Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
File:                     3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (raw, json)
Hash identifier:          FXzdR5eVK8QZ9koZyoyu+jQkr2TFaW67teBXoNcKGX4=
Subject key identifier:   EA:68:A9:BD:80:54:80:D0:BC:4C:7E:89:16:31:DC:93:66:5B:1F:BC
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       324CB12513FCD5EB5E0316DFA4FE1AFB02D84B78
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
Signing time:             Wed 03 Apr 2024 18:32:40 +0000
ROA not before:           Wed 03 Apr 2024 18:27:40 +0000
ROA not after:            Wed 02 Apr 2025 18:32:40 +0000
asID:                     270586
IP address blocks:        177.152.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4c:b1:25:13:fc:d5:eb:5e:03:16:df:a4:fe:1a:fb:02:d8:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Apr  3 18:27:40 2024 GMT
            Not After : Apr  2 18:32:40 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:c6:25:fd:cc:e1:22:9c:98:37:e4:37:6d:
                    ad:61:c7:d5:9d:21:d9:47:33:2f:67:f5:8c:08:47:
                    b0:c5:59:28:e1:5a:db:78:01:26:b8:00:2e:4a:a4:
                    68:71:c8:74:06:6e:4d:6b:27:5f:fc:28:a2:d9:91:
                    48:91:ed:e1:40:0c:f9:ba:ca:a1:fc:73:41:9b:8c:
                    d5:59:24:01:31:d6:b1:04:db:6c:ae:5d:99:04:18:
                    c9:f5:30:46:3b:8e:2e:c0:57:db:f6:0d:cd:8f:ca:
                    c5:2f:3d:26:38:85:a8:69:61:b7:22:78:a9:43:ce:
                    3b:44:ea:ba:6d:3c:32:1f:29:f0:62:75:7d:4d:02:
                    c0:a8:df:71:37:3b:e9:e3:82:f6:92:0b:76:ae:c7:
                    27:f3:52:c2:cc:e9:87:a8:ed:db:dd:58:c1:c7:00:
                    2e:89:ec:4a:28:46:f3:33:64:b6:2d:1c:b2:66:8c:
                    6d:0b:b9:a0:3e:98:89:15:89:5d:3a:31:3c:69:7a:
                    9c:e9:1b:0f:6a:b3:46:74:92:55:a6:72:03:67:7b:
                    06:a3:fc:9f:65:68:35:b9:e0:1a:93:c0:68:41:49:
                    88:f2:5d:51:50:1a:2f:61:59:06:93:9c:6b:b9:09:
                    ef:9b:e4:8d:40:74:2a:23:70:b5:a9:ca:1e:ba:0a:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:68:A9:BD:80:54:80:D0:BC:4C:7E:89:16:31:DC:93:66:5B:1F:BC
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:5f:0d:be:8e:62:64:79:4e:7f:a2:cd:5b:b2:8f:43:d9:1c:
         f0:2e:fa:a3:47:56:48:5d:64:11:fa:f4:e1:13:18:52:7d:63:
         83:a4:8b:ef:aa:54:73:5a:79:92:4d:e4:3e:31:31:5c:19:32:
         80:77:0b:1f:3b:a0:43:f0:74:31:6b:00:24:51:0b:f9:f7:37:
         6a:d1:8e:8a:83:a8:67:3d:bd:48:b0:21:49:f6:44:77:1d:1f:
         56:75:44:02:da:33:87:65:d5:49:53:89:3d:39:46:45:e6:c6:
         11:67:2e:d7:c1:9b:be:dc:77:da:f5:06:51:b6:e3:c8:7a:1a:
         ee:16:1b:6d:36:4f:5a:29:1a:d6:e4:8f:f9:4a:4f:e1:e8:11:
         67:cd:4e:03:82:83:57:b0:aa:18:fd:81:a3:ad:68:eb:5c:a5:
         9f:2a:fd:4c:74:24:c3:fc:ff:5f:1c:07:16:a5:77:e6:7c:1c:
         47:75:b5:41:d0:48:7c:d1:75:e8:4d:ce:88:4a:58:31:4c:51:
         ce:9f:c6:25:70:ec:04:51:a2:36:9e:8a:46:0d:22:54:c9:70:
         da:95:df:db:bd:27:56:fa:4a:68:38:3b:e3:12:b6:71:88:f0:
         14:d4:0d:f8:0f:b3:39:f1:04:61:55:0c:00:df:e3:b5:22:43:
         ef:6b:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:21 2024 by rpki-client on console-ams.rpki-client.org