057DC8280C9024AB4A43D1EF6F7C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:51:2f:13:ed:76:48:5b:c3:63:4a:c4:14:
                    97:af:fe:0d:a4:97:ec:98:09:6f:73:c9:4a:15:96:
                    32:52:0a:aa:ab:98:b6:5e:f1:06:e9:4f:ba:ee:06:
                    f5:a9:57:f7:bf:11:1f:34:1a:e0:d4:cb:62:3d:f6:
                    b4:a8:36:64:32:19:c9:d5:af:f6:04:b9:c6:dd:fb:
                    98:ef:09:5f:fa:50:fc:7f:8e:6c:0b:1b:f6:2c:41:
                    a0:18:4a:ea:05:29:62:fa:bf:ef:16:96:d7:80:2c:
                    7f:78:99:d8:d1:d7:36:47:94:8f:79:d3:d7:29:f6:
                    b5:cf:e6:39:b9:a6:17:ba:0f:a2:97:4e:9b:1e:d8:
                    41:9c:f9:68:80:e2:80:c2:76:f4:9b:95:46:79:90:
                    f9:5f:85:1f:1e:3f:79:d6:19:81:14:77:51:fa:94:
                    65:5c:ed:13:88:cf:6c:4c:62:27:51:d6:4b:a8:51:
                    9a:6a:b9:fc:56:64:81:88:15:d2:73:79:29:b8:16:
                    1f:58:95:ae:75:bc:30:f8:be:8f:4e:42:1d:ce:09:
                    ef:a3:c0:92:2c:a2:52:da:e0:c6:14:23:17:31:4a:
                    da:ff:d6:9a:af:be:4b:1d:4c:cf:83:0f:11:2e:b3:
                    39:d4:e0:c1:bb:86:ca:f4:24:c8:21:38:31:2c:1f:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:AD:41:A6:05:7D:C8:28:0C:90:24:AB:4A:43:D1:EF:6F:7C:30
            X509v3 Authority Key Identifier:
                keyid:37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:00:0b:d4:b2:02:22:da:a0:26:18:8d:29:c4:b4:e4:9f:
         43:e2:d7:fb:a9:79:c5:14:88:98:95:b5:b2:24:38:fb:c0:9a:
         32:54:7c:1b:46:42:bf:ce:95:10:0d:4b:e4:00:b6:02:f6:bd:
         37:e0:ba:ad:26:3d:ba:1e:d4:8c:b7:56:e3:ce:9d:3c:9e:99:
         fb:4c:6e:a0:d9:b6:0d:96:35:e7:46:e8:48:2a:1d:a1:3e:b7:
         89:8e:13:2c:45:a3:a8:28:f0:cb:5b:c6:ab:c5:0a:77:d3:80:
         8f:9a:dc:2d:93:65:80:19:9a:7b:88:60:57:6c:98:19:89:28:
         f6:2b:4d:22:44:c3:bd:14:cb:89:96:36:ff:06:e4:03:a7:95:
         f7:30:81:73:d8:84:3d:fb:33:64:72:4d:1b:e5:7d:61:d8:1f:
         e4:db:46:35:8e:c0:58:9c:3e:fe:1b:a5:00:b7:ca:8f:7d:57:
         20:9b:15:2f:0a:15:3d:a9:9b:ce:38:0d:4e:ac:9e:fe:36:03:
         9f:82:57:0c:fb:11:ca:e1:9f:7d:7b:3d:12:ba:85:3c:2b:23:
         98:71:cf:38:76:e9:af:11:9f:ad:8f:b2:23:59:eb:82:49:6c:
         97:8a:dd:8f:37:9b:4c:5d:fa:50:1d:cd:3a:5e:4a:6c:4d:d4:
         79:96:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:24 2024 by rpki-client on console-fra.rpki-client.org