Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          SLrzTC9nAB6qJpiaOKaC6JOm+nkJSPytpbVzILdsvPo=
Subject key identifier:   34:60:54:92:E4:B5:AA:94:A2:3F:06:79:50:EB:34:5A:93:51:82:DA
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       4689DE81862882EA9F4D7F53CBCDF047CD1575B5
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:09 +0000
ROA not before:           Wed 22 May 2024 17:40:09 +0000
ROA not after:            Wed 21 May 2025 17:45:09 +0000
asID:                     262977
IP address blocks:        177.190.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:89:de:81:86:28:82:ea:9f:4d:7f:53:cb:cd:f0:47:cd:15:75:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:09 2024 GMT
            Not After : May 21 17:45:09 2025 GMT
        Subject: CN=34605492E4B5AA94A23F067950EB345A935182DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:f7:a2:de:11:66:87:54:e0:75:5c:f7:f5:
                    4e:7a:d7:1a:cd:7c:db:16:ae:1d:a7:33:cb:2b:15:
                    79:d6:fb:da:e0:92:8f:01:92:de:3c:32:1f:d6:bb:
                    9d:bb:fc:1f:a8:3e:68:26:63:c9:fd:52:85:8f:62:
                    f6:59:55:0b:d7:ab:b8:69:d4:2f:48:03:6e:9f:71:
                    f2:cd:24:e5:b7:a5:70:8c:16:4b:46:12:7b:a4:da:
                    34:37:2f:9e:67:23:27:a9:3f:fd:86:73:b8:4e:2b:
                    d1:8a:fe:ef:34:ee:1a:02:18:4d:32:68:f5:62:36:
                    fe:85:6a:90:62:43:bd:ae:70:e0:6f:4d:fd:34:c0:
                    22:e7:77:94:e5:b2:d7:81:f4:5a:55:1c:45:11:be:
                    38:fd:74:14:48:7a:8b:9b:50:ab:63:87:20:87:b4:
                    8e:e4:94:57:90:4e:f6:f7:19:c0:ae:a9:ff:c9:d6:
                    df:f9:e6:5b:79:8e:d5:57:6c:c4:bf:57:fe:07:1f:
                    d9:0c:eb:18:13:2f:12:75:35:f1:6f:d1:c4:e1:eb:
                    f6:91:92:ec:de:e3:da:e5:f6:3b:73:0a:bb:1b:02:
                    9e:04:87:43:0f:3f:2d:90:f9:02:a6:95:48:6b:ea:
                    72:c2:f4:0c:57:e6:30:fa:1e:d6:49:a0:a4:c3:bb:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:54:92:E4:B5:AA:94:A2:3F:06:79:50:EB:34:5A:93:51:82:DA
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:8e:a1:da:a2:58:47:7a:46:6a:fb:98:b9:9d:16:ed:a3:
         38:aa:10:0a:d1:61:70:96:24:73:86:57:87:8a:df:6b:5c:f9:
         e0:46:cc:5e:a0:d3:20:bf:1f:4a:66:9e:09:fa:73:d9:a9:2e:
         b1:68:c9:ba:ea:ee:b7:72:f2:1e:3d:8b:c2:a0:67:9c:85:dd:
         21:bb:97:5e:3b:49:af:69:ae:22:fd:4a:44:63:c5:e5:ea:fe:
         9b:c9:1a:f8:d5:68:d3:9e:4f:bd:fb:a1:bd:29:c0:5b:01:41:
         48:da:10:a2:68:f1:0f:a2:89:e9:57:9a:37:d6:23:8f:31:c6:
         b0:af:d2:cf:eb:99:f9:92:7d:e0:70:4c:b6:52:c8:c0:09:64:
         47:50:eb:9e:c7:e6:65:88:72:65:84:b9:2a:db:dd:13:75:66:
         3b:ec:b5:ee:aa:3c:fd:c8:be:41:42:b4:75:95:09:9c:ca:00:
         43:7b:f3:35:91:9b:cf:75:48:28:52:c4:e5:13:1a:9a:b2:8c:
         0a:7a:9b:cb:62:d6:67:1b:37:5e:00:f8:68:21:9c:b1:66:84:
         9b:8d:e9:6c:8f:3f:90:5f:78:df:9d:d0:be:58:4f:5b:1e:91:
         10:b5:e9:d5:77:01:37:34:23:ec:67:72:99:6f:f9:57:d1:07:
         a3:61:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:31 2024 by rpki-client on console-ams.rpki-client.org