Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
File:                     3137372e32312e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          IZ723JueCPgIQGYr4+kS5dAwggKin2GMJlqluk738+8=
Subject key identifier:   C7:C0:FD:17:D3:06:FD:BD:96:7A:6E:F6:D6:0A:4C:44:9C:AF:29:BF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       3173DDC4C69023E1E0E8BA941B352D4031D845AA
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:57 +0000
ROA not before:           Mon 25 Nov 2024 16:58:57 +0000
ROA not after:            Mon 24 Nov 2025 17:03:57 +0000
asID:                     28667
IP address blocks:        177.21.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:dd:c4:c6:90:23:e1:e0:e8:ba:94:1b:35:2d:40:31:d8:45:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:57 2024 GMT
            Not After : Nov 24 17:03:57 2025 GMT
        Subject: CN=C7C0FD17D306FDBD967A6EF6D60A4C449CAF29BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:d7:55:20:63:b1:e4:9d:9d:7c:b0:5a:db:
                    e3:fc:52:b3:d1:32:98:94:2e:88:26:e7:e2:26:03:
                    4b:9c:88:83:1e:b2:42:94:5a:82:c1:29:d9:99:4b:
                    f5:0e:e2:80:b5:db:3e:7a:ce:01:c9:11:aa:72:d6:
                    45:54:74:8f:c0:3e:23:94:93:c6:12:5d:65:39:49:
                    27:c8:3b:4d:31:72:3a:6a:d7:9d:7c:21:15:eb:df:
                    e5:4b:0f:8a:4f:8d:99:4d:00:47:cf:ab:8f:17:a1:
                    92:f0:aa:b1:04:ab:2c:57:21:4e:d0:39:6f:4d:65:
                    cf:1a:b5:9d:b6:0d:fc:82:81:77:44:dd:dd:04:e8:
                    68:76:d3:9d:99:d6:29:87:56:35:13:b5:41:67:5c:
                    fb:cc:c9:67:0a:00:50:b3:3a:83:3b:a6:f7:b6:cd:
                    f6:41:09:83:a2:88:f9:07:fb:b4:79:10:cc:d6:8c:
                    c9:ac:82:b9:e0:47:ae:fd:af:9e:6d:4f:80:e1:2e:
                    c4:e6:c8:e4:8f:ed:e4:5c:00:a1:ca:b5:cd:95:3f:
                    ca:91:76:4b:2d:5d:53:52:24:46:8d:e6:2c:be:b6:
                    71:56:87:5a:53:e6:23:95:23:a1:b2:58:0c:1a:b1:
                    fc:ba:76:8d:5c:3a:aa:5d:61:87:0d:5d:0a:0b:cf:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:FD:17:D3:06:FD:BD:96:7A:6E:F6:D6:0A:4C:44:9C:AF:29:BF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:72:15:d0:74:51:c1:2a:8a:e8:84:b5:8a:84:82:40:c8:e3:
         9d:0e:4e:33:c5:16:e2:32:03:49:1a:4f:49:5f:9a:b5:73:2f:
         7a:dc:8b:31:b1:1a:fc:85:e7:aa:57:93:e4:5f:ac:a1:a0:f0:
         58:e5:1e:a8:d3:07:68:ef:e1:7b:f4:92:f4:4d:99:37:bf:44:
         96:59:ad:ec:58:2c:38:7f:bc:65:04:75:c2:57:a0:ef:b9:ab:
         ad:4d:40:f8:d7:3f:25:5f:b5:c3:34:1b:49:1f:f5:6b:20:c6:
         4b:9d:d1:8e:7c:4d:14:2b:42:53:53:46:6e:6d:f5:6d:c7:63:
         0d:ea:31:7c:8f:f8:19:55:27:30:bf:ed:18:72:2f:3f:17:e7:
         a8:93:ed:31:af:3c:97:e9:ac:83:ff:44:17:78:7b:06:11:fa:
         f2:00:11:56:0e:cc:7a:01:7c:33:c0:77:90:42:2c:68:da:96:
         a3:81:90:95:b4:27:4b:f1:55:13:52:5e:1a:a4:7a:55:9d:f0:
         c4:cc:b4:71:5d:6c:11:af:3f:16:1c:8a:8a:74:93:c4:d5:8e:
         af:55:6b:fe:07:45:04:cf:a1:c2:8d:34:bb:7e:4b:9f:42:7c:
         b5:1d:2d:6a:85:d4:96:d6:a3:68:f7:80:24:90:57:56:c3:e9:
         e5:30:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org