Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa
File:                     3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (raw, json)
Hash identifier:          NNwK3CUsnxtgWOS4eUGiyWjPNLsnd/jKg+eCHPUWEz0=
Subject key identifier:   A6:56:DF:81:35:00:59:AA:5F:EB:0C:36:D0:63:8E:29:81:1A:F4:DD
Certificate issuer:       /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
Certificate serial:       6BB5C19EFCE2A464AB6B7D6443B2F2428E7D379F
Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa
Signing time:             Wed 03 Apr 2024 19:23:30 +0000
ROA not before:           Wed 03 Apr 2024 19:18:30 +0000
ROA not after:            Wed 02 Apr 2025 19:23:30 +0000
asID:                     262422
IP address blocks:        177.39.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl
                          rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:c1:9e:fc:e2:a4:64:ab:6b:7d:64:43:b2:f2:42:8e:7d:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
        Validity
            Not Before: Apr  3 19:18:30 2024 GMT
            Not After : Apr  2 19:23:30 2025 GMT
        Subject: CN=A656DF81350059AA5FEB0C36D0638E29811AF4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:46:51:90:2e:7b:19:fb:3e:0e:2b:69:66:
                    b6:69:a4:20:0f:ec:ed:b3:7a:ba:23:fd:77:64:74:
                    be:0a:34:43:d3:c2:45:42:0e:0f:4a:c4:f1:27:73:
                    9f:11:c7:ae:69:24:30:e7:49:d9:3e:fb:e7:a4:ea:
                    59:b7:d2:09:4f:0e:ba:10:74:ef:3f:5d:79:02:46:
                    6a:d5:4a:fe:1f:aa:ff:6b:de:c1:55:16:a9:0c:cf:
                    3b:de:8c:a1:fb:64:78:2a:7d:64:14:a0:e6:71:66:
                    12:0e:28:ae:56:09:1f:01:09:75:c9:31:a4:76:e3:
                    c5:1a:1d:08:77:e2:3a:ed:45:e5:5b:d9:c5:77:68:
                    cb:69:a1:4e:b0:59:85:8d:cb:3c:e1:39:8c:54:3f:
                    5a:bd:83:78:39:f4:c0:20:f7:6f:c7:d1:63:18:b1:
                    ea:b2:fe:55:b4:42:70:4a:35:be:a4:7b:39:e2:50:
                    17:36:9c:c8:70:aa:20:5f:eb:d5:2f:70:78:72:bf:
                    60:de:a2:bb:5d:51:af:91:fb:d9:42:4c:18:26:96:
                    5b:57:8c:42:5e:65:77:b3:dc:1e:ae:e7:25:89:13:
                    15:9f:9a:8b:c4:bd:16:5d:0c:a8:08:04:8c:1c:65:
                    72:3a:21:96:4a:27:21:c9:1a:d8:1e:08:13:d8:34:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:DF:81:35:00:59:AA:5F:EB:0C:36:D0:63:8E:29:81:1A:F4:DD
            X509v3 Authority Key Identifier:
                keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:c6:b1:82:c9:97:45:54:bd:86:eb:4b:d8:8b:16:94:02:
         d0:1a:3d:93:8f:9e:46:91:db:7f:47:b4:17:c0:d7:79:d5:5e:
         3d:d8:0f:d9:a3:1f:8d:dc:52:cb:22:50:95:d3:64:f7:ec:44:
         78:5d:d3:ef:f3:cc:4d:31:c9:26:d9:0f:18:d3:e7:29:0e:88:
         23:51:75:db:1a:7b:a1:5c:bc:ee:74:1a:c2:df:32:a4:c9:47:
         33:18:bd:8f:44:94:ba:54:83:e7:64:66:ed:1b:cc:b2:16:2e:
         e0:3b:18:e8:6f:14:a8:12:db:71:f7:64:75:aa:97:62:0a:20:
         33:79:87:f9:cd:2d:f3:8d:55:39:a7:0b:2b:c3:d7:02:c7:2b:
         0b:59:d6:fb:4c:35:b8:04:ea:8f:aa:f9:18:98:b5:de:6b:20:
         2f:74:67:69:88:c5:f8:d4:98:8e:bf:ca:37:8b:50:39:5a:f1:
         97:55:56:4b:10:c8:79:a7:00:9d:5f:b8:9e:f4:f9:cd:c0:0b:
         fc:b0:d5:48:bd:ab:87:96:66:e5:47:67:49:06:3e:9f:5c:09:
         98:84:d9:86:48:05:a1:67:82:01:61:ba:31:4b:97:3f:c7:68:
         ab:1f:fd:40:40:91:8c:7f:46:b9:01:91:26:bf:e8:a4:4b:5f:
         12:dc:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org