Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32332d3233203d3e203533323039.roa
File:                     3137372e31312e3134302e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier:          tprmcSeWoZEUb3JO/5l3iTrGsrQzYJCHulYG1lP8Rzo=
Subject key identifier:   12:C5:A3:54:94:64:24:DA:46:E5:94:98:62:83:56:FE:92:5C:62:9C
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       7FF6852D7B3C7BDEFDFE3A76631DC2C21E9D0056
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32332d3233203d3e203533323039.roa
Signing time:             Tue 06 Aug 2024 17:59:35 +0000
ROA not before:           Tue 06 Aug 2024 17:54:35 +0000
ROA not after:            Tue 05 Aug 2025 17:59:35 +0000
asID:                     53209
IP address blocks:        177.11.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f6:85:2d:7b:3c:7b:de:fd:fe:3a:76:63:1d:c2:c2:1e:9d:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug  6 17:54:35 2024 GMT
            Not After : Aug  5 17:59:35 2025 GMT
        Subject: CN=12C5A354946424DA46E59498628356FE925C629C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:35:15:fe:3e:4d:c2:c8:f4:e2:ea:06:ab:
                    21:77:23:46:98:25:91:96:c1:09:e3:12:a3:52:02:
                    32:68:77:d9:cd:f7:d4:10:83:5a:ac:20:af:30:ec:
                    80:61:75:f4:80:43:8f:24:51:95:24:c8:3f:c4:04:
                    c7:60:78:41:49:9f:c0:5b:6a:4d:a9:2c:93:fb:66:
                    66:46:f3:7f:fc:89:09:3c:b0:34:ee:c1:70:32:d9:
                    dd:5c:3d:f1:15:29:37:a3:89:cf:29:6b:7f:b8:3b:
                    f6:9f:f5:60:99:79:59:56:4a:b0:77:e2:2a:a2:05:
                    c8:64:2b:5d:19:fc:a4:c2:ae:2b:0e:4a:69:95:da:
                    cb:f8:e8:9c:db:c8:67:78:b1:32:72:f7:99:fc:b1:
                    94:ee:f2:21:86:68:72:16:e8:f0:d3:06:b1:11:fa:
                    6c:6c:35:0b:6b:2e:cc:50:01:96:70:ec:f4:82:b4:
                    e8:92:b4:d6:cd:64:4c:72:eb:26:25:4b:74:8e:28:
                    f4:db:32:d7:25:31:a1:a1:71:52:c5:ef:e2:cf:39:
                    49:45:e5:49:c3:ca:6d:12:6a:d2:e3:dc:ce:ea:22:
                    91:15:ad:91:1f:b1:fe:e9:14:c9:79:b5:fa:12:d3:
                    39:a3:67:88:a4:de:a0:d0:d4:b9:41:aa:ed:41:1a:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C5:A3:54:94:64:24:DA:46:E5:94:98:62:83:56:FE:92:5C:62:9C
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32332d3233203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:26:f4:95:70:96:13:a6:7a:77:a0:f1:27:dd:2d:0b:f2:16:
         36:91:27:ce:7f:30:1c:41:15:53:67:6f:fc:e8:f0:4a:99:54:
         82:2e:02:4d:1e:53:61:df:05:0c:96:6e:63:97:68:8e:7b:f6:
         70:7c:82:e4:39:ec:fc:2c:77:4f:3a:1e:71:94:86:2c:88:52:
         b9:41:ac:04:89:ee:74:c6:ad:cd:c5:35:45:f4:a5:8d:b0:4c:
         c3:7c:a4:50:7b:df:78:3b:c8:e2:44:02:9a:86:36:b3:e8:32:
         e4:86:5e:f3:17:16:fb:77:2b:aa:85:94:f1:39:ee:c0:d1:cd:
         7f:34:a5:f6:a0:aa:9f:28:4d:ee:28:ff:d6:9c:77:dd:68:83:
         e3:a5:30:91:c0:f9:f4:51:a3:02:f9:f2:5a:c3:b8:e2:0a:40:
         d8:82:7c:9f:22:5d:d3:b7:ec:e2:7f:22:a0:e3:d8:be:bd:6a:
         de:29:03:a8:10:6f:5d:55:48:2f:48:cc:00:74:c7:be:3d:96:
         d4:18:07:5e:d6:05:78:ab:2c:5d:cf:db:2b:de:cd:ca:b4:0b:
         3c:ff:e1:7d:cd:f2:fa:de:de:fa:84:db:8e:a5:5b:6c:e1:89:
         42:e6:6a:08:23:ed:83:fe:9a:e6:3e:aa:f5:70:3f:d6:72:53:
         d2:3b:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org