Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
File:                     3137372e32332e3130342e302f32322d3332203d3e203532393037.roa (raw, json)
Hash identifier:          +4q1aS+sH7Z4Yv/4kM6Az98qd5WOhYAopelllHd+Fbs=
Subject key identifier:   BF:A1:55:5E:A6:CA:DB:A8:28:17:C1:4B:26:B1:9B:6F:4B:E9:17:96
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       13C979C9258F940CE305CAFFEE1B12474B8D24A5
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
Signing time:             Thu 04 Apr 2024 03:07:15 +0000
ROA not before:           Thu 04 Apr 2024 03:02:15 +0000
ROA not after:            Thu 03 Apr 2025 03:07:15 +0000
asID:                     52907
IP address blocks:        177.23.104.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:79:c9:25:8f:94:0c:e3:05:ca:ff:ee:1b:12:47:4b:8d:24:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Apr  4 03:02:15 2024 GMT
            Not After : Apr  3 03:07:15 2025 GMT
        Subject: CN=BFA1555EA6CADBA82817C14B26B19B6F4BE91796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:a7:6c:1f:2a:f3:7e:09:35:d6:5a:eb:dc:
                    2a:de:73:76:b8:36:47:f1:bc:c2:11:b5:12:3d:57:
                    fb:65:e0:a9:fa:f7:e0:d6:18:23:bf:bc:a9:e3:31:
                    8f:5a:07:71:55:96:4e:16:07:a4:ca:34:39:fa:ea:
                    40:86:cd:14:63:e3:af:2a:fc:37:87:9e:d0:42:7e:
                    71:cc:03:fc:d2:f6:44:39:48:9a:a0:54:57:27:68:
                    45:ff:aa:ec:a9:06:37:be:ad:95:5d:b9:61:28:1b:
                    91:5f:e2:20:f4:f5:c5:bd:fd:6a:b7:0f:40:d9:b8:
                    2c:6e:74:75:2c:c6:aa:fa:1e:44:7e:df:7b:49:f0:
                    9e:a3:ac:27:c4:0e:3f:35:d9:3a:55:ea:4c:2e:fa:
                    ca:c7:3f:9b:4e:c6:53:cd:9d:ee:3c:f0:de:5c:14:
                    e1:eb:44:95:02:c7:d2:15:39:b4:03:de:27:d9:1a:
                    e4:b6:12:5a:23:63:00:cc:03:a4:1a:2a:3a:32:2a:
                    ea:39:9c:e8:92:7a:eb:d9:ae:31:d4:d8:71:89:72:
                    6c:d3:cf:d7:83:71:64:98:4c:05:3b:bb:8d:be:01:
                    61:ea:bb:a1:ba:ef:8b:8a:a4:9a:51:5e:bb:67:a7:
                    e3:be:fb:6f:fe:db:d7:02:00:08:a4:b9:42:2d:32:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:55:5E:A6:CA:DB:A8:28:17:C1:4B:26:B1:9B:6F:4B:E9:17:96
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:09:83:ab:56:b7:61:41:81:fe:f7:fb:dd:56:11:d3:5a:05:
         77:11:92:3c:e0:06:19:96:10:57:f4:e6:ed:ae:35:6c:28:e7:
         4e:f7:97:27:a2:89:06:9e:04:e9:d4:47:97:62:a0:51:af:ce:
         e3:3e:86:d5:4f:9f:2f:81:fd:43:d2:5b:e3:f8:ca:2b:4c:fd:
         d5:17:93:6c:84:b2:dd:fc:6c:e6:d9:fd:38:3a:d3:39:48:37:
         fc:84:bd:78:ec:60:e7:fc:f6:4d:6e:84:6e:59:20:5a:43:90:
         90:6b:67:39:b5:ff:95:2c:bc:06:e1:54:06:59:f1:f0:8d:2c:
         e0:1a:d3:97:f5:92:66:56:b8:41:09:9d:6e:02:1d:c1:11:4a:
         97:e2:78:8e:bb:d6:ee:65:73:de:40:93:66:1e:7e:7b:ad:42:
         c6:d0:3a:c3:39:1c:01:09:e4:ca:3c:f2:1a:1c:10:67:ab:ff:
         13:f3:f0:0c:c0:2c:6f:18:cf:d6:93:12:b8:fa:6c:88:2a:8f:
         a7:98:bc:18:37:5f:ab:91:9d:33:09:3c:67:03:a7:e6:c8:b7:
         c4:38:5b:4e:ac:1f:c1:ec:9f:04:3e:0c:c7:60:f5:30:00:f1:
         64:b0:9a:72:bc:92:86:b8:59:3b:20:50:f8:ad:10:45:ba:31:
         f2:cd:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:23 2024 by rpki-client on console-fra.rpki-client.org