Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
File:                     3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          +I90vIO/atVAb/J6v7qV55jdcGUxcS8tsJE8rNpRdBg=
Subject key identifier:   28:51:23:4A:0D:83:32:C4:C8:BE:3D:C5:08:E7:C6:47:EC:22:FB:FF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       5D70E6C2AC967CDDD23F3239147E031D0EC364D3
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 25 Nov 2024 17:04:09 +0000
ROA not before:           Mon 25 Nov 2024 16:59:09 +0000
ROA not after:            Mon 24 Nov 2025 17:04:09 +0000
asID:                     262272
IP address blocks:        177.154.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:70:e6:c2:ac:96:7c:dd:d2:3f:32:39:14:7e:03:1d:0e:c3:64:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:09 2024 GMT
            Not After : Nov 24 17:04:09 2025 GMT
        Subject: CN=2851234A0D8332C4C8BE3DC508E7C647EC22FBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:d7:f1:80:fe:e2:26:73:ee:70:fa:4e:6f:
                    f4:e7:43:c3:11:42:94:51:9d:ef:45:b4:cf:4a:28:
                    5f:60:50:7d:0b:de:19:4e:33:1b:c6:74:d7:e3:b3:
                    31:94:07:8f:29:c5:9d:a9:f6:51:d3:52:ac:7b:e3:
                    a3:4d:60:c2:d6:a4:2b:ff:4e:b1:81:6f:be:17:91:
                    8b:3b:33:44:cc:84:21:39:67:9e:f9:5a:1c:55:3b:
                    e7:0c:d7:7f:4c:77:89:9c:e0:33:38:88:64:50:0a:
                    4e:f7:92:bc:5f:36:06:f0:a2:74:96:64:ec:43:70:
                    86:8c:d2:62:26:18:13:38:bc:b5:1c:67:28:cc:ef:
                    00:68:b0:3f:25:d8:15:dd:3c:94:32:e2:94:49:c0:
                    01:38:29:e4:a1:d8:03:bc:19:25:5e:4a:cc:6e:c6:
                    ea:a1:b6:17:02:83:cb:76:57:f2:aa:07:c8:d5:b3:
                    af:69:61:4a:69:39:89:84:42:f7:73:cc:2b:59:d9:
                    f2:83:9e:a5:2a:88:77:5f:54:13:ec:56:58:fb:95:
                    b5:71:9c:58:c6:94:fd:9f:92:2e:e1:b0:f6:89:6d:
                    ee:98:51:24:9d:ab:4c:f0:8b:b1:72:7f:fb:54:f9:
                    ac:1e:91:1e:aa:25:e8:36:8d:75:3f:37:42:a5:3b:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:23:4A:0D:83:32:C4:C8:BE:3D:C5:08:E7:C6:47:EC:22:FB:FF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:32:6c:68:b9:83:c4:f4:21:d6:92:d7:29:f0:94:9c:15:39:
         cf:54:90:c7:a5:70:2f:a3:ad:4c:81:ce:f1:f3:d4:a6:1f:59:
         28:ca:b2:93:15:02:1b:9e:d6:55:c7:1f:ed:ff:c5:e1:af:35:
         97:09:6b:f9:64:3e:1d:4c:2c:ad:5a:f5:27:9d:1f:89:29:7c:
         2b:42:13:63:6e:a9:4f:fe:c8:99:6b:11:7d:a7:55:7c:56:7c:
         78:f9:f4:9d:f7:dc:20:32:7e:b8:db:77:48:35:fe:84:12:dc:
         81:14:e0:b4:42:cf:27:c7:83:45:16:8e:2a:cf:e7:c2:78:93:
         ca:1c:20:0f:7d:46:6a:22:ed:23:8c:e7:a6:9e:7f:78:f7:fb:
         a2:f1:5f:ec:d8:c1:ce:dd:66:23:dc:f8:ca:5a:22:25:8d:e3:
         e1:76:0e:5a:ca:00:82:4c:c2:fc:01:f8:54:90:a1:16:30:a2:
         a8:d3:95:ac:82:65:f7:87:f9:47:d4:d8:eb:4f:56:dc:dc:9c:
         d5:87:4e:8e:dc:25:5d:56:63:26:1d:0c:ea:fc:63:12:be:c5:
         eb:68:0f:b1:7b:c3:8a:4f:50:3f:f6:cb:f8:6b:d3:1c:c9:3a:
         32:a8:01:90:41:1c:b6:d5:e6:b1:42:87:24:db:af:4c:35:7d:
         34:df:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org