Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
File:                     3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          leejIn7i6MQ4LBM1RA13cEm4+bRGoDPKWdFHlJn3nIs=
Subject key identifier:   27:61:08:57:EC:1F:8A:36:04:B4:FA:CB:DE:BE:00:04:E3:BB:DA:12
Certificate issuer:       /CN=AB2056D7D8A7AFF26282198B9CD2D346B527921A
Certificate serial:       14D55D8EA2678A6DEC81868F02337BE0F95CA296
Authority key identifier: AB:20:56:D7:D8:A7:AF:F2:62:82:19:8B:9C:D2:D3:46:B5:27:92:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     262813
IP address blocks:        177.70.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d5:5d:8e:a2:67:8a:6d:ec:81:86:8f:02:33:7b:e0:f9:5c:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2056D7D8A7AFF26282198B9CD2D346B527921A
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:40:fb:eb:e8:f2:27:d3:2f:c6:27:50:3e:
                    2c:bb:6c:73:f1:c7:30:67:90:1a:36:37:bb:68:62:
                    6b:95:69:7f:a5:41:92:c1:39:31:85:04:08:f3:c7:
                    ac:69:0c:0f:61:c2:8c:9e:93:e7:2a:4b:38:6c:85:
                    53:7f:5e:f4:84:af:a3:bc:94:bd:96:41:4b:35:95:
                    e3:09:a9:5c:31:7d:c4:a4:03:46:aa:51:dd:7e:00:
                    c3:8f:0f:bb:50:4b:e6:c5:ba:2c:37:6d:85:fc:77:
                    73:98:e0:30:3e:e9:d2:6e:51:ba:36:cb:f6:76:8e:
                    a7:f1:e4:23:c4:12:cd:ad:f1:61:5d:ad:c0:96:65:
                    22:7c:77:e1:98:fc:d3:3d:76:2e:32:07:c5:88:17:
                    53:cc:04:be:3a:9e:90:d2:fc:45:23:f8:53:c7:cb:
                    93:03:fe:8f:33:1a:11:00:bc:35:38:ef:9c:bf:c4:
                    91:73:51:b1:a7:cb:c5:21:05:75:9e:f7:75:36:74:
                    3f:40:87:47:26:87:94:52:fd:f9:0f:ef:f2:06:58:
                    66:d4:41:f0:45:17:38:83:6e:35:1d:a0:af:42:e6:
                    6c:be:b0:e9:fa:a3:0c:e4:62:6c:87:90:7c:80:1e:
                    7f:1d:f3:4a:35:28:31:56:68:31:98:72:90:fa:3c:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:08:57:EC:1F:8A:36:04:B4:FA:CB:DE:BE:00:04:E3:BB:DA:12
            X509v3 Authority Key Identifier:
                keyid:AB:20:56:D7:D8:A7:AF:F2:62:82:19:8B:9C:D2:D3:46:B5:27:92:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:d9:bf:34:9e:ab:4d:ac:da:c1:1c:01:23:be:5c:3d:25:
         27:64:80:a6:56:74:60:59:cb:fa:76:aa:d2:bb:d0:36:f6:20:
         4f:2e:4f:80:e3:11:87:f6:29:b8:a8:05:00:19:a5:33:32:a5:
         39:6a:79:3e:25:f7:71:5f:ae:bc:27:bb:2b:5f:2f:4b:e2:2f:
         d6:eb:37:d9:43:29:75:d6:74:b3:06:87:ce:f5:24:10:5c:d7:
         16:9d:c3:0b:bc:fb:dd:de:3c:cc:c9:49:7f:6f:af:c6:52:4b:
         b5:73:78:28:8f:4a:ad:8b:88:02:68:97:36:51:5e:1c:52:89:
         1f:59:06:c6:ab:16:74:5a:5c:ea:52:e0:28:e6:6b:4d:76:d8:
         62:aa:97:15:6f:fd:4d:1d:89:77:d9:63:7d:e6:55:1a:dc:63:
         c8:62:b6:7f:ea:da:a4:96:b5:10:8a:63:e3:58:f7:7b:e3:48:
         96:c2:9c:33:84:94:8e:ae:cb:ab:db:04:af:d7:d5:cb:2f:b5:
         ca:3f:53:a9:19:72:15:92:6e:7f:2a:2d:f8:e8:e9:0e:f7:5d:
         d3:07:fd:23:6c:51:fe:2a:fd:cd:ec:2a:fd:13:ea:10:d7:77:
         fc:59:dc:e0:6f:59:95:f5:20:b9:9e:46:82:b4:d9:48:ff:62:
         10:b8:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:49 2024 by rpki-client on console-ams.rpki-client.org