Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37382e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37382e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          KotFhqIXalIiQgvBIUFDXP2RC657rr75vW+ozV3f3fw=
Subject key identifier:   2F:A0:B3:B8:E6:C0:11:25:11:77:2F:3B:F1:5B:4D:41:B0:DA:9E:82
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       617F7D4E1BABFA0B26434B317E71D22A708F92DF
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37382e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     52977
IP address blocks:        177.39.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:7d:4e:1b:ab:fa:0b:26:43:4b:31:7e:71:d2:2a:70:8f:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=2FA0B3B8E6C0112511772F3BF15B4D41B0DA9E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:27:b1:7a:cc:56:6f:a1:db:0a:ec:d0:23:
                    e2:ca:4a:16:f1:f3:73:d3:9a:35:89:26:96:ae:4a:
                    76:d0:11:38:28:4c:97:18:ba:de:58:c0:a4:4a:a1:
                    3e:e2:20:5b:b2:42:ac:12:ad:59:fb:70:12:9e:d8:
                    2c:e5:88:3f:38:69:cf:df:f8:ee:a6:2d:cd:b1:0c:
                    b0:df:b2:2a:91:00:86:7d:0a:70:59:01:16:d1:8a:
                    75:d5:1e:21:0b:a7:11:84:13:75:9c:f2:0c:6d:d6:
                    ef:2e:68:c9:e7:4c:8f:38:f9:31:d8:6c:4d:81:90:
                    75:91:7a:9c:0b:51:3b:2b:6f:d1:95:e1:3d:21:fd:
                    e4:d1:07:c9:69:05:fb:66:04:ae:a4:96:7b:bd:23:
                    02:f7:42:90:19:41:80:e9:b9:f0:58:2e:75:07:63:
                    d9:1a:ca:3c:b0:89:6a:f4:e3:11:de:03:56:04:cb:
                    5f:ef:d8:e8:b8:47:0b:e1:4d:26:3f:30:b2:fe:d2:
                    a7:ec:66:70:90:ed:d7:63:9b:f2:65:b5:3d:78:7f:
                    9a:1c:89:1c:54:94:e9:d1:67:b8:b5:30:63:98:ac:
                    f6:d2:88:f5:90:08:7f:de:be:8a:c6:7f:d6:a5:30:
                    3e:2f:be:d7:31:33:e9:be:20:97:e1:12:76:5e:04:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A0:B3:B8:E6:C0:11:25:11:77:2F:3B:F1:5B:4D:41:B0:DA:9E:82
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37382e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:5d:58:c3:3e:e7:7f:c2:a3:1b:3f:77:ec:02:6d:06:be:
         f5:fd:86:3b:a1:b4:22:f9:1f:f8:2f:14:9f:57:48:18:26:97:
         7f:2a:3b:26:fa:9f:b0:4e:e9:37:2d:ca:b5:a8:4a:00:8f:25:
         6d:2f:67:4b:43:b6:63:ec:9d:d1:16:1b:9d:ae:4c:7c:49:2a:
         a5:41:99:8b:41:e5:5c:12:40:3f:8c:6b:75:4d:1a:7d:b9:a9:
         f0:43:f5:3a:39:24:fb:1d:1e:08:39:ef:d9:f5:c6:87:75:00:
         30:20:97:0e:58:5b:dd:07:6e:92:2d:02:69:5f:a8:73:b4:51:
         99:d2:17:d8:a8:20:b3:12:d0:85:36:2f:63:cf:d2:7c:6d:ae:
         41:60:8a:8a:a2:34:b8:6c:4b:f5:12:91:6e:9f:0f:09:f5:4f:
         e0:08:0e:1a:b6:66:ea:d3:f3:fc:54:48:28:7f:bb:16:54:8f:
         e6:4b:96:5e:d4:82:b3:d6:88:c6:43:18:1e:a2:1a:48:bc:62:
         4c:f1:f7:65:96:55:4b:fc:74:00:54:d2:8b:f9:06:2a:f8:76:
         a9:fe:8a:00:44:2a:f4:88:c4:a4:35:24:d2:e6:8a:17:95:58:
         6d:32:4d:9d:72:4b:31:41:66:73:d3:e9:99:ca:57:e9:f4:9f:
         f4:92:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org