Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134342e302f32322d3232203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32322d3232203d3e203532383631.roa (raw, json)
Hash identifier:          WFeNyD+zPLjnm48IUsMOfWVSgnZ6cxuayUt/y66KHcY=
Subject key identifier:   E4:C1:6F:6D:8C:4D:69:E4:CF:83:B1:ED:73:94:DB:7C:4B:45:16:53
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       39EC3A940F65A2B0DBEC7FB0B004105E1EAA559F
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134342e302f32322d3232203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:10 +0000
ROA not before:           Thu 04 Apr 2024 08:02:10 +0000
ROA not after:            Thu 03 Apr 2025 08:07:10 +0000
asID:                     52861
IP address blocks:        177.93.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ec:3a:94:0f:65:a2:b0:db:ec:7f:b0:b0:04:10:5e:1e:aa:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:10 2024 GMT
            Not After : Apr  3 08:07:10 2025 GMT
        Subject: CN=E4C16F6D8C4D69E4CF83B1ED7394DB7C4B451653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:5e:b6:75:ba:00:e8:71:8f:3a:46:ce:63:
                    ac:ea:22:04:76:91:0f:67:70:ce:9f:4d:6e:7e:d4:
                    6b:8c:e4:08:96:2a:67:c6:31:dd:22:56:81:fd:a0:
                    e9:84:07:f1:db:ea:7d:18:42:1f:e2:92:8a:0b:61:
                    66:18:0a:58:e0:64:51:c9:7f:12:72:71:78:0f:9c:
                    91:81:0a:30:37:f2:c9:5e:a4:5d:96:a4:48:af:65:
                    43:cd:81:8b:9e:1b:9d:4f:7a:aa:b8:0c:f3:ca:b8:
                    4b:7c:a7:db:24:3e:d0:a2:a5:20:00:b4:8d:4f:e5:
                    03:cf:db:b3:c7:22:a7:80:05:58:93:1d:d6:8f:f0:
                    0a:ba:10:9b:de:45:7e:e0:5f:c8:c7:41:23:5c:93:
                    07:4f:c4:1f:5b:8b:14:00:a2:52:24:c8:f5:a4:ba:
                    5c:74:86:cb:05:79:c2:a8:b3:55:4f:66:af:df:62:
                    96:df:1d:78:c1:c2:20:5c:b9:f1:e3:80:2c:cf:37:
                    f0:ae:4d:5b:88:97:2c:5d:f0:cd:63:e7:89:4d:9e:
                    87:94:b9:99:f6:21:54:f4:72:3e:86:ed:95:f1:a3:
                    ae:3f:bb:41:27:3b:df:c7:ce:39:37:70:6e:f4:74:
                    0a:91:3d:53:3e:32:51:e5:f6:5a:c8:7f:37:21:5c:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C1:6F:6D:8C:4D:69:E4:CF:83:B1:ED:73:94:DB:7C:4B:45:16:53
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134342e302f32322d3232203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:5c:ec:c8:a3:56:8c:7e:28:4c:3f:9c:1b:f3:4e:01:30:
         8b:f7:0d:e0:a8:27:c9:4f:0d:42:92:ce:e3:66:b3:fc:22:7b:
         dc:80:47:3c:cc:72:d7:96:23:99:86:fa:70:e6:89:35:b7:13:
         49:e0:85:bb:4e:94:24:04:fc:c8:d3:53:18:51:e2:d7:0e:fd:
         3f:ae:be:37:c7:7d:18:dc:54:51:8d:ee:62:79:57:68:5a:06:
         28:6e:00:5b:f6:3d:d8:36:e4:8e:d6:f3:14:e3:65:f8:73:3a:
         b5:ca:66:5f:19:3d:50:fd:d5:88:6c:9f:c1:f1:63:66:45:c6:
         01:53:ac:cc:af:e3:8e:e9:b4:e5:25:ef:8a:61:05:d2:63:86:
         5a:ab:6f:2d:35:34:3a:c4:78:9c:11:fe:c8:1f:ef:b9:ac:c2:
         3a:98:67:da:f6:06:8a:4d:5b:2b:bd:80:09:5d:f2:70:18:e5:
         5e:72:21:e1:dc:cd:a8:35:7b:dd:27:e1:88:fa:ad:da:6f:1e:
         f8:d7:aa:6a:cb:a5:3a:9f:2f:3c:b0:37:7e:e5:08:8c:b3:56:
         f1:c5:5f:24:b9:46:2e:6d:1c:d7:f0:b5:a2:14:3a:e9:99:40:
         d8:7b:35:c3:26:28:14:a1:0c:c4:43:50:7d:6e:f8:6b:59:9f:
         e7:90:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:23 2024 by rpki-client on console-fra.rpki-client.org