Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa
File:                     3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (raw, json)
Hash identifier:          QOXMbQRa1BuHD72gfU4AC4mzRnhmbn8Y5jfiL6VJsEw=
Subject key identifier:   B9:29:4E:5D:48:17:36:4D:F2:E5:59:5D:E8:2B:E7:B2:06:74:A0:8E
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       312691A95B168C5A4CCB42BEC5B2514045F01E67
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa
Signing time:             Thu 04 Apr 2024 02:47:54 +0000
ROA not before:           Thu 04 Apr 2024 02:42:54 +0000
ROA not after:            Thu 03 Apr 2025 02:47:54 +0000
asID:                     262496
IP address blocks:        177.66.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:26:91:a9:5b:16:8c:5a:4c:cb:42:be:c5:b2:51:40:45:f0:1e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Apr  4 02:42:54 2024 GMT
            Not After : Apr  3 02:47:54 2025 GMT
        Subject: CN=B9294E5D4817364DF2E5595DE82BE7B20674A08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a2:b3:e9:57:97:e7:b3:e1:7a:45:6e:92:2c:
                    c5:17:2a:84:13:db:55:9e:fd:57:6c:8c:7b:52:37:
                    f6:b2:7c:09:78:36:ba:60:5e:9b:49:83:ba:e1:6d:
                    20:65:ff:24:3d:ae:05:48:eb:e7:3b:96:d1:ef:d6:
                    bd:d2:4c:11:08:b3:3d:0d:ee:1a:18:11:7b:ce:3b:
                    08:21:76:45:1b:a9:d7:ff:6f:52:c2:47:bb:76:3a:
                    43:57:ff:2b:3b:5f:77:c9:bd:3d:b8:db:dc:db:34:
                    90:f9:43:cf:9f:cb:98:e9:09:2b:ef:ae:d0:b6:7b:
                    3f:4a:1f:61:ea:0c:46:a4:b6:a0:c5:1f:b3:cc:5f:
                    08:38:76:03:fe:4d:7b:c1:24:43:de:c9:ed:3e:c9:
                    6a:23:fe:9c:b9:bf:91:de:e7:ba:f0:62:41:71:6b:
                    02:44:29:e5:f9:32:d5:20:47:4f:3e:a1:6e:5f:f5:
                    d7:0e:6d:86:29:84:a3:a0:f2:bf:f5:bb:d2:b9:6e:
                    85:1b:f0:50:42:0d:91:3a:b4:fa:40:78:84:3d:c3:
                    2a:b6:b0:1e:79:18:30:ab:91:1a:de:bd:0a:96:f0:
                    dc:e3:55:24:ea:52:41:d9:61:30:e2:79:4e:c6:f2:
                    db:3a:87:5d:c6:71:53:9a:bf:2d:f4:e5:28:95:b2:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:29:4E:5D:48:17:36:4D:F2:E5:59:5D:E8:2B:E7:B2:06:74:A0:8E
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:32:af:a2:99:11:1b:2f:af:d2:ed:f2:62:45:52:10:fd:
         c3:14:7a:a6:f6:89:a1:b3:56:a9:dd:7f:6b:2d:00:66:5b:56:
         0e:9f:11:10:c7:b0:56:34:0e:64:8a:ef:1a:de:88:2f:90:4c:
         5c:c0:91:43:af:2e:33:72:64:c8:64:61:ea:24:73:48:67:a1:
         82:c3:4e:bd:6f:ba:c6:53:5a:e3:e4:f1:e4:d1:10:df:7c:f9:
         e7:db:72:be:1d:e0:79:79:60:a0:59:98:34:22:26:88:6a:00:
         5b:7b:80:0c:97:52:be:1f:2d:93:e6:13:52:5b:11:d0:23:90:
         7f:e3:f7:be:3d:8e:df:0b:30:7d:2a:d3:34:ca:03:f4:0d:a8:
         d7:31:b8:1b:9c:6f:28:ad:6c:5a:e3:80:06:15:52:22:8d:8e:
         f6:b1:9b:04:24:e1:7c:ff:99:cf:5f:9b:3f:39:40:bb:7b:2a:
         d2:29:ec:89:b3:55:7f:75:04:6e:10:4c:06:b5:11:8f:45:11:
         4a:f4:39:37:56:2e:08:96:a0:9e:be:e7:53:a1:53:7b:d7:97:
         5e:25:9b:f9:b2:dc:bb:ce:90:f0:a4:4f:0f:51:03:c2:40:79:
         5e:ce:45:80:36:dd:7d:13:a5:62:5f:58:6c:5f:ec:de:0d:cc:
         f8:54:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org