Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          0FHUeyiWQ9vOUfm0kAMQMtp0kPimnCRljurmV0blmFI=
Subject key identifier:   39:E8:05:E4:DC:B6:86:AE:C3:7B:FC:64:A5:B5:62:57:4F:D2:E9:65
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       6BB687A0A26879556528F6AF45098CD4FCBABAC2
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:44:18 +0000
ROA not before:           Wed 22 May 2024 17:39:18 +0000
ROA not after:            Wed 21 May 2025 17:44:18 +0000
asID:                     262977
IP address blocks:        177.190.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b6:87:a0:a2:68:79:55:65:28:f6:af:45:09:8c:d4:fc:ba:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:39:18 2024 GMT
            Not After : May 21 17:44:18 2025 GMT
        Subject: CN=39E805E4DCB686AEC37BFC64A5B562574FD2E965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:f8:61:6d:ca:6b:5f:23:06:17:79:28:07:
                    b8:13:e0:9d:84:e0:85:b7:3e:0a:b5:42:af:e8:03:
                    88:9e:c7:fa:b1:5a:bd:d6:86:29:d6:c6:c7:21:02:
                    8c:60:2a:b0:53:80:11:fb:ae:90:d6:35:cb:77:7a:
                    c6:d7:c0:4c:13:48:07:70:3b:a1:c1:71:fa:74:90:
                    76:78:13:13:0b:0b:45:d0:2c:f7:ec:24:2b:3c:3f:
                    17:92:36:a6:96:b5:c6:00:9f:73:0b:04:02:39:ba:
                    04:b4:d3:ca:de:0e:aa:6a:1a:04:24:86:d8:e2:4e:
                    fd:99:78:ba:23:60:bf:a1:7c:53:1f:d9:14:b2:ee:
                    e4:49:8b:57:54:5c:2b:4c:00:6c:92:53:13:46:00:
                    eb:49:c5:5e:c2:d4:ae:a1:d2:25:9c:d1:0c:21:03:
                    5c:2a:3a:85:cb:92:7f:d5:a8:60:5e:05:80:d5:1e:
                    fa:25:05:ca:02:dd:c8:cb:f9:65:1c:d4:29:32:9a:
                    8a:2b:f3:c3:28:8b:6e:61:62:6b:9e:93:22:d7:c1:
                    58:b6:a6:df:e3:5b:2e:d4:e7:11:70:7b:38:68:9a:
                    07:48:89:0a:a2:21:cf:7b:a2:88:2e:3e:52:c6:da:
                    d9:84:0d:79:b3:45:53:07:a6:71:c9:20:d6:18:36:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:05:E4:DC:B6:86:AE:C3:7B:FC:64:A5:B5:62:57:4F:D2:E9:65
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:f2:55:33:4b:33:cc:80:90:7d:aa:b1:84:68:05:bc:62:
         1c:73:a1:e1:88:03:f4:70:1f:99:88:da:84:13:72:89:dc:82:
         66:d9:8a:54:6b:46:c1:4c:b7:be:5f:7b:de:b4:52:3a:26:48:
         f3:87:0c:0d:11:70:f0:f6:24:e0:a6:38:af:7a:ba:86:3e:e3:
         22:20:11:30:0f:64:ad:43:17:ad:5f:1e:76:97:3e:2a:e6:15:
         3e:7e:f6:80:30:8a:6f:07:bc:66:e8:ba:50:a9:7c:0d:e6:58:
         08:4c:6b:d4:68:b8:01:31:e5:83:0d:b6:59:ff:5c:11:af:cd:
         f3:10:81:03:ac:da:c3:78:5d:11:75:4d:8f:8c:45:64:1f:b0:
         76:ea:0c:9c:19:94:b1:e6:ec:08:09:9e:0e:3e:75:c8:00:b0:
         c7:07:61:73:a2:1f:0c:b4:07:e0:70:e5:fe:41:63:0d:26:21:
         94:04:95:36:14:a7:be:63:15:62:38:17:92:c7:f6:3e:41:b5:
         9d:52:62:84:bc:ac:4d:07:49:34:75:88:3e:48:e7:ee:a1:87:
         64:98:10:3f:ea:04:0f:31:8b:44:8b:93:e3:5c:01:b5:0d:60:
         38:0d:7c:63:ba:5a:4d:c5:11:bc:ea:ae:19:2e:35:58:f4:e5:
         24:ff:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:49 2024 by rpki-client on console-fra.rpki-client.org