Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
File:                     3137372e31312e39322e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          vOYTi3jChj4Nr/yT+dPyVq2r2m4L/zCimd4I9zwNKDY=
Subject key identifier:   4B:39:C5:D7:43:F8:EE:74:99:A0:5D:2B:14:7D:35:C8:E2:85:B7:AB
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       650F519FC0A4B3CEB6AAB76E5DA320B37F3C4A43
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
Signing time:             Mon 25 Nov 2024 17:04:12 +0000
ROA not before:           Mon 25 Nov 2024 16:59:12 +0000
ROA not after:            Mon 24 Nov 2025 17:04:12 +0000
asID:                     52940
IP address blocks:        177.11.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0f:51:9f:c0:a4:b3:ce:b6:aa:b7:6e:5d:a3:20:b3:7f:3c:4a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:12 2024 GMT
            Not After : Nov 24 17:04:12 2025 GMT
        Subject: CN=4B39C5D743F8EE7499A05D2B147D35C8E285B7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:57:a9:4c:cb:16:29:f8:dc:b7:f8:dd:e8:
                    3b:fe:a1:8f:29:23:2b:a8:03:67:f5:ee:8c:a2:b3:
                    96:c8:ab:89:47:74:df:ee:b0:d2:6a:a7:11:4d:8d:
                    7f:bd:a5:66:62:05:e8:f9:c9:90:89:ce:54:2e:61:
                    5c:24:57:e7:9b:07:33:84:5a:37:e9:cc:ad:51:03:
                    a5:c0:15:b6:41:5f:38:2f:72:8a:e2:86:8b:aa:90:
                    fd:0c:59:bd:e0:a3:52:68:79:b3:52:f0:f1:ef:c4:
                    0e:9b:48:78:d9:03:45:f0:68:c0:a5:69:4c:32:e9:
                    b0:e7:23:96:22:8f:5e:f6:e6:2f:3c:cc:bc:1b:2a:
                    22:69:ea:d4:9a:a1:a0:a9:0e:f0:5d:6b:69:c8:0b:
                    a7:64:0c:52:00:dd:e5:3f:50:47:1f:57:1e:5f:00:
                    86:5b:3a:7b:82:b6:fd:dc:9f:b2:04:13:76:bf:fa:
                    0b:ce:75:c3:ed:6b:05:00:22:42:e2:d8:c5:25:b0:
                    93:37:23:f4:a0:44:88:50:82:8e:47:8b:98:cf:41:
                    96:d9:24:42:53:4e:d1:d0:9d:08:10:e1:d3:ef:be:
                    bd:15:63:cc:f4:78:e4:5f:5a:bd:dc:4f:7b:3e:e7:
                    4f:d3:4d:73:d6:0a:ec:14:24:8f:ba:27:0e:5e:21:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:C5:D7:43:F8:EE:74:99:A0:5D:2B:14:7D:35:C8:E2:85:B7:AB
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:86:0d:e1:9f:0f:4a:58:4f:81:94:45:e8:fa:3b:7d:a7:
         7e:dd:49:11:ee:cf:5b:44:51:83:8f:67:7c:29:c0:69:83:34:
         19:07:1e:f6:e1:b8:52:0a:93:2d:b2:5f:ae:29:2b:2d:24:f1:
         7b:95:93:32:ed:85:a7:7c:0b:fa:18:28:35:26:0c:b6:dd:6e:
         10:b5:a2:0c:99:2c:c0:b4:17:88:54:a5:7e:29:d3:b2:46:d8:
         0d:8c:e5:f6:4b:9c:43:c0:1f:fe:31:ec:00:37:e0:b2:48:2c:
         fc:07:c4:8e:2d:f0:94:39:42:84:fc:53:75:4e:3a:32:c5:a4:
         0a:54:17:d3:01:46:84:99:42:b5:e3:78:0c:19:a5:b9:c1:26:
         3c:54:7a:69:f6:e3:68:5f:b1:cd:84:aa:ef:cf:05:0c:3d:2b:
         6d:b4:f5:72:33:83:60:ea:56:b8:ea:be:0b:15:ba:e1:fa:fd:
         0f:64:72:af:6c:7f:45:9e:bf:51:a8:c1:7e:93:a2:9b:90:d6:
         fc:d8:76:ab:2a:fe:2f:71:4a:45:be:63:a6:9c:86:cf:c8:5a:
         5f:55:b1:cc:45:58:fc:ac:ee:a9:68:11:21:24:59:ce:a3:54:
         3b:ac:90:8b:ba:38:e1:a8:9c:c2:9d:96:17:6a:05:ea:cf:5e:
         02:a2:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org