Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa
File:                     3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa (raw, json)
Hash identifier:          L0Bm7HUtEstmxeyv4ejlL99CjgVaHjWBCZS5m2upPv4=
Subject key identifier:   40:3B:E8:8E:AC:D8:25:BD:52:0D:A5:23:26:46:01:CC:D7:C5:DB:E3
Certificate issuer:       /CN=C01DF174C12528273BF338B916174C8FBDA2AEB3
Certificate serial:       70D1803F6C73304DF7506F831F90070190C70120
Authority key identifier: C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa
Signing time:             Thu 04 Apr 2024 00:05:03 +0000
ROA not before:           Thu 04 Apr 2024 00:00:03 +0000
ROA not after:            Thu 03 Apr 2025 00:05:03 +0000
asID:                     271209
IP address blocks:        177.223.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.crl
                          rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d1:80:3f:6c:73:30:4d:f7:50:6f:83:1f:90:07:01:90:c7:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01DF174C12528273BF338B916174C8FBDA2AEB3
        Validity
            Not Before: Apr  4 00:00:03 2024 GMT
            Not After : Apr  3 00:05:03 2025 GMT
        Subject: CN=403BE88EACD825BD520DA523264601CCD7C5DBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:df:e2:26:5a:b5:cd:31:cb:34:34:e9:29:
                    85:3a:75:43:24:bc:57:39:2e:c6:8a:7e:c8:48:5d:
                    b2:28:93:01:c4:fa:bf:4f:60:fa:48:69:41:9d:a8:
                    a1:54:1b:89:8a:0b:30:54:1e:ac:be:13:7f:81:6d:
                    04:00:f2:2b:1e:43:45:e8:7f:ee:e4:3e:3f:22:f8:
                    e3:38:06:4a:69:4c:31:99:09:6f:2d:79:95:30:2b:
                    c0:08:29:67:65:ec:c4:eb:03:b7:2d:1e:99:23:d4:
                    cf:2c:4c:85:b5:51:f5:9e:d8:12:ef:2f:4c:9a:ad:
                    8f:4b:05:bd:5e:1c:59:de:a4:67:33:7d:1f:74:73:
                    d9:44:6e:f0:46:6e:5d:30:6c:30:e0:51:57:aa:1a:
                    42:b3:cc:0a:76:da:a8:b2:43:ac:85:61:f2:2f:0c:
                    81:b7:34:af:31:f5:ba:e0:d9:64:12:ba:90:cd:79:
                    3d:aa:e0:e2:e0:d7:1b:03:29:5c:e5:09:09:91:13:
                    bd:35:3b:24:5c:57:04:bc:4b:6d:5a:a2:e8:42:40:
                    08:cd:51:53:40:cd:af:a0:cf:98:3b:6c:37:4a:a0:
                    e2:df:cd:8b:77:9b:7b:ba:06:a0:dd:91:15:b1:3d:
                    e3:ff:60:ed:90:bd:9d:a0:b9:35:33:7e:ac:47:69:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3B:E8:8E:AC:D8:25:BD:52:0D:A5:23:26:46:01:CC:D7:C5:DB:E3
            X509v3 Authority Key Identifier:
                keyid:C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:29:6c:6c:14:ae:66:35:77:55:50:fd:9a:5f:ae:b3:c1:b2:
         99:5c:7d:5f:d4:ea:9d:33:f1:e1:f5:e5:04:75:01:3e:2e:ac:
         13:2c:77:41:de:9a:4c:56:ef:54:e5:37:d7:16:42:56:d3:09:
         a6:c8:7e:98:8d:33:cd:d6:35:37:66:12:e4:c6:c3:10:48:8e:
         82:29:99:21:28:e7:f1:58:6e:9e:cf:4c:b5:d1:f1:fa:d6:25:
         11:b3:74:27:96:23:e6:69:11:f5:f0:5d:e0:00:3c:a8:2b:86:
         cd:58:8d:96:b3:bc:01:01:59:ab:5d:6e:85:85:99:b4:68:ea:
         01:47:b4:8f:b0:72:f0:10:82:2e:ba:96:4c:20:c0:9d:99:ee:
         fa:da:c7:07:51:78:b6:94:b7:84:cb:ea:59:a0:ea:21:cd:eb:
         c1:24:dd:31:12:23:f9:b5:e2:d3:c4:99:11:1f:1e:7d:74:28:
         9f:99:77:33:68:80:45:7b:19:77:93:15:bf:77:0e:20:bd:08:
         1c:01:a8:0b:a6:b7:d4:71:a5:26:fe:e3:3e:ed:03:1e:63:e1:
         3b:7a:bd:58:d8:2b:6f:71:22:52:10:38:00:4f:ca:fc:db:6c:
         a1:c4:e5:6b:3a:9f:19:62:9d:a5:25:7e:30:36:24:17:52:73:
         07:a2:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:30 2024 by rpki-client on console-fra.rpki-client.org