Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          b+uUYxKF1Yme52TW/KI/aopmCli9O7wjvuEd2QIf5x8=
Subject key identifier:   AF:DB:B1:86:B1:29:74:8F:18:AA:94:9B:45:FF:48:F1:22:D1:79:96
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       2613E08ADD3305989F30304DD8C6DA5D9EF3173B
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:08 +0000
ROA not before:           Thu 04 Apr 2024 08:02:08 +0000
ROA not after:            Thu 03 Apr 2025 08:07:08 +0000
asID:                     52861
IP address blocks:        177.124.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:13:e0:8a:dd:33:05:98:9f:30:30:4d:d8:c6:da:5d:9e:f3:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:08 2024 GMT
            Not After : Apr  3 08:07:08 2025 GMT
        Subject: CN=AFDBB186B129748F18AA949B45FF48F122D17996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:20:7c:29:71:7c:ca:46:2b:72:7b:d5:38:
                    85:eb:7d:69:cb:02:08:87:4b:d7:37:71:38:cb:70:
                    e3:a6:07:de:37:4b:fa:d2:b6:46:d6:0d:16:b4:93:
                    0c:1a:c5:85:7f:93:9e:3c:ca:f4:12:98:3b:85:91:
                    1e:5c:b5:09:96:02:23:6b:97:34:d8:4c:3d:23:e2:
                    3b:64:8b:c5:1b:68:2e:c9:29:9f:88:41:a3:84:49:
                    45:96:da:38:5b:d4:4f:f6:55:cd:f8:17:82:01:09:
                    6d:da:6f:f8:eb:57:0a:0a:8b:1b:e3:15:5d:e7:18:
                    72:57:24:e5:d5:e9:00:39:66:cf:8c:e1:e6:06:3b:
                    33:ba:af:1c:99:09:d7:75:0a:91:74:dc:bf:be:40:
                    be:03:60:ad:e3:69:91:f7:ee:bb:df:e6:27:39:14:
                    b2:e3:ee:a6:a7:df:fe:5d:d6:94:a8:b2:be:4c:b4:
                    b8:ff:b4:72:90:45:3c:63:ac:80:12:76:0d:93:ce:
                    6e:28:8f:06:d9:4e:83:db:4a:dd:b3:83:77:e2:51:
                    3a:81:23:89:53:87:ab:c8:a0:67:a6:06:7b:39:ff:
                    ce:c0:a2:a9:2d:bb:df:ba:d6:e0:f1:80:7a:3f:c6:
                    84:09:89:e5:19:50:da:4f:45:a8:97:fb:bb:9f:9e:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:B1:86:B1:29:74:8F:18:AA:94:9B:45:FF:48:F1:22:D1:79:96
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:82:5b:bf:43:49:81:1f:a7:54:30:3d:88:5d:8f:fe:e9:bb:
         10:b3:f3:ba:ac:92:9a:36:b6:db:ef:df:dd:ea:68:34:3e:7c:
         f5:19:bc:b9:42:8e:96:ce:46:9a:6f:3b:e1:b6:02:fb:f3:f0:
         7c:c9:c0:f4:d9:b5:44:98:9d:72:c2:fb:4a:75:96:3c:35:f1:
         ec:73:99:f4:27:ac:b6:19:93:fb:92:81:28:77:e7:8e:36:3a:
         ec:35:0d:f0:e4:79:4b:74:90:0d:eb:ee:6a:43:d7:42:38:8e:
         61:90:5a:f0:20:c9:02:c9:b2:2b:4b:aa:a7:79:85:81:6b:93:
         2b:de:26:b4:88:cb:63:bd:27:27:7a:1a:27:10:02:35:99:41:
         7e:f3:35:9e:a8:0c:6e:0d:c1:29:99:06:4d:3b:bc:94:7b:8f:
         6a:ee:c5:b9:86:2a:a5:f8:af:70:58:b7:67:b0:e2:a4:80:4e:
         90:fc:d1:c6:49:e9:c9:c6:27:66:9f:8a:de:fe:56:51:b0:86:
         9b:98:ac:7a:b3:87:3b:d8:f2:5c:f7:71:c5:77:4d:85:2c:a8:
         06:f9:7d:6a:17:56:1c:76:cc:3d:12:69:bb:53:9e:b9:d1:8a:
         4b:18:0e:fc:f6:75:4b:45:20:5b:2f:99:07:ad:1a:23:85:35:
         4d:9f:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:23 2024 by rpki-client on console-fra.rpki-client.org