Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa
File:                     3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          YRt/beqyEgVhe0JMn6BegTdbktwvfiqrf74b83rJ/Q0=
Subject key identifier:   A2:5E:BB:E8:F2:53:92:13:B8:B6:2F:0F:99:91:EE:AE:B2:6E:E3:FF
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       408D2EF6977C746401BCE15E21C11A85C1EBEEC1
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa
Signing time:             Thu 04 Apr 2024 01:19:19 +0000
ROA not before:           Thu 04 Apr 2024 01:14:19 +0000
ROA not after:            Thu 03 Apr 2025 01:19:19 +0000
asID:                     263025
IP address blocks:        177.10.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8d:2e:f6:97:7c:74:64:01:bc:e1:5e:21:c1:1a:85:c1:eb:ee:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Apr  4 01:14:19 2024 GMT
            Not After : Apr  3 01:19:19 2025 GMT
        Subject: CN=A25EBBE8F2539213B8B62F0F9991EEAEB26EE3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:c7:55:df:33:a4:69:1e:3f:37:1e:16:b7:
                    e8:d3:3f:d6:16:8e:bc:3e:f9:f2:5c:af:63:e7:6d:
                    d6:6d:e8:14:77:2b:b3:30:31:c9:6d:a1:30:d2:5e:
                    e8:f9:25:83:22:c5:90:3f:16:84:b2:b5:c9:1a:c9:
                    be:0b:94:30:1a:73:16:3f:78:60:a4:2e:1c:be:1b:
                    70:10:fa:41:06:8f:e0:be:47:9e:f8:90:4e:f4:94:
                    91:00:b7:ad:06:05:70:d0:ef:e1:fc:9f:d7:2e:98:
                    3a:e8:65:c1:14:12:c4:35:89:06:f3:75:31:77:75:
                    f5:f7:49:48:a5:a3:f0:b2:05:18:54:16:dc:16:29:
                    fa:e5:53:c4:48:1a:0a:c4:3f:49:43:58:fc:ad:23:
                    50:ce:e1:aa:e1:89:b5:1e:a9:5c:27:d8:ba:a3:99:
                    22:6c:69:93:3b:aa:80:7a:eb:6d:79:f1:1f:04:8f:
                    01:c6:11:ca:3f:ee:e3:a2:c0:bc:3f:21:51:52:7e:
                    cc:dc:0f:12:2f:a1:73:67:9e:4f:61:14:6b:9b:bd:
                    53:e2:93:b6:53:62:99:e9:ff:2d:88:6e:ef:84:54:
                    ec:7c:aa:26:11:58:aa:99:8f:ce:2a:f6:b9:82:a6:
                    3b:d6:94:d0:ff:0d:0a:8a:4c:e4:fe:b6:b9:8c:0e:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5E:BB:E8:F2:53:92:13:B8:B6:2F:0F:99:91:EE:AE:B2:6E:E3:FF
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:11:2b:cf:e5:bc:fd:17:50:9a:04:ec:b8:a2:b2:93:aa:1a:
         95:bd:0e:82:f8:09:54:62:bc:48:7c:26:ee:4a:3d:f3:57:06:
         9b:da:53:ea:3e:99:ff:64:c4:81:d8:30:a1:d9:c7:43:5f:45:
         3e:0b:2e:15:54:f9:9f:4a:cf:db:dc:35:23:02:a5:f4:d2:e2:
         41:56:43:5e:4f:b3:1c:0a:78:23:e9:ff:9f:18:4f:69:71:c6:
         48:c0:2e:4d:75:81:ff:53:9c:30:8a:a7:d0:d6:67:2c:78:fd:
         f9:13:29:21:20:17:6c:79:60:73:7d:1d:fa:ec:cc:0a:ce:1b:
         d9:4e:1d:a2:c5:25:ef:90:66:e1:68:b1:65:74:9a:f7:d9:4d:
         09:dd:07:f1:f9:cb:af:44:11:a4:fa:d5:b4:a4:71:32:31:9e:
         d5:bc:f6:fd:a9:15:83:5d:f7:eb:0a:cf:24:92:26:95:76:ce:
         84:ac:2b:84:56:88:98:e7:01:b6:78:6a:76:95:dd:81:2f:1c:
         3b:b1:ca:04:3c:88:3d:0b:c3:72:fd:77:f9:06:86:49:94:86:
         6d:fa:3d:4e:85:d6:a7:00:9e:55:dc:72:a8:9f:ae:1f:33:56:
         b6:60:c5:a2:50:c8:86:2b:f6:cb:85:cc:af:dc:65:5e:7b:25:
         21:a5:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:52 2024 by rpki-client on console-ams.rpki-client.org