Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
File:                     3137372e33392e37322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          4gpCUiRg+5Ei4RX+soMyTIAUUc7qg5YOyrca7An+YCU=
Subject key identifier:   C7:9E:AF:D7:D3:A8:95:84:1C:14:C5:A1:C6:02:C2:A4:47:A1:29:23
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       64A16046C9994B039F83A95BD24B7171E359F3FF
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     52977
IP address blocks:        177.39.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:60:46:c9:99:4b:03:9f:83:a9:5b:d2:4b:71:71:e3:59:f3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=C79EAFD7D3A895841C14C5A1C602C2A447A12923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:d0:76:b5:34:7d:9d:9a:eb:c5:00:68:ae:
                    ef:49:ad:ea:b7:c2:be:31:ab:44:6b:7f:33:32:81:
                    2e:47:03:46:37:17:cb:b5:c6:bb:78:a2:c8:61:e9:
                    f6:37:ed:7a:a0:9b:92:90:d2:bc:1e:ef:75:51:33:
                    25:85:c5:23:e8:98:a4:2d:7e:78:82:91:1d:dd:4e:
                    ad:9b:c7:e4:c8:6a:11:6f:d1:a4:b9:44:5e:08:08:
                    e6:b1:cd:b3:32:2c:66:2f:08:41:b1:db:6e:63:fa:
                    5a:6a:f9:d0:59:73:44:2d:f1:d6:11:86:41:16:b7:
                    68:d3:25:a1:8f:3b:b1:01:0d:55:5c:b1:56:38:ce:
                    db:3e:22:a4:06:e9:fc:3c:a6:12:bb:f9:84:75:fb:
                    21:3d:c2:05:59:b0:b8:5a:54:db:40:6f:37:d5:6b:
                    c2:8d:52:d5:3a:e3:f2:00:db:f3:f5:78:6c:8a:71:
                    cf:9e:33:cd:ef:bc:17:28:be:62:cd:3d:50:aa:9c:
                    fe:84:06:1f:d3:01:8a:14:ce:32:4a:21:9e:dc:87:
                    bd:4c:2e:58:bb:93:7a:aa:eb:0b:00:ba:3e:d1:8e:
                    61:e9:91:29:14:3c:53:46:e6:fd:68:22:8c:6d:f1:
                    a5:7c:63:18:70:3c:7d:23:0c:ba:0a:50:16:91:b9:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9E:AF:D7:D3:A8:95:84:1C:14:C5:A1:C6:02:C2:A4:47:A1:29:23
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:01:df:18:50:64:85:67:eb:5b:15:77:1f:8d:e6:d0:93:
         28:f5:e7:b9:6b:1a:c6:05:52:69:48:06:57:c4:52:ae:14:62:
         73:fa:5c:e8:9b:e2:d2:a5:3b:c0:7c:f7:f5:c4:db:78:7f:da:
         f5:c4:1b:62:f6:66:da:99:54:68:9a:f9:dd:82:58:22:9f:78:
         48:7a:ca:b3:0c:db:9a:4b:06:c8:7b:99:30:47:69:d3:56:92:
         2b:c6:bc:0a:14:5b:dd:e2:c8:ed:3c:ef:ae:83:82:83:ec:ec:
         6d:ee:9f:2c:ce:45:62:2a:ec:f1:61:0b:76:32:5d:78:25:ed:
         34:ea:0e:be:1f:db:d8:11:a1:74:2d:97:8b:e1:18:08:39:07:
         f0:be:e2:f2:cb:db:9c:6c:b7:c7:9a:6c:ea:cf:c1:f4:4b:6f:
         fc:71:91:6b:c1:fb:1a:17:40:1f:c0:d7:14:10:0a:c8:c0:e7:
         09:a0:48:7b:8c:b5:7b:53:b6:cd:b7:f7:fd:c0:66:f7:f5:66:
         28:60:ba:d2:57:f1:ef:be:aa:c4:52:46:94:46:f6:2e:6e:d0:
         65:f6:fb:3c:39:c4:49:07:e8:26:ff:19:d0:10:d1:de:8a:d4:
         87:88:94:c8:bc:11:c0:f5:6e:7d:9b:88:ce:f4:d3:c1:74:d0:
         86:9d:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:50 2024 by rpki-client on console-fra.rpki-client.org