Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa
File:                     3137372e31312e3133382e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier:          9l7Rki8AQ90omzLVzc+rzBZyLi16yEG4iBiIiLQUYsc=
Subject key identifier:   8E:52:F3:B2:C2:7A:A0:02:05:C0:9D:64:FA:48:8F:F0:BA:8C:C0:17
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       08D85AF9BD6D2052AC100C003FC0523255DFEABF
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa
Signing time:             Tue 06 Aug 2024 17:59:33 +0000
ROA not before:           Tue 06 Aug 2024 17:54:33 +0000
ROA not after:            Tue 05 Aug 2025 17:59:33 +0000
asID:                     53209
IP address blocks:        177.11.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:5a:f9:bd:6d:20:52:ac:10:0c:00:3f:c0:52:32:55:df:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug  6 17:54:33 2024 GMT
            Not After : Aug  5 17:59:33 2025 GMT
        Subject: CN=8E52F3B2C27AA00205C09D64FA488FF0BA8CC017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:08:64:36:ad:5e:a0:f1:de:0a:7d:60:58:
                    68:cf:14:0e:62:20:58:a5:eb:7c:70:83:27:dc:75:
                    ff:e8:d4:15:d6:c7:10:73:ec:15:a9:ea:5d:df:4a:
                    fe:ea:96:af:f1:9e:d9:5a:72:a0:a3:42:86:62:65:
                    bd:ae:66:de:e1:f6:13:f8:ef:5b:b4:d1:3e:bb:97:
                    40:e9:55:88:e9:2e:94:d8:1e:12:4f:c6:ba:ac:fb:
                    f8:60:3d:bb:b0:e8:0b:52:4e:ed:b1:19:5a:8a:ca:
                    13:01:60:f7:27:c1:30:01:a2:26:c3:b9:3c:c7:49:
                    39:e6:2d:b2:2c:94:fc:e7:2f:d0:ab:d0:c0:d6:aa:
                    26:b1:29:40:d5:d0:b2:75:91:fd:e8:a5:54:ea:3d:
                    b1:24:e1:e4:b1:f9:1c:08:c2:8f:9e:9f:bb:a4:a2:
                    74:71:6c:96:bd:77:97:49:58:92:8c:20:37:b6:64:
                    27:d8:40:1e:b8:09:dd:0c:62:7e:04:4d:cf:0c:f0:
                    fd:e2:5b:3d:50:6c:0a:9f:21:ba:86:2b:bf:b8:1c:
                    56:af:5a:56:41:00:ab:00:64:bb:79:4d:1e:a2:bf:
                    88:6d:70:02:67:ec:62:ec:1b:d9:38:fa:09:10:1c:
                    41:ee:be:95:20:5c:c8:ef:36:ee:74:94:db:a2:eb:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:52:F3:B2:C2:7A:A0:02:05:C0:9D:64:FA:48:8F:F0:BA:8C:C0:17
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32332d3233203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:77:c7:2e:76:01:f2:ce:ff:53:d3:a4:58:8a:f0:5d:0e:8c:
         d5:7a:24:98:99:d5:cf:50:50:d1:f2:43:fb:50:ee:b0:97:1d:
         99:cd:e4:0d:c6:7f:0d:c3:fe:a2:df:87:a0:08:22:36:3b:64:
         94:41:9a:74:bb:43:7e:ad:23:0c:4a:5c:a5:ec:82:49:26:f3:
         2d:1e:9d:4b:74:09:54:52:26:7f:fc:4b:9b:a0:94:fb:04:79:
         d9:23:4c:2a:2c:cb:83:6f:91:c9:a3:7b:e2:37:a1:18:77:56:
         d3:25:9f:ef:1c:1d:c9:fb:1d:a3:dd:a0:bf:bc:c8:43:0c:f7:
         93:3a:12:ad:79:23:eb:51:92:d9:e7:11:8f:4d:73:95:6c:68:
         df:61:52:32:d9:81:52:30:3d:68:13:06:6e:ae:0c:6d:96:11:
         92:e1:c0:49:d5:0c:ba:32:d0:9c:f9:af:a3:bd:6c:27:5b:41:
         0a:4e:d0:52:68:af:e2:26:3c:a2:1f:66:23:8e:f1:77:1d:e4:
         07:3a:30:c7:81:37:19:82:c7:24:42:8d:cc:16:27:bc:0f:67:
         1b:03:52:8e:39:2a:30:60:19:6a:e7:a4:38:0d:12:5b:35:99:
         f3:87:74:b7:cc:9b:1c:7e:ad:fe:b9:65:3a:dd:fa:a9:71:03:
         42:fa:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:37 2024 by rpki-client on console-fra.rpki-client.org