Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
File:                     3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          JnAjtXx6ixCHrR58SjWzuMFEvc/iySfRDN7iRdOoTkQ=
Subject key identifier:   2A:CB:E8:43:B4:71:E7:85:A3:39:98:E0:88:31:9A:B6:53:57:7C:29
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       39139658DAD1DC6D199F58D8FD8AE3B53DEDC10B
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
Signing time:             Fri 05 Apr 2024 04:37:28 +0000
ROA not before:           Fri 05 Apr 2024 04:32:28 +0000
ROA not after:            Fri 04 Apr 2025 04:37:28 +0000
asID:                     262893
IP address blocks:        177.23.112.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:13:96:58:da:d1:dc:6d:19:9f:58:d8:fd:8a:e3:b5:3d:ed:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Apr  5 04:32:28 2024 GMT
            Not After : Apr  4 04:37:28 2025 GMT
        Subject: CN=2ACBE843B471E785A33998E088319AB653577C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:88:fc:ad:b3:6a:d5:f1:87:83:59:10:28:c8:
                    53:33:c8:be:66:d1:8d:e4:4d:ed:f7:e0:70:69:a7:
                    a0:86:cd:90:72:21:1d:4c:7e:2d:34:8c:3d:ba:ea:
                    93:c8:39:c9:cc:68:61:82:7e:16:20:e3:bc:8e:45:
                    2a:29:b9:fe:f3:92:a2:d9:a7:60:ef:3d:9d:3f:b5:
                    e8:f0:6f:0d:5e:5a:a9:03:bd:a8:2a:a7:da:9d:11:
                    08:d0:49:7c:00:ad:9a:29:57:c6:e2:8a:af:6b:39:
                    e0:7a:ab:87:f3:65:78:8c:e2:15:58:dd:0c:69:e6:
                    57:7e:56:ff:97:62:10:ee:2d:c1:86:66:c0:9a:62:
                    ef:ff:5a:26:10:a3:06:70:80:fe:c8:c8:a5:51:e2:
                    2f:d2:04:95:4a:12:62:01:88:89:95:32:09:7b:54:
                    e1:61:b4:56:d0:e3:fa:c5:6e:f7:e4:b9:08:83:b0:
                    a7:a9:72:de:f5:37:a5:e5:c2:00:28:3a:be:41:12:
                    8f:be:a6:14:06:eb:8c:11:b8:43:36:b5:e4:4b:be:
                    f4:3f:bd:6e:d8:af:f8:26:da:7a:06:4c:96:05:81:
                    26:c5:f2:1f:48:68:44:51:77:79:52:73:4b:88:fa:
                    1b:d3:f0:ab:fb:0a:b3:8a:df:cb:5a:27:9e:25:4f:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CB:E8:43:B4:71:E7:85:A3:39:98:E0:88:31:9A:B6:53:57:7C:29
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:4d:7a:7e:7a:dc:32:40:37:6a:ac:fe:c7:8c:88:94:c4:
         1d:99:95:d4:7f:dd:6b:7d:30:44:a8:3a:85:85:c3:16:dc:d9:
         7c:6b:b1:4b:32:a4:3d:69:64:29:59:fc:4a:8b:c7:fa:3c:5c:
         49:22:35:5b:3d:11:b2:43:66:94:51:30:44:ea:d5:5c:c4:c7:
         56:fb:7b:84:c7:9d:23:fd:d5:a6:71:3d:ac:99:c5:43:cc:3e:
         6f:0c:a8:5a:f8:df:f8:92:7f:52:89:12:46:b9:ac:ea:7a:42:
         72:3b:cc:9a:32:d9:74:a1:a4:82:77:98:2c:31:42:f3:ac:14:
         a2:6a:b3:9b:fc:1b:9a:1a:70:06:91:2b:61:db:f8:c9:a1:f4:
         43:25:f5:10:c5:b3:c4:31:6f:f5:b0:fa:37:33:97:ce:f9:f0:
         bd:97:2b:24:c2:74:e4:da:e5:0d:12:96:4e:eb:18:39:e1:eb:
         d0:a1:dd:9b:e3:26:2a:d9:2b:48:db:97:b3:77:28:ea:f9:82:
         43:3c:11:e1:46:dc:9a:02:9a:00:e0:7b:ba:a2:3e:03:94:ee:
         d4:7f:25:a8:c9:19:1a:f5:81:03:9e:20:05:98:9b:60:30:ea:
         18:25:44:d7:1f:a8:b8:96:dd:e5:c8:09:a6:0d:00:c2:c0:59:
         51:8c:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:59 2024 by rpki-client on console-fra.rpki-client.org