Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
File:                     3137372e3133372e36342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          w1Max/r1wa/V0SOq01C+7jy8TJ538cw3k4NxUTvyfIE=
Subject key identifier:   48:15:FA:B2:54:01:50:28:8B:86:2C:DF:1A:69:72:CB:59:0D:0E:93
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       3BB2A522B79C6F24815EB8C27059AC22402084EA
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:21 +0000
ROA not before:           Mon 25 Nov 2024 16:59:21 +0000
ROA not after:            Mon 24 Nov 2025 17:04:21 +0000
asID:                     28669
IP address blocks:        177.137.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b2:a5:22:b7:9c:6f:24:81:5e:b8:c2:70:59:ac:22:40:20:84:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:21 2024 GMT
            Not After : Nov 24 17:04:21 2025 GMT
        Subject: CN=4815FAB2540150288B862CDF1A6972CB590D0E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:42:94:0e:3a:5d:e4:24:29:fa:9c:20:23:
                    dd:d6:17:fc:ea:66:0b:fb:bb:d8:70:1d:92:40:48:
                    91:e5:2e:71:08:de:a9:54:3a:0b:d9:c7:3a:7b:c9:
                    28:af:81:0b:4f:f4:cb:25:38:23:b5:43:89:12:88:
                    8e:b0:26:e2:d3:64:f9:58:85:9a:21:ac:36:b2:69:
                    d8:66:49:07:99:1f:94:6e:64:2a:fc:d8:89:5d:71:
                    4c:ea:97:38:13:ca:55:48:a6:b9:93:5a:f6:ea:b8:
                    1a:bf:d2:a6:43:7b:32:c8:1b:69:30:23:40:49:11:
                    61:30:ae:83:0c:42:2d:6e:af:1b:4e:16:2a:49:2c:
                    4c:cb:84:31:b0:72:4e:82:13:72:40:f6:bd:d3:3c:
                    77:08:d3:e3:6f:24:d0:eb:b1:91:27:5d:91:19:71:
                    e6:00:44:8c:4b:5b:17:0c:22:1f:a8:92:d1:11:5a:
                    58:e3:6b:81:37:53:c0:c6:56:b9:98:51:c2:a4:ff:
                    c4:03:b3:4d:b4:9e:36:5b:ec:3e:ef:ba:dd:cd:c7:
                    b9:39:a6:3f:82:06:e1:78:0b:86:44:2a:d0:7f:7f:
                    13:26:40:32:03:6b:63:4c:3d:1c:53:44:d0:4d:f8:
                    e3:04:2e:29:39:c2:46:b2:53:a9:93:09:07:39:aa:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:15:FA:B2:54:01:50:28:8B:86:2C:DF:1A:69:72:CB:59:0D:0E:93
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:46:9e:60:45:00:0f:2e:77:1a:74:ee:f9:e1:56:f2:8b:0f:
         72:fc:b6:00:ac:b3:81:0f:5c:f7:9b:f4:f0:1f:07:d9:32:8e:
         ea:48:c0:59:26:b1:f9:6f:f7:f7:04:e3:ee:73:23:20:9b:1c:
         0f:b7:2c:c3:39:79:ed:d9:16:d3:d8:54:3a:da:c0:fa:e9:5a:
         ba:f7:df:a0:e1:95:7d:a0:7a:4c:b6:72:4f:7e:0c:32:7a:fd:
         22:4f:3d:c9:eb:61:cf:5e:bd:ca:88:a8:0f:00:28:b5:5f:d7:
         c3:a6:07:2e:3c:16:a1:03:e7:fc:cd:c4:33:7d:3b:f2:c2:bc:
         69:09:4b:5e:91:af:98:f1:c7:7f:cc:40:dd:d8:c1:41:04:73:
         c7:12:af:9a:4e:b0:13:53:9f:e1:72:4a:db:19:13:6c:e1:96:
         0d:7e:5b:4f:7c:ba:29:81:65:8f:fd:d1:68:49:f6:60:c8:a4:
         36:69:88:86:a8:19:cf:63:cd:6f:01:22:30:b4:a9:b3:84:c4:
         b1:c1:55:74:c9:a8:6d:b7:dc:6e:89:56:2c:b7:f3:0c:c6:3e:
         0f:f4:4f:8c:36:83:ce:19:9f:89:a5:21:f6:8f:ad:5c:7e:af:
         be:f3:e9:ec:32:8e:46:3c:3b:22:91:1a:10:2a:95:14:0e:64:
         d3:bd:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org