Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e382e39362e302f32302d3231203d3e203533313837.roa
File:                     3137372e382e39362e302f32302d3231203d3e203533313837.roa (raw, json)
Hash identifier:          nALNQVG7kdS31ixBSAMItcmT0cBoGytKRGGJ92m83GA=
Subject key identifier:   AE:F6:A0:C7:A9:4C:41:04:57:6D:61:E7:2A:46:88:51:C3:3F:AF:52
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       344FE4C7FEC1DE4947A64F254A009624016F1CD1
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e382e39362e302f32302d3231203d3e203533313837.roa
Signing time:             Thu 04 Apr 2024 18:44:39 +0000
ROA not before:           Thu 04 Apr 2024 18:39:39 +0000
ROA not after:            Thu 03 Apr 2025 18:44:39 +0000
asID:                     53187
IP address blocks:        177.8.96.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:e4:c7:fe:c1:de:49:47:a6:4f:25:4a:00:96:24:01:6f:1c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Apr  4 18:39:39 2024 GMT
            Not After : Apr  3 18:44:39 2025 GMT
        Subject: CN=AEF6A0C7A94C4104576D61E72A468851C33FAF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:50:01:bd:47:6e:e4:73:39:69:05:25:80:
                    72:af:dd:b8:ec:37:3a:1a:84:da:95:8d:82:d9:f2:
                    07:46:9f:1b:45:6a:75:84:bb:ef:00:f6:dd:70:82:
                    0f:a0:1e:97:2f:27:e7:8f:a4:6b:7a:33:a8:0e:e2:
                    4c:4d:f3:e7:cd:00:15:d8:9f:45:30:c9:f4:9d:c2:
                    4f:74:f2:8e:63:ae:f6:37:6e:3a:74:e4:64:2b:fd:
                    eb:e5:c5:b0:e0:c7:80:dd:ce:80:70:ee:5d:1a:04:
                    ab:7b:14:01:c1:cc:92:95:b2:b4:c5:1d:b8:13:8d:
                    2f:41:83:d9:79:dd:f6:ba:a8:a4:88:ce:e2:a7:b8:
                    c1:46:b3:22:1a:03:63:31:11:c4:e7:da:95:9f:3f:
                    9a:f1:e1:26:34:03:32:30:83:bd:96:cc:92:54:d5:
                    95:34:4e:f7:06:81:21:c3:52:f2:00:1a:b5:f5:59:
                    2d:72:c8:11:b1:33:53:39:92:8e:37:7d:ee:30:f8:
                    c8:a5:e3:11:e0:29:66:3d:cd:e3:4a:f3:90:5e:13:
                    64:f9:07:a0:66:bf:65:89:08:39:68:f7:1f:be:3b:
                    02:26:b0:55:f7:0a:bd:97:0f:6c:09:da:95:b0:91:
                    06:8d:94:94:7f:d0:ba:b7:03:33:30:ab:4f:6b:00:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F6:A0:C7:A9:4C:41:04:57:6D:61:E7:2A:46:88:51:C3:3F:AF:52
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e382e39362e302f32302d3231203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:36:bf:57:82:d5:ba:f9:52:07:37:35:11:d0:e9:7a:a9:ff:
         dc:13:66:db:e9:9e:b4:96:83:bb:00:e7:a2:3c:69:d6:80:22:
         66:be:47:d0:d5:94:cd:d9:a3:fa:70:3f:5e:3e:f3:fd:75:ff:
         61:18:e3:e5:95:48:2f:d7:6a:ff:7d:c2:d9:c2:a7:30:cc:a7:
         be:29:73:12:4f:6b:d1:77:27:9a:1e:bc:33:0c:01:28:57:38:
         c0:8d:89:73:78:52:1b:9b:13:16:b6:ea:6d:db:4a:ca:c9:c4:
         9d:6f:09:81:70:c3:f2:ea:97:72:99:52:62:36:a1:f4:ad:81:
         59:6a:6a:81:a1:14:fd:5f:9b:06:2e:17:f7:5c:fd:b1:61:73:
         40:09:fd:73:99:a7:ea:a5:7e:ce:ae:0d:a1:5b:34:86:4a:76:
         34:5b:00:10:1f:37:49:65:20:4f:8d:50:d2:86:90:65:8b:ec:
         32:6e:07:fe:10:6a:bd:ec:62:c2:28:e3:1c:99:68:a8:48:90:
         43:6c:52:81:74:2d:e2:c3:c4:06:12:fc:a7:56:2b:d7:5d:30:
         1c:b6:ac:94:0d:3f:6c:10:ed:39:46:59:12:1c:65:60:55:8d:
         45:f9:1c:9f:1e:35:c0:9a:96:99:b3:16:4a:12:81:e3:c2:00:
         46:c8:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org