Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
File:                     3137372e382e3232342e302f32302d3234203d3e203238313836.roa (raw, json)
Hash identifier:          HCCpgHdR0+5HzW/d/Mg0N3z7xXFdnqW8vASIpGVFsBg=
Subject key identifier:   26:C0:61:4B:04:D2:DF:41:E4:35:67:AA:5F:ED:3B:36:4D:2B:C2:F4
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       04A660A2C7CB4B300F4A0DE14F9B7CDE6EDD02A3
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
Signing time:             Wed 03 Apr 2024 22:48:06 +0000
ROA not before:           Wed 03 Apr 2024 22:43:06 +0000
ROA not after:            Wed 02 Apr 2025 22:48:06 +0000
asID:                     28186
IP address blocks:        177.8.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:60:a2:c7:cb:4b:30:0f:4a:0d:e1:4f:9b:7c:de:6e:dd:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Apr  3 22:43:06 2024 GMT
            Not After : Apr  2 22:48:06 2025 GMT
        Subject: CN=26C0614B04D2DF41E43567AA5FED3B364D2BC2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2e:3d:e1:4e:0b:d1:10:bf:35:89:08:99:b3:
                    82:40:03:c4:c1:e3:72:0b:d6:ae:93:2a:ae:af:53:
                    ab:af:f3:c0:74:d7:74:e1:59:19:5e:c6:b9:fc:55:
                    70:c1:ea:16:e7:89:0a:d4:18:80:b5:e6:60:c7:5d:
                    8e:33:92:96:3f:e3:a8:16:5e:5a:a1:8d:bc:d5:bc:
                    c7:35:b7:3f:46:3e:4a:de:60:fa:64:be:fb:db:07:
                    62:38:fc:cd:42:af:59:04:5d:b6:f9:8a:e6:92:05:
                    91:a3:0f:ea:b7:59:95:1f:0b:8f:d9:ad:f5:c1:0a:
                    d0:ba:1a:f9:3e:10:02:4a:b8:76:67:8b:2b:dc:7d:
                    88:a7:00:60:62:47:b3:41:1d:b2:5d:0b:00:62:5f:
                    a5:5b:04:e5:11:cc:59:f8:d6:be:f7:40:90:ba:3c:
                    ce:5e:02:b5:f1:df:f0:51:a1:7f:94:2c:9c:a7:7c:
                    b1:37:8e:15:ff:1f:b3:d0:02:4d:ba:80:de:45:7b:
                    ce:1a:68:3b:8b:a8:d0:b8:7e:17:d7:d3:b8:71:4d:
                    5c:8f:ff:7e:29:cf:de:fa:8d:cb:7d:44:20:9c:a7:
                    8a:30:02:56:10:a7:2d:ac:5d:b5:27:0a:41:37:cc:
                    70:27:b5:fe:48:01:b9:0b:b4:cd:4f:c2:6f:19:b8:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:61:4B:04:D2:DF:41:E4:35:67:AA:5F:ED:3B:36:4D:2B:C2:F4
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:53:b5:03:89:44:ab:55:9b:67:75:66:d3:da:a4:4e:b1:
         bf:e1:c4:49:23:48:7f:66:f3:9a:32:67:98:1c:5e:1d:86:f2:
         bb:6c:5d:95:d8:84:df:9d:f0:3d:6b:02:d3:b9:64:06:8c:73:
         04:66:f2:f6:82:3d:d8:6b:ee:4c:3a:c4:87:df:bc:f3:f8:be:
         ac:9d:0a:9a:b9:48:02:2a:dd:c8:2b:d7:04:56:4d:5e:fd:c4:
         df:c3:d5:ba:4e:e3:8a:92:35:56:73:96:59:9c:e0:17:a1:21:
         d8:2f:53:99:89:08:06:f8:79:c0:d1:27:7a:94:32:b6:98:c0:
         1a:dc:87:f3:b3:43:e3:32:67:ca:a0:a9:f2:70:e7:b5:d7:f9:
         74:be:25:6d:84:3a:78:07:fc:e0:54:bd:2d:a3:de:a1:d4:78:
         dd:d9:44:86:4d:ff:3d:41:5e:0d:96:da:a3:67:ee:11:9f:98:
         ef:ee:68:a8:db:a1:aa:55:ee:1c:4a:92:2c:86:bc:78:1e:8d:
         79:e5:1f:6a:64:b3:94:e4:e1:d6:5e:bd:b5:cb:ee:09:eb:a6:
         86:86:4d:06:19:93:22:a1:26:9f:98:01:66:74:f8:2a:06:68:
         14:55:ab:4a:fa:88:9a:4a:1f:09:1a:4c:04:04:a9:f6:3e:87:
         fb:49:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org