Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
File:                     3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          /rK5XG2fFhZtq0piOD+Dbvas/C+M/G5l+7FzJS0gcIY=
Subject key identifier:   55:F0:8A:B7:E2:01:B8:38:AB:DB:86:39:6B:E7:34:33:D8:71:E5:17
Certificate issuer:       /CN=586B4257D2355E33CF9FAB48A3574677286D3B92
Certificate serial:       29B754C981CA3705133008788737682CB4974034
Authority key identifier: 58:6B:42:57:D2:35:5E:33:CF:9F:AB:48:A3:57:46:77:28:6D:3B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
Signing time:             Thu 04 Apr 2024 17:10:14 +0000
ROA not before:           Thu 04 Apr 2024 17:05:14 +0000
ROA not after:            Thu 03 Apr 2025 17:10:14 +0000
asID:                     262908
IP address blocks:        177.38.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:54:c9:81:ca:37:05:13:30:08:78:87:37:68:2c:b4:97:40:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586B4257D2355E33CF9FAB48A3574677286D3B92
        Validity
            Not Before: Apr  4 17:05:14 2024 GMT
            Not After : Apr  3 17:10:14 2025 GMT
        Subject: CN=55F08AB7E201B838ABDB86396BE73433D871E517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:2d:76:77:f1:31:5d:ce:17:bf:e3:ff:e4:
                    b1:6c:d4:1b:7e:c4:54:40:42:bc:b3:84:5c:46:2f:
                    4e:b4:3d:bf:eb:d1:0c:c9:3f:26:4f:d1:00:92:da:
                    8d:7c:b7:dc:5c:10:4d:fe:7f:11:ed:92:53:d6:a7:
                    1a:6e:eb:dc:87:c1:e0:dd:fc:0b:24:cb:90:72:0a:
                    95:5c:eb:b0:6c:72:6c:65:ef:39:68:fd:73:0c:38:
                    6a:3c:53:7e:7f:e3:15:2d:2d:ba:e7:2e:9a:f9:d0:
                    82:5a:e0:ee:48:7b:3d:2e:93:1d:22:f4:30:12:16:
                    12:00:ea:c7:86:d1:13:18:ec:b3:46:38:b8:1a:6b:
                    df:8e:59:4c:da:51:ba:49:a8:f3:00:ce:eb:3c:c3:
                    94:7e:67:97:50:ac:80:d0:3e:b0:eb:c8:15:19:93:
                    31:67:fd:3f:bd:c5:37:1b:03:ac:36:6f:8d:79:e3:
                    46:ba:6d:09:ab:fc:dc:26:30:a7:56:00:72:ae:e7:
                    88:93:11:40:a0:7d:95:3b:a1:a4:81:ce:0e:9c:9f:
                    ba:6d:18:ef:10:aa:91:87:13:20:bf:81:d6:ae:7d:
                    7c:2d:1f:17:d2:84:7a:d9:8a:b9:75:05:1e:fa:9f:
                    9f:3b:7b:25:c8:ae:02:4d:b1:1c:59:a7:3f:0e:c2:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:8A:B7:E2:01:B8:38:AB:DB:86:39:6B:E7:34:33:D8:71:E5:17
            X509v3 Authority Key Identifier:
                keyid:58:6B:42:57:D2:35:5E:33:CF:9F:AB:48:A3:57:46:77:28:6D:3B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/586B4257D2355E33CF9FAB48A3574677286D3B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/586B4257D2355E33CF9FAB48A3574677286D3B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/1/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:f2:6d:d5:74:a9:14:a5:e3:48:08:a7:df:e6:3e:79:84:
         8a:e4:4d:cd:94:74:86:1f:68:cf:b2:51:d0:db:d6:9f:c7:a9:
         54:9e:7a:31:07:ad:77:2b:05:00:e7:f6:b8:73:8b:fd:6d:38:
         0a:4b:0b:e3:75:db:89:46:8a:14:11:7b:30:cf:10:3f:5c:68:
         fa:09:94:d3:a4:a4:7d:33:3d:4b:01:30:46:27:dd:26:4b:99:
         e2:a6:34:07:b5:61:79:7f:c2:f0:ba:76:63:64:f9:07:52:6e:
         a4:a6:cc:1e:04:2b:ce:18:9c:02:ee:22:de:f0:a8:7f:ce:a7:
         f5:00:35:c0:ab:74:60:d5:5a:54:4a:4c:87:00:8a:4c:e1:46:
         1b:39:53:45:52:19:c3:d7:6b:7a:d4:17:21:99:3d:af:95:b5:
         06:9d:4b:b2:db:e1:50:3a:1d:e3:d0:9b:a0:30:17:97:86:59:
         0a:e9:2d:6e:9d:53:b5:09:3d:b2:e9:92:93:b8:7f:3b:f4:b7:
         2a:75:4c:7c:a7:6c:66:da:37:27:08:05:d1:d8:cf:06:9a:1c:
         25:bc:28:4d:b0:62:f1:3d:81:de:c2:ba:83:e8:7a:06:65:4c:
         59:12:f1:d8:4c:dd:12:84:40:c0:b0:8b:45:b9:c5:79:69:b5:
         4d:87:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org