Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa
File:                     3137372e3130372e38302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          MOqc++g8rvMb59H+qqF42XP1BaT0XLxDdbY7tNJ/8R8=
Subject key identifier:   FB:0F:44:36:80:4A:86:6F:12:9B:B3:9B:86:A8:8D:E5:14:F3:C6:CB
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       35009A660E64C2674ABBFB73E2A13E4E5EB33555
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:03:50 +0000
ROA not before:           Mon 25 Nov 2024 16:58:50 +0000
ROA not after:            Mon 24 Nov 2025 17:03:50 +0000
asID:                     28669
IP address blocks:        177.107.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:00:9a:66:0e:64:c2:67:4a:bb:fb:73:e2:a1:3e:4e:5e:b3:35:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:50 2024 GMT
            Not After : Nov 24 17:03:50 2025 GMT
        Subject: CN=FB0F4436804A866F129BB39B86A88DE514F3C6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:fc:d5:c3:7c:e8:89:41:af:d7:41:86:ae:
                    8a:26:4e:20:32:9e:87:4a:85:fd:5e:0c:89:2f:a2:
                    ba:97:e2:8f:d0:c7:11:9a:6c:b1:06:6c:ea:08:74:
                    65:02:b5:3e:4e:6a:0e:23:5c:22:70:95:2d:e5:2a:
                    51:7d:90:ad:e0:c4:92:c2:16:63:6e:27:98:b8:41:
                    d4:18:24:92:e6:cb:03:22:eb:6c:49:b8:cc:db:fb:
                    4c:cb:45:0a:63:1c:ee:2b:ab:37:83:25:0d:6d:d6:
                    86:f0:5b:81:b0:7c:65:26:76:75:69:3b:d8:ad:64:
                    8d:69:29:d3:a5:53:3c:cf:2f:d9:a8:d5:d0:91:18:
                    27:24:bf:6e:f5:18:4b:a9:ed:7a:63:a2:b4:88:51:
                    8a:2c:5f:fb:8d:b0:c4:e4:7f:0d:07:a6:f1:6a:95:
                    ee:b8:45:56:1d:2a:21:96:31:50:70:b3:59:12:f4:
                    7a:18:9c:32:57:29:d4:52:11:c8:db:b2:7a:9a:7c:
                    fe:fe:6c:38:ca:0a:67:2e:43:2a:2d:7f:06:94:fe:
                    5f:b4:4a:05:f0:05:a8:ca:99:43:71:ab:12:af:40:
                    6f:11:75:57:b0:15:5e:20:42:c3:0c:89:bd:a3:ed:
                    01:41:a4:58:f3:11:ed:08:58:17:6f:b5:50:d4:87:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:44:36:80:4A:86:6F:12:9B:B3:9B:86:A8:8D:E5:14:F3:C6:CB
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:76:a1:9c:fb:53:a1:6f:23:e5:5f:15:29:8f:21:df:f3:
         fc:b6:81:7f:0e:17:a6:6a:f2:82:98:fe:a3:5e:2c:62:05:a1:
         b4:4e:57:63:ce:b0:b2:47:71:2c:e9:f6:a1:84:4c:2f:1d:d5:
         b6:45:5f:be:e4:ca:ac:57:a4:1b:4e:f7:9b:52:cc:b7:47:29:
         1a:05:23:f7:cb:a5:09:9a:47:a8:27:8e:6d:51:7f:dc:a5:7d:
         9a:98:92:21:bb:dc:36:f6:43:b5:ec:dc:d5:dd:0e:66:b3:47:
         2c:e5:a0:bb:13:bc:2a:2c:6f:32:6c:fe:a0:48:cd:56:52:0e:
         41:23:6d:f4:2a:6b:0c:6e:25:b2:83:44:2b:89:7f:48:55:70:
         3c:b4:1f:4d:0d:e1:34:ee:66:2d:61:7d:63:e9:38:3a:d6:e0:
         20:28:68:93:2d:73:8c:c9:b4:85:28:20:3d:6d:00:bf:61:2b:
         57:8f:82:c8:4a:7b:4e:70:a9:e2:c0:1b:dc:fb:32:c2:f3:62:
         50:57:e5:e5:27:d5:8f:5e:c2:12:7d:7a:81:d3:f6:b2:5c:86:
         16:e3:ee:28:64:db:60:0f:19:36:0f:81:aa:ba:2e:73:d9:55:
         bd:56:bb:9e:ad:d4:36:cf:94:fe:4a:d8:44:1b:64:33:37:fa:
         38:a3:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org