Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32322d3232203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32322d3232203d3e203533323039.roa (raw, json)
Hash identifier:          3Oj0iVXaiNE3ND4KoQrRJCuonNMrFzEpTTAAEUrKFNw=
Subject key identifier:   6B:DE:E5:E0:FD:AB:A4:9B:15:B5:AD:F0:39:30:7A:FE:43:71:66:44
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       687D0BD9FFF0F3EA4513F8C05B313B0F6F81A234
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32322d3232203d3e203533323039.roa
Signing time:             Tue 06 Aug 2024 17:59:29 +0000
ROA not before:           Tue 06 Aug 2024 17:54:29 +0000
ROA not after:            Tue 05 Aug 2025 17:59:29 +0000
asID:                     53209
IP address blocks:        177.11.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7d:0b:d9:ff:f0:f3:ea:45:13:f8:c0:5b:31:3b:0f:6f:81:a2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug  6 17:54:29 2024 GMT
            Not After : Aug  5 17:59:29 2025 GMT
        Subject: CN=6BDEE5E0FDABA49B15B5ADF039307AFE43716644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:9a:fe:de:27:7e:45:57:45:f1:5a:03:64:
                    cf:68:91:7b:d7:26:5b:0f:48:e3:c6:54:7b:00:05:
                    95:da:d7:d3:78:b1:99:72:f6:44:05:51:dd:1c:25:
                    0a:6c:e8:42:c6:95:4b:e7:b0:25:96:3b:f4:78:58:
                    cd:d4:b1:22:ce:26:43:92:91:11:e1:92:a3:22:76:
                    9a:cb:69:cd:95:a6:d3:6f:ea:06:4b:da:0d:ac:86:
                    f1:39:3a:ec:aa:09:e6:2e:01:87:a9:ce:9c:d1:b9:
                    94:8b:ec:5c:24:fa:a4:0f:be:48:6b:96:e9:a6:f5:
                    54:f2:8e:3b:e8:a5:6a:c9:ac:cd:61:c6:4e:23:b3:
                    18:42:47:95:70:92:89:88:31:40:66:35:18:57:24:
                    2a:3f:d6:ec:ce:ff:c1:48:7c:8e:10:a7:84:5f:81:
                    20:34:55:e5:82:b2:50:88:77:0f:3f:f5:1a:56:5f:
                    92:84:fc:a2:10:5f:1b:54:c9:0e:50:db:a9:12:60:
                    91:71:da:ac:c7:98:b6:72:a3:27:3a:6c:55:94:be:
                    13:e9:38:1d:98:7c:a2:d1:f3:9a:db:2d:e2:6a:65:
                    76:13:ac:4c:21:45:ac:75:68:a1:e7:a5:03:bd:65:
                    e3:79:8d:95:3a:c3:f6:3f:f9:13:99:cd:e3:68:ae:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DE:E5:E0:FD:AB:A4:9B:15:B5:AD:F0:39:30:7A:FE:43:71:66:44
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32322d3232203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:48:8f:37:e5:19:69:dc:f5:be:86:5f:c1:2c:4d:3b:63:
         ea:e2:cc:d2:ba:02:a5:39:89:86:b9:4d:fb:7e:06:0e:6a:08:
         27:26:20:87:5b:21:08:23:34:03:2c:29:2c:44:ab:c9:07:e9:
         20:17:27:1d:5a:c0:01:91:b2:75:5f:37:25:9a:55:20:71:4e:
         2b:9b:c8:a0:33:35:89:ac:72:8b:e7:49:d9:40:a0:ba:24:2e:
         ce:33:16:f3:13:56:7a:e4:be:98:f7:4b:04:b9:70:b1:01:29:
         03:df:80:19:45:93:21:d3:8d:f3:76:9f:d5:00:c5:5a:19:b8:
         69:b8:f6:da:08:c5:00:08:f6:e9:93:17:3c:3b:86:71:41:79:
         c3:29:80:ef:ad:7b:fa:17:3d:2e:7b:31:06:40:1d:e3:ad:d4:
         c4:ff:c6:45:7b:66:f5:7a:e1:b1:e6:15:86:19:ef:f8:fa:04:
         3d:32:12:51:5b:b2:72:78:84:d2:de:40:f6:73:60:3f:f4:43:
         fd:61:92:87:ae:b1:98:93:ee:fd:94:36:cd:fb:2b:80:1d:78:
         e6:c7:c0:c8:ef:5a:d1:71:60:b9:c7:92:97:eb:07:77:72:46:
         8f:e0:31:ca:d4:8e:a6:10:98:63:b6:57:02:e2:89:d7:21:ea:
         e2:cf:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:37 2024 by rpki-client on console-fra.rpki-client.org