Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e39362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          SkV64JWAdJIWAofNl4QpbyhU55p7UrrtN+6msA/9gUc=
Subject key identifier:   90:82:4F:11:D1:17:D2:09:31:89:91:3D:3E:E7:58:B0:1A:45:78:B0
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       4D2A0B32048DDBA281768337E13316D254024FA8
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:26 +0000
ROA not before:           Thu 04 Apr 2024 17:35:26 +0000
ROA not after:            Thu 03 Apr 2025 17:40:26 +0000
asID:                     263347
IP address blocks:        177.23.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2a:0b:32:04:8d:db:a2:81:76:83:37:e1:33:16:d2:54:02:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:26 2024 GMT
            Not After : Apr  3 17:40:26 2025 GMT
        Subject: CN=90824F11D117D2093189913D3EE758B01A4578B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:04:5e:62:b5:5f:77:4d:cb:b7:b8:2c:4e:
                    5c:63:cd:7b:8c:d9:70:4b:60:94:7d:4f:19:e2:8e:
                    b0:6c:ee:f1:ea:39:9f:25:b8:60:bc:7c:d9:0a:7c:
                    d5:f6:e3:c6:6e:32:ea:98:28:3a:ef:a3:f0:3c:cf:
                    2c:9a:e2:74:97:b1:15:76:c8:93:1c:56:83:b0:2e:
                    5a:b6:23:3a:a7:44:b4:ba:d1:62:63:70:54:09:3e:
                    76:d5:62:36:18:a7:dd:5e:66:d5:45:e4:67:8b:69:
                    e5:a6:cc:81:90:8e:e0:b4:48:47:46:14:5a:3a:fc:
                    2c:2f:cd:29:9f:c2:b1:92:6c:3d:d5:47:5f:e0:04:
                    e9:43:c8:9c:11:28:f1:d5:7e:75:f5:b5:03:4d:2d:
                    6c:67:38:c0:49:97:8e:eb:4e:5f:ea:27:e1:c5:ea:
                    3f:4b:af:b4:28:10:ad:de:7b:eb:49:0f:98:47:c3:
                    af:92:fe:e4:61:de:b2:46:d0:8b:a0:ea:be:d3:f3:
                    62:ff:42:10:17:a9:9d:5f:7c:31:12:38:ba:9e:e2:
                    5f:c6:43:c7:a9:c7:3a:94:8f:da:2c:35:9e:ea:0d:
                    1f:45:27:10:99:70:30:54:5a:67:a6:68:9b:b9:fc:
                    35:43:c5:56:7a:5d:22:de:71:7a:1d:1c:6e:7d:e4:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:4F:11:D1:17:D2:09:31:89:91:3D:3E:E7:58:B0:1A:45:78:B0
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:48:e2:7c:d9:d6:3b:b1:7d:93:87:a7:23:e4:91:09:4a:
         50:5d:7e:3f:98:cb:44:d1:4a:9a:9a:cf:0e:5e:3d:16:f3:7e:
         47:c7:dc:cc:95:37:37:95:02:88:e8:3a:e2:68:7b:42:14:a0:
         c4:b8:fb:ec:2f:8c:cd:57:19:c1:c1:f3:a0:61:70:8a:34:23:
         14:0a:4a:27:74:dd:1f:f6:a5:22:b3:54:26:94:d9:3e:55:26:
         c3:6a:f0:ed:87:d6:59:e4:41:f4:af:22:a5:e0:ca:3e:ea:e5:
         3f:5d:94:90:d8:21:69:f6:d7:19:35:64:6d:4a:9e:59:29:10:
         dc:41:7b:a5:f8:09:e8:65:dc:11:3d:25:06:9d:8b:03:30:11:
         72:ff:1c:41:f6:68:49:43:5e:14:db:f6:ac:4b:6b:d8:c3:94:
         cc:41:11:db:56:66:0a:42:0a:2c:4a:5b:f8:c8:80:7f:67:c1:
         f0:30:52:5a:00:9d:c3:6d:50:10:5b:cc:6b:b5:a6:ee:a5:c3:
         f8:b3:c8:9b:60:69:0a:22:e5:6e:92:a5:fe:31:96:a7:a5:6b:
         82:95:84:30:99:83:3b:d4:6f:cd:54:fc:f0:4d:f1:79:4b:f4:
         e1:c4:22:47:53:b4:a3:a6:67:bb:c8:05:56:47:77:7d:69:23:
         a2:6a:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org