Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          FehdbnbA1SNHRZ+pKr4WhXN4GyvXa24nw3MQHL0B2Ec=
Subject key identifier:   B6:A3:88:9F:2D:F3:60:06:70:4E:9D:DB:80:45:AF:78:B2:74:9B:0D
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       682EB049D4C9A004D061687D92AA2979E752E9C2
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:04 +0000
ROA not before:           Wed 03 Apr 2024 23:03:04 +0000
ROA not after:            Wed 02 Apr 2025 23:08:04 +0000
asID:                     262798
IP address blocks:        177.129.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:b0:49:d4:c9:a0:04:d0:61:68:7d:92:aa:29:79:e7:52:e9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:04 2024 GMT
            Not After : Apr  2 23:08:04 2025 GMT
        Subject: CN=B6A3889F2DF36006704E9DDB8045AF78B2749B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:20:13:3c:39:2d:c9:29:4e:c8:54:be:5d:e4:
                    71:8c:d0:3e:b1:30:1f:a2:91:b9:9b:eb:fb:84:6d:
                    04:f6:12:87:ee:b1:3e:c0:86:59:63:f5:ba:b4:c0:
                    94:86:9e:b1:cf:8a:0a:06:ea:64:d5:bf:46:a2:a6:
                    b7:0d:a0:82:ca:38:cf:fa:31:8b:c3:9a:1b:15:dc:
                    66:b4:87:83:01:a3:99:f4:47:f6:e8:b1:46:2f:cd:
                    bb:9f:8a:8b:20:96:f6:f9:b8:39:51:bf:b5:a5:c5:
                    34:85:0a:a1:80:cf:c2:0f:fd:7a:13:2e:4e:20:12:
                    d5:5a:55:6a:1f:52:4b:f5:bd:49:90:ed:60:71:b7:
                    7c:f6:e7:5e:0a:7d:8c:fd:77:32:85:76:f9:da:f6:
                    0f:a6:9a:fd:92:36:13:dc:d9:a9:78:20:e7:9e:8f:
                    05:f4:c4:0e:60:6b:6e:3f:3a:b0:ad:e7:19:43:d1:
                    b2:ff:ef:17:57:d3:b7:54:36:08:67:73:a0:90:4d:
                    c8:ee:34:99:4a:fa:cd:05:14:ef:99:78:9c:b5:72:
                    fd:58:44:4a:61:7a:24:05:af:40:3f:8a:c1:47:d5:
                    5a:d6:40:1c:c0:df:9c:ff:6d:10:2d:78:38:9c:62:
                    da:1e:40:27:40:7a:ec:72:41:12:ce:12:80:49:9e:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:88:9F:2D:F3:60:06:70:4E:9D:DB:80:45:AF:78:B2:74:9B:0D
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:5b:d0:91:af:29:f8:e6:ec:fe:f6:e4:22:a1:3f:58:67:
         0b:c7:f7:6d:26:15:4b:cb:08:99:e5:79:7a:1a:93:16:48:e1:
         46:c7:cd:f4:1e:fe:d9:9c:7d:d4:c1:a5:78:1e:7c:59:bd:5b:
         56:0b:02:7e:3d:34:2d:e3:6d:46:11:b5:74:0e:59:cd:fa:b1:
         dd:36:17:c7:f8:2f:b1:78:02:04:11:0c:94:04:02:96:64:68:
         72:9e:a2:a0:8f:fd:c4:67:6d:7d:2e:e9:76:87:8a:64:1b:a3:
         8d:6e:1b:11:7b:6f:18:ff:3b:98:bf:e8:59:b4:d4:bf:0c:44:
         b3:33:64:58:cc:e1:b7:0b:7d:6d:b8:19:21:80:3f:ce:76:34:
         50:b9:d4:fd:d8:ef:1f:32:0c:74:9b:8c:90:dd:fe:6e:c8:6a:
         cf:39:84:fe:43:69:93:23:7f:80:99:4e:4d:5b:fd:b9:c1:92:
         21:ea:ef:fc:76:10:43:7e:30:14:a6:fc:35:1d:18:ae:80:51:
         b5:11:14:44:f9:8a:85:d5:19:86:d3:59:14:3c:70:b2:6a:39:
         ca:e4:da:62:5e:2b:47:d4:b0:34:af:cb:95:2f:ff:c2:92:45:
         96:62:4c:65:24:59:3f:46:fa:ee:15:81:8e:2c:88:c0:bb:88:
         29:c3:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org