Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa
File:                     3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          CnTR+InDnR+C/a9nLfYEjufvWTYylk4rf/QspWyBpXI=
Subject key identifier:   F2:39:8F:D5:16:44:7C:2B:4D:75:C0:F2:B4:80:B8:BC:10:7F:38:57
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       7ECB963EC0F35FFD5EC3F23C647E298AC966C213
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa
Signing time:             Thu 04 Apr 2024 01:19:20 +0000
ROA not before:           Thu 04 Apr 2024 01:14:20 +0000
ROA not after:            Thu 03 Apr 2025 01:19:20 +0000
asID:                     263025
IP address blocks:        177.10.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cb:96:3e:c0:f3:5f:fd:5e:c3:f2:3c:64:7e:29:8a:c9:66:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Apr  4 01:14:20 2024 GMT
            Not After : Apr  3 01:19:20 2025 GMT
        Subject: CN=F2398FD516447C2B4D75C0F2B480B8BC107F3857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:83:5b:5f:ec:63:81:7e:02:0d:81:6c:e1:
                    71:73:10:13:80:38:b0:59:a3:79:70:ac:8e:e8:8c:
                    ed:6e:64:f6:8e:63:2c:27:be:c7:a0:fa:b5:6f:cd:
                    ac:f7:d5:a5:d7:1d:76:ea:b3:88:25:f7:55:b4:2b:
                    c6:09:15:d8:82:50:a3:2e:f0:7e:5c:c5:dd:a0:2c:
                    9c:4b:90:f5:18:8c:d2:8f:bb:27:5b:59:f4:99:e7:
                    18:dc:80:d2:d7:67:d1:fa:e8:fc:dc:8c:ca:41:04:
                    e4:bc:99:55:7e:ad:d7:1a:dc:81:cc:71:0c:dd:e4:
                    a6:76:f7:c9:27:8a:ff:c0:e7:99:e2:7c:b0:33:28:
                    c2:75:85:5b:c8:c0:e2:32:a9:da:27:ee:97:dd:f5:
                    94:0c:74:51:86:01:2d:a2:6e:20:5d:21:1f:19:03:
                    4c:ae:42:d6:e4:35:99:d4:6e:1f:e1:e2:43:fa:2a:
                    f9:37:4b:02:af:28:4f:29:55:6e:b9:b3:32:8b:b9:
                    65:34:30:e6:e4:11:4d:6a:8f:6b:69:6c:67:cb:6c:
                    6a:eb:27:ba:fb:ae:b2:47:fc:19:1f:17:af:5d:d6:
                    c9:15:af:b4:11:3f:d9:15:9b:c1:be:7e:6e:b2:13:
                    82:fe:8e:58:72:e4:29:12:05:61:53:8f:e6:f5:85:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:39:8F:D5:16:44:7C:2B:4D:75:C0:F2:B4:80:B8:BC:10:7F:38:57
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:49:a8:2d:ed:f2:61:c1:2d:da:e9:4c:f0:1e:8d:a9:c9:58:
         c8:f9:36:fa:29:1a:07:af:da:45:a0:33:15:13:e0:ea:78:3f:
         89:80:49:72:6a:eb:36:33:6b:8e:a6:e7:30:95:88:eb:42:d9:
         8d:a9:1d:54:84:5a:68:0a:e5:fc:43:1d:17:7a:21:c5:dd:ef:
         0e:d1:aa:0d:ee:6c:e0:f3:b5:23:0b:64:5d:7d:c5:07:43:5a:
         b6:8d:8a:a1:75:e2:0c:8a:53:5c:be:5c:15:f1:24:e6:b0:c9:
         fb:d4:4b:b0:74:a8:b0:7b:2c:60:92:da:96:50:4a:cf:a1:98:
         2f:a5:f1:74:cd:55:ec:4e:f2:bf:53:20:5c:62:f0:3e:d0:89:
         2c:6f:7d:25:8b:ef:9d:b6:92:7e:1b:73:44:53:86:93:ce:5e:
         c3:b7:31:3d:1b:55:db:0d:07:3d:4c:8a:79:49:e3:b8:77:26:
         aa:9c:91:b3:14:4e:21:02:c4:89:19:7e:16:a2:4d:0b:88:c4:
         e7:16:cb:e4:1f:ab:64:5b:85:81:be:9c:af:64:f3:c0:cd:98:
         a5:4d:05:9d:b7:be:0f:78:fe:f6:32:b0:72:f0:46:94:dd:42:
         50:58:b5:5f:c1:42:73:eb:3b:64:9e:4b:d7:4e:70:e6:e0:f8:
         62:38:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org