Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          zRcN4WFajDHhT81aU7jl8UDe80stv0VcIZuXiRZJfPc=
Subject key identifier:   3B:93:2B:11:ED:B2:3A:71:10:EE:FA:45:8E:94:13:66:BF:7A:D4:DC
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       1F1165E8BA58EFFCCF22C1669D176F456B8BEB6A
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:12 +0000
ROA not before:           Thu 04 Apr 2024 08:02:12 +0000
ROA not after:            Thu 03 Apr 2025 08:07:12 +0000
asID:                     52861
IP address blocks:        177.124.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:65:e8:ba:58:ef:fc:cf:22:c1:66:9d:17:6f:45:6b:8b:eb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:12 2024 GMT
            Not After : Apr  3 08:07:12 2025 GMT
        Subject: CN=3B932B11EDB23A7110EEFA458E941366BF7AD4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:40:98:7a:e4:60:3b:58:36:1c:2e:cd:d1:
                    33:40:01:66:4a:0c:22:4f:b0:14:c1:6f:4b:77:ed:
                    8d:e9:c5:dc:11:e0:b1:80:54:e2:9e:17:64:76:c1:
                    24:00:87:dc:39:a0:7b:ca:6f:be:bb:b9:12:8c:b2:
                    cd:0d:26:40:7b:c2:c7:7b:29:67:f0:09:64:b0:11:
                    54:c3:b1:ce:d4:45:8e:11:06:10:ca:2e:f4:1a:05:
                    15:4d:4a:43:fd:55:b8:c0:f2:23:fb:74:c3:12:51:
                    0b:67:03:32:a4:63:0b:c1:a2:6d:24:c5:00:4a:f6:
                    66:07:c0:ad:d2:71:21:29:51:ab:fa:d9:14:dd:8e:
                    1d:04:83:89:79:23:8e:68:23:a6:b3:2a:ff:fe:19:
                    90:10:f1:3a:d2:f9:cc:e4:d9:ef:d7:61:6e:18:7a:
                    9d:7c:91:bb:fa:3b:76:8c:ed:e4:ed:25:6a:65:63:
                    34:b9:d8:03:ac:7a:c4:b4:11:85:a0:1b:f7:ec:0a:
                    5e:09:d1:eb:36:59:b0:1a:bf:e4:b5:e7:23:9f:ce:
                    e2:97:6c:b7:12:aa:f2:bb:56:2e:4a:06:a4:d7:13:
                    ba:a4:ab:27:84:8d:ca:89:55:e0:15:ff:b2:84:36:
                    50:97:61:ec:50:e2:df:c4:ca:eb:85:af:1d:b1:5f:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:2B:11:ED:B2:3A:71:10:EE:FA:45:8E:94:13:66:BF:7A:D4:DC
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:50:00:3a:38:e2:f0:d9:7f:ce:70:83:87:ed:ae:dc:a1:
         91:6f:2d:71:63:e8:f3:0f:15:69:24:6b:3e:96:ab:a2:33:dc:
         79:64:5c:7e:65:59:47:99:1d:5c:82:c2:08:f2:e5:06:72:43:
         c0:d8:46:8b:25:aa:ed:79:b4:1b:ee:3b:39:c3:d8:bd:e8:a4:
         e9:b9:2b:fe:e3:72:ef:35:73:87:42:ed:a4:a9:86:18:0b:f2:
         6b:8c:f0:8d:0c:35:1c:53:2e:5a:97:21:e3:f5:1b:06:25:f1:
         9c:88:6c:ea:9c:bb:d2:a5:29:64:f3:ab:6b:d6:a4:8c:22:4b:
         bc:7f:2d:11:c5:b6:58:a9:61:18:73:68:83:84:44:ed:92:e1:
         3a:80:8a:65:bb:f1:a9:fd:78:0a:47:fd:da:ca:61:59:ae:35:
         e5:2c:40:d9:e1:78:93:1b:cb:76:f3:16:9e:81:ff:9d:ef:e2:
         be:0a:0a:e7:81:c7:34:14:a3:7a:6f:13:14:54:74:37:69:89:
         fe:01:0a:fc:70:a7:58:72:81:b4:5f:32:37:65:f5:ef:c7:e7:
         f4:6b:f9:0c:bc:b3:08:40:f5:a5:35:be:82:22:f1:13:0d:ad:
         5d:bf:e6:e5:b3:ce:1e:7c:64:63:5c:db:e1:9e:25:ef:87:6b:
         e8:45:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:20 2024 by rpki-client on console-ams.rpki-client.org