Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3135302e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          4Eze7KbqeBitPe5KqkbDZQWnOrKJEMkdPUCX44EziAQ=
Subject key identifier:   CF:A3:C2:A2:5E:21:41:77:EB:FA:A5:BA:55:85:66:F6:39:2E:1F:5E
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       58C4216149372903D099A9FD6EBBC6E3890D9CE6
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:09 +0000
ROA not before:           Thu 04 Apr 2024 08:02:09 +0000
ROA not after:            Thu 03 Apr 2025 08:07:09 +0000
asID:                     52861
IP address blocks:        177.93.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:21:61:49:37:29:03:d0:99:a9:fd:6e:bb:c6:e3:89:0d:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:09 2024 GMT
            Not After : Apr  3 08:07:09 2025 GMT
        Subject: CN=CFA3C2A25E214177EBFAA5BA558566F6392E1F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:b8:54:6b:a5:22:93:be:30:40:f6:bd:91:
                    86:2e:db:11:d5:32:0b:3b:30:3f:67:03:c5:ed:90:
                    c7:45:e8:c5:57:30:5e:2a:14:fd:44:b6:b4:48:14:
                    f7:d0:a0:93:55:35:4c:10:51:e7:35:f7:1d:94:83:
                    4a:fd:76:3c:98:74:19:75:4c:b9:43:2f:a0:f4:10:
                    c2:2d:76:7b:52:c3:d4:4d:58:b3:28:2f:e2:ea:25:
                    0d:99:76:2d:f6:70:68:bd:da:74:19:8b:36:23:1c:
                    fd:be:42:de:ff:cc:23:c7:a4:15:8c:1a:b3:72:75:
                    74:8a:2a:e8:06:dd:a5:35:ff:e7:ae:e0:3d:7a:35:
                    a5:a6:92:f2:da:20:09:d6:63:8a:d5:fc:5c:77:5e:
                    5d:15:47:dd:b1:43:b5:69:c0:aa:9a:68:a0:a1:69:
                    12:3f:66:b9:72:f7:a6:60:80:a8:bd:a1:b1:02:81:
                    cf:d8:7b:eb:51:b8:20:b6:4b:b2:87:34:08:51:48:
                    52:c5:d3:03:91:98:7a:d5:15:28:af:db:58:36:e8:
                    3e:f2:63:16:61:50:8f:66:b9:28:da:d8:47:ac:b2:
                    96:dd:9a:dd:d2:31:82:8b:7a:fe:87:f1:32:ef:83:
                    bc:b7:f9:70:bb:15:3f:60:bb:bd:f2:5f:e3:35:f4:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:C2:A2:5E:21:41:77:EB:FA:A5:BA:55:85:66:F6:39:2E:1F:5E
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:5b:8e:80:ad:ca:75:7b:d6:e9:44:1c:a2:1c:05:07:97:
         18:90:b4:5e:b0:e8:6a:7c:ba:77:9d:96:07:63:51:ad:f8:da:
         94:85:63:e0:58:7f:9d:bf:62:e7:6a:11:88:ea:3c:4b:f3:ae:
         a1:24:70:11:37:d8:3e:c8:65:75:2d:01:dc:f6:1f:49:01:2e:
         27:86:42:7e:7e:cb:94:1a:81:4b:d0:09:0a:20:83:f9:b2:4d:
         98:4f:84:21:d0:18:3a:d7:b2:c7:7e:f3:1b:8a:08:d2:7b:78:
         4f:6c:cb:af:53:1f:f2:f4:a1:43:3d:82:dc:ac:d3:3b:a8:0d:
         ff:08:0a:1a:74:50:b6:28:94:6a:1c:da:1d:38:9a:19:14:98:
         db:8a:5c:da:cc:a0:c0:a5:1c:f0:89:dd:73:cc:11:56:86:78:
         7f:9f:c8:2e:a8:7b:6f:8f:fc:6f:9a:77:f1:3e:dd:f3:18:8b:
         da:9e:33:f9:e6:55:ab:2c:d7:d0:68:8e:c4:97:4c:df:6a:34:
         46:6d:09:11:1a:df:38:d7:fe:6e:60:62:e7:67:68:b4:e7:ac:
         f9:e3:86:7f:0a:12:f4:22:e3:4e:b8:ce:91:b3:ac:fb:e4:53:
         2f:b7:60:a8:f8:66:01:77:71:22:84:1e:14:f1:43:9c:fb:dd:
         9f:32:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:20 2024 by rpki-client on console-ams.rpki-client.org