Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
File:                     3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          d3jtysH1IWTbUq/dgGMh6vedcIGH9AWIB34J+WoOfm4=
Subject key identifier:   FE:AF:52:7C:35:01:0B:11:98:37:04:1F:A3:F9:CC:B9:90:B8:DC:43
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       27CABCD9E9730C251F94C69829385DFCC6F4CF97
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
Signing time:             Wed 03 Apr 2024 18:34:06 +0000
ROA not before:           Wed 03 Apr 2024 18:29:06 +0000
ROA not after:            Wed 02 Apr 2025 18:34:06 +0000
asID:                     268200
IP address blocks:        177.39.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ca:bc:d9:e9:73:0c:25:1f:94:c6:98:29:38:5d:fc:c6:f4:cf:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Apr  3 18:29:06 2024 GMT
            Not After : Apr  2 18:34:06 2025 GMT
        Subject: CN=FEAF527C35010B119837041FA3F9CCB990B8DC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:3c:a5:42:e4:1e:34:3f:0e:5f:ba:19:b5:
                    8e:cf:55:92:67:4d:ec:bd:f6:73:67:21:47:94:d9:
                    a7:a4:e2:f3:a1:53:7c:48:dc:a7:f9:91:0b:b1:5a:
                    07:0b:d7:91:ae:07:af:63:1d:52:4c:d5:a9:2e:44:
                    7d:ed:7f:40:26:4c:8c:02:48:57:4b:12:3b:5a:6b:
                    38:b5:88:09:7e:1e:6b:a6:fe:16:a2:f1:aa:0a:d8:
                    84:b0:57:7c:f8:6f:86:67:fd:4e:c5:21:94:c2:19:
                    d5:58:0a:03:19:2a:cd:7f:2e:75:c6:2d:1f:7f:5a:
                    e6:30:18:03:97:a4:6c:f1:f7:9f:60:40:10:7a:6b:
                    b3:71:02:42:6a:eb:89:bb:d2:b9:5c:05:79:0e:dd:
                    ff:52:de:99:cc:5a:91:19:7b:2e:a8:4b:e3:9b:93:
                    59:8b:25:c1:4a:13:d1:a7:7f:d0:b8:67:33:7a:d4:
                    61:e3:4c:a8:da:b7:ac:32:52:e3:dd:77:88:73:7b:
                    35:26:65:40:62:77:5b:28:26:61:33:21:25:8b:8c:
                    b5:9d:f6:67:7f:89:05:c6:44:b9:e8:a3:16:5f:3a:
                    f6:64:a1:76:4f:36:35:a7:b2:48:fc:8a:47:4a:0f:
                    ad:40:5c:95:b9:0f:13:77:96:a2:dd:29:0b:f3:5a:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:52:7C:35:01:0B:11:98:37:04:1F:A3:F9:CC:B9:90:B8:DC:43
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:9a:aa:b4:6b:f2:80:a0:9d:85:7c:49:b4:b4:57:43:67:
         3e:da:72:03:da:c3:1c:be:3e:ce:d4:e3:cc:42:4d:a0:e7:db:
         f5:c3:04:1c:0e:f9:b3:33:00:d7:68:01:fb:5a:7f:31:93:86:
         fc:f3:66:c7:e7:98:4d:65:99:11:7f:02:85:b3:20:aa:6f:fb:
         06:00:ad:fd:66:4b:37:e9:97:e7:9a:3f:79:16:e7:9c:29:ad:
         01:4e:2f:8b:ac:25:6d:58:95:41:bc:da:e2:d0:14:20:5a:f6:
         a9:fe:3e:b3:55:cc:bf:97:ef:27:83:05:0b:fb:39:0d:55:7a:
         75:5c:29:b5:70:86:74:db:9a:85:b0:3c:a6:c3:19:bc:5d:6b:
         98:52:54:db:e6:f8:f3:68:82:8e:b8:09:30:8f:32:4b:a6:cb:
         d8:c5:d9:f2:b8:d8:7e:2a:cb:07:82:56:92:6d:d6:41:49:b4:
         49:06:4d:88:7f:67:39:97:e7:c8:f1:c4:25:bb:98:01:22:a1:
         9d:7d:64:3c:31:23:90:16:df:83:3b:64:65:3a:e6:7f:4b:12:
         33:c8:20:0a:46:99:d1:a2:c4:94:9e:90:9e:af:85:e2:97:b4:
         7d:20:eb:08:f3:fb:84:c1:b0:bd:c8:80:f1:64:38:78:28:82:
         5f:d0:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org