Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39322e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e39322e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          cQUYf0mFCXhpjxzWHIjnTpUE2w5wQ9m4sGMDtRTyEtg=
Subject key identifier:   8B:32:93:AE:CC:92:75:B9:16:3D:7A:F8:B4:59:A1:0C:79:E6:76:88
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       6F87C1C6E1DAD225EE0FCC5C22370ABAD42A0704
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39322e302f32342d3234203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:44:09 +0000
ROA not before:           Wed 22 May 2024 17:39:09 +0000
ROA not after:            Wed 21 May 2025 17:44:09 +0000
asID:                     262977
IP address blocks:        177.190.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:c1:c6:e1:da:d2:25:ee:0f:cc:5c:22:37:0a:ba:d4:2a:07:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:39:09 2024 GMT
            Not After : May 21 17:44:09 2025 GMT
        Subject: CN=8B3293AECC9275B9163D7AF8B459A10C79E67688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:66:a6:ab:97:f5:6c:e6:69:14:1a:cc:89:
                    27:3a:ec:78:41:89:ab:91:b0:b8:9c:0e:3d:31:37:
                    c8:36:ed:2f:45:0b:bb:93:49:23:3f:f0:1c:67:18:
                    1e:37:2b:6f:41:8e:de:12:d2:c6:4d:22:da:20:e9:
                    c5:4e:eb:b1:29:b7:38:8d:5a:d3:22:8a:e7:ef:6d:
                    78:eb:49:ec:d9:9d:3c:7e:ef:3c:f5:37:e1:1d:e8:
                    d0:b2:a5:35:2b:62:4f:fa:9b:3a:48:72:d2:cd:84:
                    a0:4f:ad:83:1f:0e:00:49:39:ae:e7:5a:77:76:e9:
                    6b:27:3d:ba:21:5e:78:54:88:65:14:77:61:08:38:
                    3b:53:74:2d:9b:de:2a:c8:2c:3e:32:2e:d0:05:ee:
                    32:e9:46:a6:81:60:91:fa:69:3d:b5:04:d4:52:53:
                    ac:e4:69:a2:12:19:62:f8:46:c6:ae:85:13:b5:d3:
                    d3:61:cd:3d:e8:37:a1:f1:5b:da:7b:6d:5c:9c:65:
                    dc:8f:19:25:8e:03:e4:12:43:8b:cd:38:1c:42:c0:
                    1e:37:11:b8:14:de:c9:83:ee:cd:b7:58:01:4d:78:
                    b4:38:c6:e0:14:d2:1d:a0:de:2f:0e:c1:f0:5d:b6:
                    59:38:f2:61:81:5e:ab:38:91:21:37:3a:51:23:fc:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:93:AE:CC:92:75:B9:16:3D:7A:F8:B4:59:A1:0C:79:E6:76:88
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39322e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:fb:21:d4:bd:cc:6f:c5:98:55:58:12:87:53:1d:73:ad:
         03:04:fd:a4:fe:5e:bd:73:af:8c:33:61:da:03:7a:a0:35:45:
         96:20:bc:c1:bb:3c:74:e8:fb:bd:89:7a:96:46:29:b5:11:85:
         1f:b7:38:c3:46:7d:d0:c1:7b:d5:31:a0:44:8e:5f:c7:8f:4d:
         20:c1:8a:61:07:3d:8d:b5:94:df:69:e2:d7:f7:43:15:e7:63:
         4a:1f:aa:c1:57:2f:cc:7a:a3:01:e8:7b:9e:64:63:8e:91:da:
         10:74:b8:b0:c5:7d:df:8d:80:ea:78:b8:13:fa:c9:ba:d7:69:
         ba:d1:38:f4:a1:fd:18:1d:72:a1:d6:db:76:eb:64:10:15:b9:
         5d:93:d4:c1:55:71:2f:97:84:db:58:d7:12:0f:ce:62:cd:63:
         df:cf:a7:58:c6:28:68:7b:51:c8:71:4d:0e:1f:bd:ff:38:f3:
         75:9d:ff:36:6e:47:b9:94:4d:32:d3:9b:12:84:5c:e3:d7:ec:
         15:f1:b7:9e:40:42:e1:29:34:56:24:7d:6d:7d:90:00:dd:05:
         16:85:34:ce:d6:fb:6a:82:e3:d5:95:35:da:1a:87:6a:da:83:
         a4:41:8d:f8:9e:a3:5f:e5:43:1e:1c:94:b2:07:05:2b:22:8d:
         8f:b2:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:49 2024 by rpki-client on console-fra.rpki-client.org