Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3234203d3e20323632333136.roa
File:                     3137372e37342e36342e302f32302d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          H+rjNNN33HYHPhsY/++o+N6jUgAcds6B+fTxN+TTGlk=
Subject key identifier:   04:B0:59:3F:2E:5A:93:C7:F1:8D:C0:A3:FE:D5:D5:04:D5:49:F4:77
Certificate issuer:       /CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Certificate serial:       2979BFF43B168E13F3D57D176543C462884348D7
Authority key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3234203d3e20323632333136.roa
Signing time:             Wed 06 Nov 2024 20:47:28 +0000
ROA not before:           Wed 06 Nov 2024 20:42:28 +0000
ROA not after:            Wed 05 Nov 2025 20:47:28 +0000
asID:                     262316
IP address blocks:        177.74.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:79:bf:f4:3b:16:8e:13:f3:d5:7d:17:65:43:c4:62:88:43:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
        Validity
            Not Before: Nov  6 20:42:28 2024 GMT
            Not After : Nov  5 20:47:28 2025 GMT
        Subject: CN=04B0593F2E5A93C7F18DC0A3FED5D504D549F477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:fa:78:70:df:92:29:0d:45:2d:a5:73:37:
                    26:e9:df:31:06:40:90:6a:2c:ad:23:65:f4:c9:50:
                    e9:3e:15:35:26:6e:6c:37:48:85:f2:95:37:e8:bb:
                    78:49:1e:b7:71:e6:c6:e6:50:96:0a:af:46:80:1c:
                    2f:71:e5:36:ec:f7:e3:ba:9c:48:7a:4d:89:04:4b:
                    6c:18:dc:4f:71:b4:12:de:1a:67:09:95:04:59:66:
                    9a:26:1e:a0:5b:8d:01:03:7d:8b:e9:8e:80:85:79:
                    82:d9:ed:d1:8a:c2:12:8e:a1:d2:09:08:e7:91:a8:
                    0a:3a:f2:5a:7e:51:d7:c2:73:9f:37:4a:10:52:17:
                    da:a3:ea:94:de:a1:3e:b7:e0:56:b3:6c:c6:e5:ca:
                    0f:32:8c:d3:b7:9d:2e:65:b4:76:b1:5d:2b:c5:46:
                    6d:72:61:cb:52:8e:74:f2:ca:46:c3:17:95:b3:75:
                    6f:78:61:86:bc:59:12:f5:a1:da:d4:bd:9b:02:00:
                    85:86:72:c6:1f:80:e7:3d:cf:5e:85:be:e6:13:07:
                    25:11:9e:b3:29:d7:52:dc:ec:91:f9:4f:88:24:0e:
                    ee:59:a1:8b:bd:2d:f6:0b:98:f6:de:20:d9:e1:e7:
                    21:ec:d3:a0:3b:44:55:52:db:80:83:20:a3:68:5d:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:59:3F:2E:5A:93:C7:F1:8D:C0:A3:FE:D5:D5:04:D5:49:F4:77
            X509v3 Authority Key Identifier:
                keyid:21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:a5:8c:d1:f4:8f:58:a6:e3:55:08:c1:16:04:c6:8d:29:69:
         65:16:e3:83:15:81:2e:cc:76:0a:0a:64:e1:a8:91:f8:ec:96:
         ce:ab:eb:3c:b5:c0:65:91:58:3e:d3:87:98:1e:19:37:b9:b0:
         41:c5:56:b9:da:9f:6f:14:6c:90:16:e0:e0:0a:66:15:c6:f6:
         27:28:3b:fe:fd:d6:fe:5a:6b:10:75:94:22:d2:48:39:be:65:
         b4:7a:47:d2:dd:60:41:ca:b8:52:b5:23:ef:5c:28:6f:bf:17:
         00:cd:10:e5:e2:58:69:12:c8:10:c3:7a:9e:b3:9a:cc:f3:8c:
         39:64:99:fc:15:63:42:23:da:a2:f2:8d:31:39:a4:98:2b:5c:
         4b:42:ce:24:86:c6:1b:14:d9:14:ab:58:f9:80:e1:a5:a9:ad:
         f7:55:cf:2a:56:97:ba:8a:7c:78:54:38:59:22:3b:d7:b5:c1:
         f0:63:c7:9d:66:d7:7f:64:ca:d6:b7:0d:59:46:74:94:39:53:
         cf:f1:ca:1f:ef:df:f3:af:9e:e8:cd:a9:41:fd:4e:28:84:2c:
         50:78:63:b7:37:01:6f:d3:d7:75:b7:19:6a:9b:f5:e2:94:49:
         62:d6:96:44:eb:b7:52:c4:6e:7f:fe:d9:71:f9:4d:09:c6:30:
         27:7a:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:09 2024 by rpki-client on console-ams.rpki-client.org