Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
File:                     3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          91l1oJi257WZTVfHmiAf/C4Vlq5U5x7zR15GTw6lBi4=
Subject key identifier:   01:DB:4F:97:A4:9C:90:9E:00:B7:AF:49:13:A4:B4:2A:F5:B4:DB:F1
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       7758BC511AC523FE082990834F54922437F4936F
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:03 +0000
ROA not before:           Wed 03 Apr 2024 23:03:03 +0000
ROA not after:            Wed 02 Apr 2025 23:08:03 +0000
asID:                     262798
IP address blocks:        177.129.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:58:bc:51:1a:c5:23:fe:08:29:90:83:4f:54:92:24:37:f4:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:03 2024 GMT
            Not After : Apr  2 23:08:03 2025 GMT
        Subject: CN=01DB4F97A49C909E00B7AF4913A4B42AF5B4DBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:e2:22:2c:23:21:1b:c7:ef:09:5e:03:98:
                    35:72:5e:d2:54:56:db:8c:40:0f:96:4b:57:60:61:
                    7e:b6:66:ae:b2:31:d5:0a:8b:53:a9:0a:94:b4:02:
                    18:f4:45:16:2e:ae:8e:4b:8d:1d:b1:78:86:72:fa:
                    65:bd:98:bc:8d:a1:c0:8e:4c:ee:90:5e:36:b5:2f:
                    80:bf:5c:82:da:ba:28:72:de:fb:69:c9:aa:04:d1:
                    a4:fe:c6:ed:c7:22:41:31:9d:c8:d6:24:1c:04:dc:
                    08:3d:ae:d9:db:60:8c:ad:37:33:d0:1f:40:91:c6:
                    59:d0:df:b3:78:52:9a:95:1b:c7:28:20:fa:14:73:
                    6f:48:68:f5:e5:35:c6:68:38:d8:f7:14:d6:19:3e:
                    a0:37:f7:9c:2d:7c:c2:09:84:ef:86:94:81:43:aa:
                    00:c0:39:19:aa:f9:5a:e9:78:83:33:d1:fa:bf:0f:
                    21:3c:14:4a:4e:fa:bd:e7:df:f9:7c:37:b9:ce:f3:
                    00:bf:cf:a4:0a:d0:ed:91:8b:c8:be:f1:71:ef:c1:
                    2d:af:03:0b:3d:65:f2:63:e7:32:71:26:ff:36:5b:
                    19:83:e0:53:f4:b1:2c:d3:b2:64:30:be:6f:f5:25:
                    84:5c:1a:84:a2:df:6c:15:d5:a2:47:92:cd:dc:cf:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DB:4F:97:A4:9C:90:9E:00:B7:AF:49:13:A4:B4:2A:F5:B4:DB:F1
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:94:8c:a8:42:dc:2b:cb:23:c2:7e:7b:b0:0c:0f:e8:bf:
         fd:53:0f:4f:52:73:9e:95:9b:b4:17:5d:a8:ff:5b:d7:46:97:
         ee:f7:71:45:8a:bc:c3:ca:b3:9a:b8:1f:24:ac:a3:c0:e4:02:
         6c:d9:de:52:4b:c8:a1:17:d3:6b:25:7a:79:9f:1e:8f:87:31:
         aa:d0:1d:fd:81:8e:c5:6a:7e:b1:be:21:7f:b5:74:04:10:d6:
         c5:0e:88:11:28:32:bd:55:a9:e9:84:7c:ce:71:4c:7b:36:4e:
         4e:3b:b1:91:61:2a:90:41:bd:a3:9c:59:6c:61:78:65:7f:b7:
         95:42:98:b2:43:33:03:7b:9c:53:3e:02:7e:b8:b1:88:c1:6b:
         1b:9b:ee:6c:4a:66:53:d7:b4:ee:ed:c7:d8:29:5b:14:cb:9c:
         8f:b4:49:55:b0:d2:bf:38:e5:b9:2a:e5:2e:27:f5:48:78:cf:
         37:1c:5d:9c:fe:b6:41:f7:ed:5f:c0:14:ff:f1:fc:3c:46:be:
         12:e6:89:9c:44:05:72:9a:bc:93:17:bd:03:df:0a:f1:93:99:
         ad:f4:ca:ce:bb:6b:65:85:da:b2:79:98:e0:30:1a:d5:bf:fe:
         d8:7e:50:96:d9:69:69:a4:7c:c6:11:11:0f:f9:1a:43:e6:f1:
         f8:10:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org