Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/3137372e31302e3230382e302f32312d3332203d3e20323632383536.roa
File:                     3137372e31302e3230382e302f32312d3332203d3e20323632383536.roa (raw, json)
Hash identifier:          11pkJQN/npaB2iS3FstsiF+vS98Fi6DW5QelZwfamDQ=
Subject key identifier:   E9:23:89:D0:F4:BA:DB:78:0D:FF:47:C5:9A:39:36:3E:3F:13:92:34
Certificate issuer:       /CN=07662D34D06FF7CA63D893930C2C3C90BB872ECA
Certificate serial:       5386E8D24E30CF3F513B200A2D19163A159ED301
Authority key identifier: 07:66:2D:34:D0:6F:F7:CA:63:D8:93:93:0C:2C:3C:90:BB:87:2E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07662D34D06FF7CA63D893930C2C3C90BB872ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/3137372e31302e3230382e302f32312d3332203d3e20323632383536.roa
Signing time:             Tue 15 Oct 2024 13:08:13 +0000
ROA not before:           Tue 15 Oct 2024 13:03:13 +0000
ROA not after:            Tue 14 Oct 2025 13:08:13 +0000
asID:                     262856
IP address blocks:        177.10.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/07662D34D06FF7CA63D893930C2C3C90BB872ECA.crl
                          rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/07662D34D06FF7CA63D893930C2C3C90BB872ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07662D34D06FF7CA63D893930C2C3C90BB872ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:86:e8:d2:4e:30:cf:3f:51:3b:20:0a:2d:19:16:3a:15:9e:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07662D34D06FF7CA63D893930C2C3C90BB872ECA
        Validity
            Not Before: Oct 15 13:03:13 2024 GMT
            Not After : Oct 14 13:08:13 2025 GMT
        Subject: CN=E92389D0F4BADB780DFF47C59A39363E3F139234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:bd:ca:e7:a4:30:6f:a0:f6:c8:f0:00:c3:
                    27:30:e9:be:6b:de:8f:3d:b1:9c:df:8e:d2:8f:44:
                    4c:bb:6a:ef:7c:c2:57:13:db:b6:c1:41:5e:10:9e:
                    b9:bd:e4:c0:2d:27:92:95:10:b8:25:6d:b4:5a:ce:
                    45:0f:ff:af:3e:ce:ff:bc:ba:5f:74:ed:c4:10:56:
                    ba:21:b8:26:47:e5:49:20:64:92:41:2d:7b:3d:97:
                    19:76:ea:40:9e:6f:e8:9d:30:6c:ac:95:01:db:86:
                    60:07:a4:f5:ab:95:73:be:b7:00:9b:4a:a0:34:89:
                    86:97:7c:10:62:c1:f7:0e:19:bb:8b:9c:31:ab:74:
                    0f:c8:d1:90:95:38:d4:b8:3c:d2:9b:50:8f:68:d7:
                    3a:ac:60:9c:63:49:a6:64:03:e3:de:64:65:c9:88:
                    3b:db:4c:49:86:7e:20:0e:24:a9:91:19:e0:86:c0:
                    66:3a:8d:f0:3a:a7:85:48:97:98:4d:c2:62:d8:fc:
                    94:b9:49:23:57:86:98:c0:2b:1b:35:5d:b0:83:7b:
                    ea:77:ef:75:da:d6:64:e6:6e:b8:fc:45:a5:98:1c:
                    05:5d:e5:68:84:4c:dc:c2:8e:1c:fe:fd:a9:f6:ea:
                    b6:73:b4:ce:8d:e7:bb:6f:24:1a:81:8c:6a:98:a8:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:89:D0:F4:BA:DB:78:0D:FF:47:C5:9A:39:36:3E:3F:13:92:34
            X509v3 Authority Key Identifier:
                keyid:07:66:2D:34:D0:6F:F7:CA:63:D8:93:93:0C:2C:3C:90:BB:87:2E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/07662D34D06FF7CA63D893930C2C3C90BB872ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07662D34D06FF7CA63D893930C2C3C90BB872ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/3137372e31302e3230382e302f32312d3332203d3e20323632383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:cb:46:81:ad:75:11:22:45:c9:ec:0f:b7:3a:72:3f:a0:3f:
         b4:9a:c3:72:31:86:bb:27:0e:fe:28:0f:76:d0:cb:e0:31:56:
         41:2d:ab:e1:2d:18:13:98:30:1a:e2:c2:96:52:60:3a:2a:09:
         71:e5:bb:54:68:c3:11:a4:94:ef:9e:a4:7e:8f:4a:82:52:26:
         3c:77:8b:dd:ae:41:47:8a:5a:a3:77:32:d3:e6:95:a7:99:03:
         1f:ab:cf:be:b5:6b:79:2f:b4:97:d6:e7:71:6a:b3:e1:50:ed:
         76:e9:b4:24:eb:a4:01:3e:f2:dc:ec:8f:e8:a3:bd:90:1b:3c:
         cd:f4:e4:c4:d4:f7:f8:64:71:49:1c:e3:11:10:15:47:dc:e6:
         f3:e1:76:15:b8:8e:7b:63:45:69:70:44:0b:dc:59:58:3d:a8:
         5f:fa:6d:92:f4:58:cf:1c:ce:69:8a:7e:76:91:da:b8:fc:9e:
         b1:8b:d6:95:0f:00:c2:98:2c:ba:76:df:1d:d3:f6:84:e0:8d:
         fe:1d:26:cb:12:7e:2a:c1:38:ae:b2:6b:1d:79:63:7e:25:cf:
         30:41:42:f4:59:77:34:23:5d:32:9d:7c:3e:a6:6f:c0:cc:49:
         4e:b8:1e:2a:20:ad:93:e2:f7:55:22:f1:84:ab:67:5b:01:60:
         07:0b:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:34:00 2024 by rpki-client on console-ams.rpki-client.org