Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/3137372e37322e38302e302f32312d3234203d3e20323632353433.roa
File:                     3137372e37322e38302e302f32312d3234203d3e20323632353433.roa (raw, json)
Hash identifier:          xID/L3lB9YZbNebpG7dJPNyrbJ+SxMKuZ1m8OuzhYXU=
Subject key identifier:   11:DA:38:E3:0E:C0:30:9D:97:E7:93:F0:33:F7:86:38:B7:45:E8:3B
Certificate issuer:       /CN=922E3735E5BF16BE90E9010EF27CD44BFD7D40EB
Certificate serial:       67E29FFF4707C67B2C7FCA5E9CD9E7887FECF1E8
Authority key identifier: 92:2E:37:35:E5:BF:16:BE:90:E9:01:0E:F2:7C:D4:4B:FD:7D:40:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/3137372e37322e38302e302f32312d3234203d3e20323632353433.roa
Signing time:             Thu 26 Sep 2024 20:37:33 +0000
ROA not before:           Thu 26 Sep 2024 20:32:33 +0000
ROA not after:            Thu 25 Sep 2025 20:37:33 +0000
asID:                     262543
IP address blocks:        177.72.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.crl
                          rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:9f:ff:47:07:c6:7b:2c:7f:ca:5e:9c:d9:e7:88:7f:ec:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922E3735E5BF16BE90E9010EF27CD44BFD7D40EB
        Validity
            Not Before: Sep 26 20:32:33 2024 GMT
            Not After : Sep 25 20:37:33 2025 GMT
        Subject: CN=11DA38E30EC0309D97E793F033F78638B745E83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:76:88:f0:f9:65:3a:e6:b6:a1:8b:d1:c1:
                    6e:3c:de:70:eb:b7:21:50:ca:c4:99:20:51:ec:08:
                    4f:f4:a1:96:eb:29:41:a1:e4:ca:b2:04:a9:e1:75:
                    8d:40:db:2a:1f:07:dc:6a:7c:c5:cb:f6:a9:84:ca:
                    d9:72:0c:8c:f1:02:0d:76:74:80:37:43:46:0a:8d:
                    68:4b:32:82:60:da:f6:97:14:27:ba:16:95:bb:ab:
                    38:b6:e3:c5:7a:ca:5b:32:5f:65:3d:a7:d0:d7:5b:
                    04:8f:fc:87:41:0a:1b:7d:82:2a:8d:9b:31:64:f5:
                    73:f0:58:a2:91:86:fc:6c:79:14:55:14:9f:0a:2e:
                    01:39:7d:d7:3c:1c:a0:85:62:34:d7:5d:20:ec:f7:
                    2e:ec:41:ba:b4:21:6d:6a:7b:69:0d:64:6a:6b:fe:
                    11:8c:91:3d:9a:c5:dd:37:40:2c:bd:7d:17:dd:59:
                    5e:df:fc:f1:26:41:9c:c5:2f:01:5c:ef:4f:fd:b8:
                    bc:3d:43:54:17:d7:2f:78:87:a6:01:e1:12:d5:87:
                    f6:17:2f:64:e9:6a:2d:59:ae:9a:88:23:a0:50:3d:
                    08:c4:37:8d:a3:78:f1:33:ff:2b:b7:7c:53:e8:2c:
                    dd:6a:da:e7:40:80:82:35:97:6d:16:8e:55:21:8a:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:38:E3:0E:C0:30:9D:97:E7:93:F0:33:F7:86:38:B7:45:E8:3B
            X509v3 Authority Key Identifier:
                keyid:92:2E:37:35:E5:BF:16:BE:90:E9:01:0E:F2:7C:D4:4B:FD:7D:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/3137372e37322e38302e302f32312d3234203d3e20323632353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:74:5b:94:04:9e:e5:53:17:f4:b0:d9:6e:91:6c:b4:71:
         d6:94:32:8e:83:de:2e:43:31:fa:ae:05:fe:8f:51:4a:d6:58:
         56:97:a6:d5:9c:05:01:b1:80:cb:e4:6b:88:72:60:27:29:1e:
         b3:09:28:94:a1:56:64:36:4a:c9:fe:4b:bd:af:89:46:d5:df:
         4b:04:ec:30:60:26:9a:ac:a2:3e:42:e0:bb:ed:e7:a3:60:89:
         1a:fe:3b:1d:bd:75:f5:54:30:3d:f5:18:49:51:85:a6:18:38:
         a4:e5:ab:1c:59:4f:2e:50:70:b8:94:a6:3d:39:8a:34:2a:4d:
         15:85:d1:b2:48:48:0c:19:78:fd:45:aa:39:f3:fb:6d:6c:ca:
         f4:19:f0:da:54:55:0d:54:09:00:52:d5:71:59:41:e7:e0:e2:
         7d:6f:47:9c:13:be:01:58:af:1e:84:3b:3d:48:f9:43:9d:76:
         91:a8:ec:f1:b2:ca:2a:78:05:41:4d:e3:02:05:a0:42:33:25:
         c7:2e:5e:e0:b3:c0:2d:a2:32:85:c9:10:dc:29:96:6f:81:12:
         01:3a:cd:12:86:47:80:1e:3a:e9:c4:34:b9:7b:7a:76:9d:1f:
         99:99:7a:6c:59:fa:e4:0f:8d:30:bd:9a:76:4d:2d:09:de:56:
         52:62:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:55 2024 by rpki-client on console-fra.rpki-client.org