Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230322e302f32342d3234203d3e20323633303235.roa
File:                     3137372e31302e3230322e302f32342d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          /6yAlXQrGE4igRmAGx6iyvAnOnARVj3pOCiVUOUw+eY=
Subject key identifier:   5B:35:AC:E2:D8:FB:60:0F:3C:82:94:3A:EE:E1:F1:FD:93:FE:0B:F4
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       08BEF65159AC341F44017F5D7C38346F8ECDE15C
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230322e302f32342d3234203d3e20323633303235.roa
Signing time:             Thu 04 Apr 2024 01:19:20 +0000
ROA not before:           Thu 04 Apr 2024 01:14:20 +0000
ROA not after:            Thu 03 Apr 2025 01:19:20 +0000
asID:                     263025
IP address blocks:        177.10.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:be:f6:51:59:ac:34:1f:44:01:7f:5d:7c:38:34:6f:8e:cd:e1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Apr  4 01:14:20 2024 GMT
            Not After : Apr  3 01:19:20 2025 GMT
        Subject: CN=5B35ACE2D8FB600F3C82943AEEE1F1FD93FE0BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:9a:db:9c:26:ac:74:15:79:7a:6a:09:70:
                    51:40:77:0d:23:0c:16:91:1d:d5:40:b0:a4:87:42:
                    92:de:81:9a:a4:53:7f:02:e1:cd:c7:78:34:6e:ca:
                    f2:d8:9d:e3:25:9d:b5:14:93:c8:f9:9d:a2:b6:f9:
                    66:6a:6c:54:db:b1:8f:3d:37:df:74:50:e1:10:4c:
                    0b:4d:bc:9d:3e:6c:d8:43:de:19:22:66:1a:bb:46:
                    2e:d4:61:9f:da:ab:f6:f7:b1:42:a9:75:e4:f2:24:
                    85:ca:33:1a:56:2d:2e:aa:78:fe:c7:23:91:d2:a7:
                    f3:75:57:70:9d:82:ea:f0:92:e1:24:38:93:fe:33:
                    a1:b3:b4:f5:13:96:31:91:ee:0a:97:81:ea:6a:4c:
                    70:60:33:c6:26:a8:29:6f:f5:cd:09:e0:de:6b:00:
                    cf:14:4b:b6:65:36:ed:cc:b1:63:c0:06:de:26:42:
                    08:94:57:19:94:f4:14:42:e0:a6:65:6e:0c:13:7d:
                    98:72:e9:38:ec:5b:c4:17:af:bb:69:1b:6f:a6:e1:
                    90:c1:2f:5e:cb:3e:26:9e:b3:26:f8:81:67:8c:94:
                    e7:87:62:bf:4d:aa:80:fb:f7:74:c2:f2:c2:98:e9:
                    79:9c:cd:e9:fb:0e:cc:f6:73:6a:26:82:e4:69:85:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:AC:E2:D8:FB:60:0F:3C:82:94:3A:EE:E1:F1:FD:93:FE:0B:F4
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230322e302f32342d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:64:69:1f:ec:14:41:70:a5:93:f7:51:a7:41:cb:ff:14:
         08:79:82:c0:89:f8:27:79:7c:37:4a:42:19:d5:9b:d8:7b:27:
         37:7e:e1:b5:dd:5b:09:f5:82:b9:89:14:5e:07:94:0e:72:a2:
         8d:77:1d:12:b4:bc:fc:d8:67:7d:f9:c4:18:fb:62:0f:79:32:
         fc:d5:27:85:f1:11:3a:9b:bc:83:b3:bb:b1:3e:31:d0:ae:72:
         97:80:c2:28:53:31:c0:67:2c:7b:70:76:71:93:ae:8a:a0:bd:
         3e:8d:fc:59:f0:ab:36:17:11:b6:00:7d:9c:08:9d:8a:53:c1:
         58:3a:57:7d:86:4b:25:8b:18:5e:5a:64:fc:f9:83:61:a6:57:
         48:b3:d7:70:55:df:85:5b:78:05:d8:21:82:73:87:76:06:1c:
         2a:b5:94:22:2f:83:1d:fe:03:20:61:9b:b0:3e:44:2e:62:0c:
         d1:70:f4:9e:f5:22:e6:3d:56:01:1e:3d:99:59:e6:7a:3a:e1:
         4e:b9:95:93:e8:76:45:80:ab:d9:16:cb:60:2f:f9:2b:02:d7:
         54:f6:f9:c2:5e:90:0c:ab:bf:d6:31:b8:6b:04:d1:7f:ee:f7:
         a8:e1:78:a2:f9:b6:34:bb:64:29:48:05:64:09:f5:49:ec:53:
         f4:6c:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org