Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa
File:                     3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa (raw, json)
Hash identifier:          cQVZUZfShgBS1zULFuLswoCi7Wo/n4RnMO8YtueBPIA=
Subject key identifier:   6A:7F:53:A0:69:FB:9C:1D:FE:C2:84:39:59:A9:0C:03:47:76:7E:1E
Certificate issuer:       /CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
Certificate serial:       19B8908520A4829A946340F674FE4D4C2D62318F
Authority key identifier: E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa
Signing time:             Thu 04 Apr 2024 01:42:55 +0000
ROA not before:           Thu 04 Apr 2024 01:37:55 +0000
ROA not after:            Thu 03 Apr 2025 01:42:55 +0000
asID:                     263159
IP address blocks:        177.93.160.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl
                          rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b8:90:85:20:a4:82:9a:94:63:40:f6:74:fe:4d:4c:2d:62:31:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
        Validity
            Not Before: Apr  4 01:37:55 2024 GMT
            Not After : Apr  3 01:42:55 2025 GMT
        Subject: CN=6A7F53A069FB9C1DFEC2843959A90C0347767E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:8a:c3:3a:52:3b:db:bf:fe:19:86:c5:ce:
                    6c:97:7c:96:47:55:73:bf:63:65:67:a0:db:f5:63:
                    f4:8f:3f:28:2c:da:07:13:ee:08:64:eb:ae:b5:62:
                    4f:63:09:0b:a6:00:37:c7:10:93:48:77:96:0b:3d:
                    38:49:b8:3f:e4:5e:9f:c9:04:49:ff:0c:55:59:12:
                    e7:5e:cf:ff:7c:a9:4d:0e:a1:79:28:80:ac:89:9d:
                    ac:78:46:8c:2b:f5:13:3f:b5:06:35:36:06:4b:09:
                    ef:80:dd:1a:fb:0f:28:9c:bd:09:d8:08:9a:8e:b2:
                    01:64:20:13:32:56:67:ba:be:b8:30:f6:cb:d6:58:
                    ed:5e:74:c6:89:3f:e5:c8:1d:51:74:82:ec:60:48:
                    6d:cb:62:20:67:54:49:ad:c7:30:db:30:80:e3:ab:
                    3c:56:21:40:4b:d2:68:40:38:c0:6f:7d:f3:38:36:
                    d1:81:c5:8f:ec:b8:fe:ff:a3:68:da:78:4e:97:40:
                    7e:ee:da:b8:33:37:6f:44:ef:eb:af:9f:c3:80:1a:
                    a8:5c:ad:68:86:2e:84:aa:f8:c7:ee:e1:da:ec:d4:
                    c8:b6:ae:1b:9d:a1:83:38:85:7f:36:93:05:8a:b9:
                    b5:7f:de:53:93:5c:37:8e:f5:50:2a:6e:6b:12:9d:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7F:53:A0:69:FB:9C:1D:FE:C2:84:39:59:A9:0C:03:47:76:7E:1E
            X509v3 Authority Key Identifier:
                keyid:E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:ca:ed:93:ac:47:5f:cd:86:90:92:aa:50:30:fa:ae:ec:fa:
         d6:43:8d:dc:d2:78:aa:f6:ae:50:2a:fe:83:76:fc:b3:94:61:
         ca:57:a9:15:ac:50:34:d1:6f:be:10:cb:24:1d:e1:85:f9:8b:
         2c:75:8f:23:8c:94:43:93:b2:cd:b1:2d:b1:ce:b2:b6:80:f7:
         2c:7d:2c:9a:e0:e3:48:ba:79:8d:e8:6f:6d:5f:bd:06:fc:7a:
         8a:03:56:5d:f6:54:a9:e7:0b:d4:d2:e8:ab:04:7d:46:1d:71:
         b0:97:93:57:7e:86:b2:84:59:f4:a2:3a:c6:7b:5c:b6:2f:aa:
         6d:45:95:c9:ff:a1:da:e5:0d:17:9e:8d:a7:08:48:06:97:5b:
         c4:ac:43:53:65:12:26:35:c7:3b:80:e3:c3:f2:6f:80:00:c3:
         06:7f:71:f3:6a:1c:25:d8:23:88:ab:bf:32:49:a8:46:84:c9:
         5d:7f:f0:56:59:78:87:67:ea:a6:61:a4:99:10:63:c2:66:d5:
         95:62:b4:9a:07:45:35:6b:f0:c6:81:01:33:11:03:a8:89:ed:
         36:2c:94:55:85:9d:e1:9a:94:44:4b:b3:5d:48:f0:ea:9d:73:
         41:e6:a4:6a:93:87:89:33:dc:50:8e:68:23:44:9c:d4:2b:96:
         0e:3b:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org