Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39392e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e39392e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          QF2TdV3deEaQKyir76Q8aufK4CbKGAaGwJRzJhMOH48=
Subject key identifier:   B7:52:21:71:14:BE:8D:59:C4:C3:1E:86:5A:6E:91:A0:99:B3:E0:5F
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2FC27B16905B81070A33E8590094A44A1D384629
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39392e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:50:30 +0000
ROA not before:           Sat 09 Nov 2024 13:45:30 +0000
ROA not after:            Sat 08 Nov 2025 13:50:30 +0000
asID:                     263347
IP address blocks:        177.23.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:7b:16:90:5b:81:07:0a:33:e8:59:00:94:a4:4a:1d:38:46:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:45:30 2024 GMT
            Not After : Nov  8 13:50:30 2025 GMT
        Subject: CN=B752217114BE8D59C4C31E865A6E91A099B3E05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:25:c3:d5:b1:b1:86:e1:07:31:7a:64:dc:
                    52:9c:ef:b5:c1:e0:ee:17:3b:77:3d:69:21:f1:6b:
                    f5:15:dd:91:77:12:6f:e7:99:de:27:50:0c:bc:05:
                    35:d5:6c:8c:fe:79:83:6f:fd:a8:07:ae:28:66:06:
                    77:0f:78:d8:15:ad:db:db:50:ef:5a:da:2c:a1:28:
                    e2:c0:3a:77:b2:e3:59:a0:94:91:8d:e7:f7:5a:08:
                    25:e6:7d:31:cc:ed:eb:cc:9c:93:f1:43:69:f7:47:
                    72:db:d7:e1:53:9f:fa:e3:a1:b3:b2:e6:17:f8:d8:
                    b7:68:d8:82:bb:9c:ca:db:99:4d:27:db:98:ce:df:
                    25:64:16:98:68:66:a3:ae:13:15:a4:3d:6d:ed:62:
                    0d:51:46:b5:58:0e:a2:39:cd:47:e5:30:75:21:a1:
                    4e:ca:5b:48:f0:97:9e:e4:20:87:d4:e2:de:7b:3c:
                    f4:0f:54:f9:f7:a0:72:09:4f:85:c1:88:a7:74:e8:
                    5f:fc:cd:51:0c:8d:79:e3:f0:73:00:1f:ff:47:90:
                    d5:f5:44:a0:45:05:1c:37:6e:2d:cb:9e:aa:56:bd:
                    25:43:a2:a2:5e:f8:8d:25:db:3e:52:9f:4e:71:f6:
                    93:db:58:b7:c6:1f:76:47:7e:97:9e:34:57:5e:60:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:21:71:14:BE:8D:59:C4:C3:1E:86:5A:6E:91:A0:99:B3:E0:5F
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39392e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:13:09:67:e7:83:fa:71:51:f9:81:77:ee:80:2c:09:93:17:
         0e:f6:b2:03:59:75:77:f3:5a:62:c4:0e:ed:e7:48:bc:4f:f8:
         d5:01:3e:1f:8b:a9:51:f0:0b:fa:f6:26:20:d0:0f:67:9c:e0:
         af:84:e9:1b:ad:6c:fd:9e:8e:07:ed:a6:ec:f9:e5:93:86:9a:
         a2:b2:89:2b:3d:0c:f3:f6:8c:3f:ab:d3:2d:d8:33:5d:51:d6:
         c5:6b:16:51:f9:35:9d:7a:2a:1e:20:91:e3:e5:17:fb:9f:48:
         52:e9:d2:6f:02:84:8a:b4:99:dd:4f:db:e5:27:1e:1f:4e:3a:
         f7:db:d8:3d:73:f8:d6:ee:76:ee:7b:b6:ef:db:75:b0:73:d9:
         92:24:38:2d:95:13:c6:df:17:b6:ff:d5:01:1b:36:18:53:ed:
         50:57:e7:81:de:b0:06:6f:51:a8:72:b3:d3:05:3c:e5:1c:e0:
         8e:ed:cd:39:2a:97:84:d3:43:66:43:47:20:ff:ed:13:74:07:
         56:9a:62:e0:10:28:00:78:78:8d:65:13:0a:84:79:5a:26:3c:
         33:3b:22:da:bd:76:b7:c9:f2:49:75:b4:52:54:e8:d6:35:60:
         9b:23:77:e4:49:27:4f:eb:c8:1d:d7:2b:fa:1c:0d:09:8f:79:
         bf:70:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org