Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa
File:                     3137372e36372e37322e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          BMkL9kFbdwbOOLNYsiAYBMiSKZ4rMB0BPJ0WGksTTZo=
Subject key identifier:   B6:45:32:18:7B:25:7E:C9:31:28:40:77:83:C7:36:14:35:C9:D3:06
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       080C467CD55436E7CC99D9D7431B51CD35698236
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:23 +0000
ROA not before:           Thu 04 Apr 2024 11:40:23 +0000
ROA not after:            Thu 03 Apr 2025 11:45:23 +0000
asID:                     262530
IP address blocks:        177.67.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:46:7c:d5:54:36:e7:cc:99:d9:d7:43:1b:51:cd:35:69:82:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:23 2024 GMT
            Not After : Apr  3 11:45:23 2025 GMT
        Subject: CN=B64532187B257EC93128407783C7361435C9D306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:5e:2f:05:38:a4:24:73:64:9f:73:d6:20:
                    77:c2:2b:ec:b5:84:fb:48:d4:b9:37:fc:27:15:5f:
                    3d:fa:d1:40:28:1b:b5:7d:b6:39:c8:c6:b3:9e:5c:
                    eb:3a:6c:c0:8f:a3:4f:49:93:06:be:57:75:6d:b9:
                    38:83:c2:28:bb:5f:76:1c:c4:25:f7:b0:21:fe:86:
                    33:cd:97:8c:99:8f:b0:bd:a8:b7:d2:a4:7e:fd:2f:
                    84:e0:df:e2:93:f9:17:ee:78:d7:f3:8a:0d:a3:e3:
                    cc:14:05:22:81:5a:84:0a:0b:a7:f7:3b:90:d1:ff:
                    87:33:13:bb:2b:0f:a3:53:9c:f4:c0:c1:bf:f1:94:
                    59:e9:51:24:51:f7:b1:86:f2:8e:8c:47:6a:23:2e:
                    f5:6f:5f:d0:86:21:eb:28:0d:e5:c0:1f:d3:df:e7:
                    8c:27:5c:0b:13:b5:a5:aa:c8:db:54:2a:23:a3:5f:
                    49:4b:5e:ed:f4:d5:af:9b:56:c3:be:af:be:a4:20:
                    88:36:b5:d9:b6:e3:49:2a:68:5d:0d:12:8b:86:aa:
                    f6:54:61:94:5f:4d:d3:0b:e4:8e:dc:af:d7:08:ba:
                    73:91:b5:73:e0:46:be:bc:eb:f4:79:e6:a4:ce:0e:
                    91:6c:7d:56:50:24:bf:c3:18:1b:8e:1e:23:08:f7:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:45:32:18:7B:25:7E:C9:31:28:40:77:83:C7:36:14:35:C9:D3:06
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:c3:fc:63:11:f4:6e:58:95:6d:8b:10:16:de:7e:ae:f5:
         6f:e1:19:36:e9:bc:10:b5:81:12:2c:4d:c2:ee:df:c5:05:40:
         34:a4:9b:64:ef:f3:25:67:3a:d9:7a:fd:d1:fc:c9:b3:84:89:
         8c:ef:6a:d5:65:a1:c7:8c:24:a0:4e:e3:1e:f2:b5:3b:3f:3c:
         9a:64:47:95:8b:f5:7a:00:2f:ed:e5:dd:d9:0b:52:0f:07:19:
         5b:20:fb:fa:72:f9:72:2e:25:ae:1c:19:30:03:7d:3b:8e:84:
         35:60:fc:91:b2:27:2d:80:39:41:99:20:59:c7:bd:c7:93:24:
         1a:f9:8a:1a:5f:26:77:59:bc:9a:eb:10:e6:06:b4:0f:72:aa:
         e2:d0:d7:f3:1b:18:5c:8a:5f:27:e3:6a:f8:74:67:06:d6:98:
         e1:c5:ac:db:f3:3d:6f:a7:36:69:88:aa:c7:0e:0f:f3:58:53:
         8e:6b:bb:a4:8d:44:80:86:f0:94:5a:9c:a6:fa:f7:08:b1:c1:
         a2:c6:06:24:f0:5f:21:f7:11:a1:66:86:89:80:60:8e:4d:3f:
         e2:39:3e:31:c0:5f:93:85:93:34:a7:2d:a1:bb:b6:33:83:84:
         73:20:57:b1:02:e5:e5:60:69:22:36:75:91:46:b7:2d:03:6c:
         39:f3:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org