Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
File:                     3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          gbx54FLtt6x+tWaJkDC07FIKvJ4ff1cU53xJ4rNJV7A=
Subject key identifier:   ED:FE:BE:9E:03:6F:56:32:68:6A:D2:12:DB:88:FF:26:51:BA:33:D5
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       F5D793A05CEDB73242FA01E10B29D7ADA14452
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
Signing time:             Mon 08 Jul 2024 19:43:08 +0000
ROA not before:           Mon 08 Jul 2024 19:38:08 +0000
ROA not after:            Mon 07 Jul 2025 19:43:08 +0000
asID:                     267452
IP address blocks:        177.185.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:d7:93:a0:5c:ed:b7:32:42:fa:01:e1:0b:29:d7:ad:a1:44:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:08 2024 GMT
            Not After : Jul  7 19:43:08 2025 GMT
        Subject: CN=EDFEBE9E036F5632686AD212DB88FF2651BA33D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:63:75:ee:b8:4a:d2:39:c4:ed:7c:c4:af:7a:
                    9c:3a:84:1d:f3:04:c1:77:0f:9b:ec:a4:12:c6:48:
                    49:db:91:aa:5c:d8:69:54:dc:69:20:36:0a:96:e5:
                    8e:cd:59:80:58:0a:35:08:65:27:72:c3:7e:e0:35:
                    3c:c1:db:e8:4c:00:88:a5:65:b2:5c:08:d8:de:16:
                    65:00:c5:9c:cf:fd:21:6d:75:2b:ec:e5:e0:51:df:
                    bc:ba:c4:cd:42:f4:7a:40:f3:84:5c:5f:81:35:db:
                    86:fd:8d:1c:6c:66:0b:b7:fc:89:52:84:31:f8:11:
                    11:89:c7:b0:34:1d:04:df:d0:37:3f:15:61:bb:be:
                    83:52:bb:f1:57:df:c9:cc:08:1b:6b:03:48:fa:9f:
                    52:b2:21:e7:1b:ef:8d:37:ce:0f:a8:d3:f0:c3:a1:
                    09:e8:4a:4e:c3:94:25:9e:fc:87:62:2e:bc:4e:47:
                    a7:30:81:86:d6:f5:77:48:c2:82:97:a8:50:2f:e5:
                    a0:c6:cb:3a:83:cb:84:c9:ad:22:64:c7:84:d5:dc:
                    5c:8c:53:37:01:41:d7:bd:67:9c:70:ce:17:69:23:
                    ff:35:ff:aa:3b:db:79:fd:6f:69:93:7f:66:ad:40:
                    c8:72:9d:d5:ed:c3:19:48:c0:7a:b6:dc:55:e6:91:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:BE:9E:03:6F:56:32:68:6A:D2:12:DB:88:FF:26:51:BA:33:D5
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:4c:28:c4:d4:7c:00:6f:d2:c2:61:ff:b3:2c:c1:93:47:
         07:8a:44:b9:4b:5d:93:61:5e:cd:1a:36:fa:5a:78:e5:f4:f8:
         d3:ec:06:c2:3c:0d:76:66:9b:cd:7c:b3:10:06:30:f2:69:1c:
         95:22:78:6b:01:22:4c:0d:c3:39:8c:a6:70:c5:b2:f7:1c:2e:
         32:7b:8c:a8:95:59:f0:50:11:c0:1c:8e:d7:9e:c9:11:5f:9d:
         e3:96:f3:82:f3:26:2c:1f:72:e9:6e:0a:fb:4d:fe:34:d4:a1:
         48:0b:59:c1:60:bb:c1:80:36:53:d9:1d:2c:b2:64:65:74:90:
         bd:e2:2a:b1:d1:65:a2:2a:b9:dc:e5:c5:fc:cf:b2:8c:b4:c3:
         ec:08:24:fa:48:18:19:89:8e:f9:03:ff:1f:8b:48:f4:3a:bd:
         cc:41:6c:2f:a5:13:f1:6a:5e:44:d6:25:45:0b:90:2d:c2:59:
         5d:d8:9d:5f:fa:a7:13:fa:b3:22:e0:ee:b0:55:7f:f5:05:37:
         4c:19:43:04:b7:e5:a9:82:13:c6:a7:66:40:9a:07:01:1e:e9:
         93:4b:40:31:0a:b1:f0:50:b9:62:30:21:2a:e4:8d:87:13:5b:
         7f:67:2d:4d:32:24:61:a8:0f:40:31:4f:c7:ad:bd:c1:a9:22:
         83:aa:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org