Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa
File:                     3137372e32312e302e302f31392d3234203d3e203238313836.roa (raw, json)
Hash identifier:          jTV0++C22A5Dvkj1gwt6nx6MDX1AEix/pzIObWV+Sqc=
Subject key identifier:   F0:BB:23:32:52:26:D2:E3:AF:0A:3A:4D:70:61:5A:94:80:92:F4:19
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       65C325BFC98E2B65694643B21E08EB524020AD76
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa
Signing time:             Wed 03 Apr 2024 22:48:06 +0000
ROA not before:           Wed 03 Apr 2024 22:43:06 +0000
ROA not after:            Wed 02 Apr 2025 22:48:06 +0000
asID:                     28186
IP address blocks:        177.21.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c3:25:bf:c9:8e:2b:65:69:46:43:b2:1e:08:eb:52:40:20:ad:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Apr  3 22:43:06 2024 GMT
            Not After : Apr  2 22:48:06 2025 GMT
        Subject: CN=F0BB23325226D2E3AF0A3A4D70615A948092F419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:af:5a:e9:6a:3c:e1:6b:23:34:4a:0c:e3:
                    b1:24:5b:34:4f:2f:66:08:30:29:c2:d3:fe:3f:ac:
                    70:5a:b1:c3:64:6d:78:03:61:12:8d:d0:53:d2:1a:
                    75:ca:9a:84:93:a6:b9:83:e3:e5:e2:ad:d8:9f:5a:
                    c3:c4:18:48:8e:18:7b:2f:ee:54:33:90:50:c0:47:
                    89:31:27:36:1a:ba:52:c5:53:28:f9:5b:1c:38:2e:
                    1d:9e:5a:a6:a0:01:d4:d4:f7:05:60:95:b5:55:8f:
                    7d:ab:ad:e9:99:34:2a:da:54:a4:df:ec:47:77:d4:
                    a8:5c:b6:da:94:24:8e:09:19:08:c8:3a:95:5b:68:
                    9e:8c:6b:72:23:b9:cc:8b:25:9c:5a:3b:ae:fb:a8:
                    a0:5c:44:29:2b:79:6f:02:fd:50:6e:fb:b5:80:44:
                    e0:09:fc:10:dc:bc:9d:86:f9:19:b7:64:9a:3c:4e:
                    9b:a7:da:5e:c6:ed:70:b8:2b:2c:3a:6d:ca:37:d2:
                    c6:db:f6:0c:f4:b5:ea:b0:fe:a7:a4:48:a0:85:1d:
                    28:6b:35:76:ae:c4:12:fc:23:04:57:34:9b:f6:79:
                    6b:94:bd:1d:34:d1:0b:4e:92:47:90:e1:ea:8c:c8:
                    54:92:f0:31:be:0f:8c:75:40:8f:ac:64:43:73:74:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:23:32:52:26:D2:E3:AF:0A:3A:4D:70:61:5A:94:80:92:F4:19
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:7e:0b:c4:fb:21:61:5b:51:51:1f:04:e5:81:83:91:11:
         37:db:3a:1e:ca:5b:00:4c:84:7c:90:7b:21:85:e8:32:37:f5:
         8e:17:25:2b:08:c0:08:99:cc:0b:de:5a:7a:ed:4e:1d:f2:49:
         0c:0a:9f:64:18:69:e1:0e:00:09:2d:d3:0d:05:c1:59:bc:c7:
         34:50:cb:56:e0:58:2f:4e:9d:c9:e8:96:5d:be:a4:33:ac:51:
         dc:cc:df:39:ad:ce:22:77:2d:0c:a3:7e:bc:1c:59:68:d9:20:
         b4:74:72:9f:1c:b6:cd:b3:45:cf:7c:49:c8:09:41:5c:9a:13:
         b3:17:9b:29:21:44:67:0c:8d:55:c5:00:11:33:97:82:85:91:
         cd:6f:73:a9:6f:91:0f:70:c5:c3:67:c5:2c:2f:35:d5:d5:a9:
         b1:10:72:28:b5:4b:2d:10:02:5c:a8:5e:d0:24:b6:c3:cc:a7:
         51:0b:fe:57:a6:70:31:95:6d:7c:13:e1:b9:c4:f2:6a:e1:31:
         62:90:6b:43:2c:ea:02:74:30:6d:60:26:3c:7b:97:f1:c9:81:
         8f:fd:46:73:e0:0a:b0:93:eb:8e:5d:aa:2a:3f:16:5f:4c:d8:
         eb:9c:bc:e0:60:70:20:59:86:98:75:dc:d5:51:c7:8a:48:b2:
         39:b5:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:47 2024 by rpki-client on console-fra.rpki-client.org