Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
File:                     3230312e37372e38342e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier:          5ePxCxV1gG9nlI5ZGJld+BndNYrum4AuRG/QpoTZlcY=
Subject key identifier:   62:CA:A6:91:3B:B7:8C:BE:D0:6B:0A:9F:83:34:28:F3:B8:96:50:A8
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       4254567E400869CAB3C86ABD6164FF3ED76C4B80
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
Signing time:             Thu 04 Apr 2024 11:18:16 +0000
ROA not before:           Thu 04 Apr 2024 11:13:16 +0000
ROA not after:            Thu 03 Apr 2025 11:18:16 +0000
asID:                     28646
IP address blocks:        201.77.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:54:56:7e:40:08:69:ca:b3:c8:6a:bd:61:64:ff:3e:d7:6c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Apr  4 11:13:16 2024 GMT
            Not After : Apr  3 11:18:16 2025 GMT
        Subject: CN=62CAA6913BB78CBED06B0A9F833428F3B89650A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:bc:65:d4:6b:77:09:a5:7a:d9:d4:ae:4b:
                    34:84:9c:cc:96:3d:d7:e8:99:39:a0:d7:98:35:bb:
                    f8:34:00:3c:39:48:a6:4e:c2:6a:87:45:92:f0:88:
                    49:46:ee:ee:36:b8:53:de:65:98:83:95:c5:7a:43:
                    85:50:fc:e4:41:5a:3d:c1:35:9f:94:7a:f4:f8:41:
                    a8:87:2e:b9:5b:64:91:03:b4:d1:53:0e:a3:98:6f:
                    b9:c9:a3:e3:57:b8:64:a6:fc:a0:bb:a0:e4:be:39:
                    45:71:e9:33:74:64:2e:c3:ec:92:3f:58:28:01:4f:
                    bf:81:06:f4:64:8c:17:b1:99:4f:23:55:81:db:05:
                    74:e4:b1:90:f2:54:d9:0a:3a:92:60:50:1c:c9:7c:
                    5d:3a:41:8a:43:62:94:cd:b0:da:7c:a7:89:36:21:
                    9e:ac:0d:e7:83:f9:0d:23:82:9d:4e:31:5d:c4:38:
                    a1:1f:79:72:be:0f:e4:47:a6:27:2f:ed:ea:0e:ea:
                    d0:ca:10:5f:b7:9f:63:c3:be:bd:87:af:78:04:b7:
                    b2:4b:85:86:56:ab:32:04:41:33:3d:91:2a:8d:4e:
                    f8:55:c7:03:46:8a:a7:05:f5:78:97:eb:54:e0:ea:
                    59:d3:63:a1:a3:4e:ed:99:7a:1d:32:8b:ec:d1:b0:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:A6:91:3B:B7:8C:BE:D0:6B:0A:9F:83:34:28:F3:B8:96:50:A8
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:61:1a:31:1f:67:99:e9:12:66:71:8e:25:38:4d:ff:50:31:
         14:3b:65:c7:40:b4:c4:64:46:fa:98:99:98:4e:b8:76:fe:49:
         27:31:d7:a8:fb:46:4e:82:84:a0:fb:6c:15:90:fe:b5:63:0f:
         d7:f0:bf:4f:78:5f:fb:88:2a:fc:12:4b:12:59:03:c4:5c:f0:
         d0:19:64:b1:58:67:74:cf:1a:6d:62:45:44:dc:ae:b1:98:aa:
         6e:a6:5b:38:a1:77:a3:4b:67:e6:0c:86:78:5e:f4:1e:a0:7c:
         b8:8b:7e:d6:3d:9d:c0:78:71:33:cc:d3:51:5d:ed:e1:b8:2f:
         fa:80:8c:5a:4d:11:a8:e7:26:f1:46:44:04:0c:6c:28:d0:b6:
         f6:2c:60:78:cf:23:0e:53:17:04:39:96:e7:7f:98:9f:b6:aa:
         e5:bb:0b:01:5a:1d:bd:c5:de:f7:c7:4f:20:ff:39:04:e6:e8:
         73:31:81:d1:dd:28:2e:59:aa:ac:08:96:24:5d:dc:e3:3c:68:
         1b:62:10:5a:34:5f:30:50:cd:a7:33:48:be:3f:ca:20:27:83:
         69:3b:79:b6:da:e2:fe:ed:6d:77:15:2b:7c:01:fd:37:6d:c1:
         6f:20:3a:69:dd:27:16:aa:4c:3e:c1:0d:15:59:dc:8d:6d:5c:
         5a:57:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org