Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          hksMx+MMEoDnQ8YXWrgoQspxOVEJeOltwVnSVC57IxU=
Subject key identifier:   B7:D9:43:DB:EF:58:10:EE:74:1F:5B:96:12:0E:1F:E2:86:21:9F:E7
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       4D7CF9FBEC1C42272CD42F9F9EA9652DB3327E16
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:42:29 +0000
ROA not before:           Wed 22 May 2024 17:37:29 +0000
ROA not after:            Wed 21 May 2025 17:42:29 +0000
asID:                     262977
IP address blocks:        177.190.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7c:f9:fb:ec:1c:42:27:2c:d4:2f:9f:9e:a9:65:2d:b3:32:7e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:37:29 2024 GMT
            Not After : May 21 17:42:29 2025 GMT
        Subject: CN=B7D943DBEF5810EE741F5B96120E1FE286219FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:fc:22:71:99:0e:16:af:3c:4d:15:94:90:
                    55:c3:23:bc:9b:d2:8d:82:36:8b:e3:25:cb:70:1b:
                    59:e8:1c:22:e3:6e:f8:39:ca:94:ad:25:0f:bb:d8:
                    50:70:db:c6:9e:f6:25:70:e4:65:e4:08:4a:da:1b:
                    4f:65:fe:c5:dd:56:49:31:5c:98:7d:85:1e:66:b5:
                    b3:1b:f6:1e:f2:8a:89:01:fa:b2:a4:b3:94:b2:de:
                    d1:8c:0f:01:51:0b:30:84:31:b9:6d:2d:4b:b0:a3:
                    3c:97:dc:45:35:c4:22:80:72:e8:42:ee:d4:36:b9:
                    ee:7d:36:90:f3:b6:4b:be:0d:72:7d:2e:5f:5d:b0:
                    f1:2b:b3:2a:91:3e:b5:fc:81:7d:f2:25:f0:2c:45:
                    3a:70:f0:b8:52:35:6e:ef:bb:d1:f0:3e:90:24:71:
                    3c:d5:47:2e:50:b9:f1:61:7f:d8:24:7d:53:66:2f:
                    91:1c:bb:f9:e7:68:e7:c2:0b:e0:1d:3c:62:e1:99:
                    6b:41:b0:f8:dd:b3:23:4a:b9:0c:6d:18:3d:f6:07:
                    8a:c6:ce:d6:4a:a9:cc:60:49:59:74:74:b8:39:9c:
                    6e:c1:37:19:fe:93:cf:39:2c:4c:5a:88:a1:6f:bd:
                    e4:96:4b:c3:99:eb:7c:e5:49:dd:1f:51:9a:a7:c9:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:43:DB:EF:58:10:EE:74:1F:5B:96:12:0E:1F:E2:86:21:9F:E7
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:ed:8a:82:8f:61:e1:8c:c3:0a:87:0e:f6:47:da:23:57:
         1d:61:98:d2:10:9c:92:63:ac:91:0b:3e:c5:c9:5b:51:0b:ba:
         1b:a8:ad:94:e6:75:2b:2f:a9:db:7e:cc:9a:bd:01:b8:66:cf:
         f8:f2:6f:19:d9:3e:c6:ab:4b:67:95:a9:99:11:a9:c9:13:59:
         8e:07:1a:31:cc:52:c4:e1:e7:62:cf:7d:e5:03:bc:2a:af:cb:
         0b:23:cf:78:3b:e0:1e:6d:1c:c5:2e:cc:87:66:aa:a5:b1:90:
         92:f3:cf:36:16:20:fa:05:e9:3e:8a:9b:e3:31:06:70:cc:cd:
         f6:5f:8c:d5:6e:f7:2f:6d:c0:a8:9e:14:73:e1:8e:b0:15:ea:
         7c:85:77:d9:a5:fc:7f:91:1c:9d:cf:0d:f1:d3:f5:54:51:52:
         a9:e1:95:ac:94:52:49:b9:a1:71:71:f5:62:2c:85:ba:37:51:
         75:bd:5a:91:cc:9b:98:97:c2:a9:a6:71:ac:65:f7:4a:6a:04:
         47:18:02:0a:ab:1c:0b:32:5d:01:d2:9c:73:19:1a:5a:40:d2:
         74:ac:1d:e7:19:af:57:98:ca:dc:8b:a2:5b:9e:d6:f3:3b:3e:
         59:23:84:90:51:8f:52:3a:5f:03:65:d8:f2:3d:82:9a:83:98:
         0c:e4:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:49 2024 by rpki-client on console-fra.rpki-client.org