Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
File:                     3137372e35342e34382e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          Wsxq8cuRbDe5+xQsu5zAK8/a1TR4rtclgovE8e3ujgU=
Subject key identifier:   8E:F3:52:0E:64:A5:14:63:C8:39:07:8F:E0:00:85:C1:D0:BB:CF:99
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       2C288D842DE77F47A0A8FCA9C41512E17B9C2FCC
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28292
IP address blocks:        177.54.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:8d:84:2d:e7:7f:47:a0:a8:fc:a9:c4:15:12:e1:7b:9c:2f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:b3:38:e3:a8:e1:ad:e6:4e:81:9a:ed:34:
                    85:2b:21:bc:4f:81:5b:26:25:7f:87:1d:fa:bd:6b:
                    8d:fb:a1:44:fd:a9:56:8c:e8:40:b0:5f:ba:a3:d0:
                    58:3a:a2:8f:eb:eb:a5:70:e0:c0:a2:43:70:ad:5a:
                    df:ce:b1:c7:69:84:50:39:b5:52:77:83:1b:a3:75:
                    5a:8d:09:3a:f5:d3:8e:dc:fa:d4:8c:c9:25:7b:76:
                    f3:40:bb:31:a2:2d:98:f8:cd:94:d2:94:33:60:4c:
                    ea:c1:74:d6:bb:55:fd:88:2d:ec:6f:3e:9b:c1:c3:
                    f8:9a:4d:81:d6:78:79:5d:31:93:8e:25:76:ba:6a:
                    7d:1e:58:fa:0e:90:13:90:7c:48:49:5b:98:5a:b6:
                    3f:9f:97:ab:12:ed:54:1e:43:9d:0b:c7:b7:40:c0:
                    f0:0b:21:fc:04:95:d3:89:f2:c4:1a:a6:d1:f9:34:
                    57:ce:56:f7:9d:35:86:e9:68:64:aa:8d:a6:1a:e7:
                    7b:83:2a:14:2f:74:60:ba:5f:53:d4:3d:86:84:2d:
                    a9:75:85:2c:75:c1:a9:25:d3:fb:2e:c7:56:b4:2c:
                    f3:e9:98:38:9d:37:b5:c1:49:3c:11:30:3d:42:2f:
                    d4:f3:a8:79:0d:a4:b3:af:41:c5:16:87:87:0b:dc:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:52:0E:64:A5:14:63:C8:39:07:8F:E0:00:85:C1:D0:BB:CF:99
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:97:8a:46:ec:56:b4:11:06:2f:b5:67:61:6e:47:31:f6:
         1c:81:e0:ee:6c:15:c8:24:76:91:1b:7d:a2:02:40:6a:51:fc:
         d6:a2:8a:4f:b8:c2:f8:61:72:5d:ae:bf:50:0e:2f:f4:93:00:
         f2:fe:a9:b4:6f:1f:41:c7:2a:1a:1d:e2:de:72:a4:b8:96:e7:
         15:ce:d3:47:97:90:bc:88:9f:b9:ac:7a:2c:6a:cd:af:b9:73:
         1a:93:1d:7f:a7:39:0a:78:34:69:85:fb:49:86:4d:fc:cf:15:
         83:f0:79:c3:d4:21:db:3b:0e:aa:5a:a9:11:a6:97:db:82:4d:
         0c:27:21:87:22:51:f6:86:26:5c:0e:2b:41:bc:45:82:e5:6c:
         a4:01:00:46:ce:ae:bc:6f:8d:2c:75:a3:f3:f2:87:d8:8f:16:
         c4:7a:ff:8f:97:b7:65:2f:46:d6:93:ce:bd:f3:87:cf:5c:6b:
         bc:52:09:fc:56:ef:75:cf:2e:c3:66:e8:0b:37:9e:9b:ee:81:
         6e:f3:fb:32:f0:35:a7:a6:4d:8c:70:05:9a:66:31:d2:68:ad:
         13:84:d5:1a:d6:a0:df:fb:3e:43:2d:90:76:89:e9:53:30:17:
         82:09:7b:58:8c:6f:fc:8a:49:b8:08:50:c7:1d:62:ce:7e:93:
         22:36:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:52 2024 by rpki-client on console-ams.rpki-client.org