Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132322e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132322e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          tu2+FGXlJcBwfD1NtfHt+RmtHjUqu8vxSat9EBsY/Xc=
Subject key identifier:   73:2E:9D:9E:BA:4C:17:E7:42:DE:1E:97:80:1C:0E:4C:2B:C0:1A:A6
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       0521BD3CC495C5655A4D8ACA4A80C45CDBE4C04E
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132322e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     53236
IP address blocks:        177.10.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:21:bd:3c:c4:95:c5:65:5a:4d:8a:ca:4a:80:c4:5c:db:e4:c0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:fc:6f:a6:e5:8b:55:6c:70:42:d3:ef:86:
                    59:cd:1f:a0:9c:55:7c:10:47:c6:96:08:de:59:c4:
                    d2:3b:91:13:7b:5f:32:60:f4:ea:82:e6:28:77:75:
                    5a:a4:be:0e:e6:2a:fa:59:fb:76:bf:05:c5:8c:2f:
                    aa:7b:43:be:8f:6c:b9:f6:5b:aa:e2:d9:36:7e:a4:
                    16:31:07:17:7e:58:bb:a4:05:13:55:39:10:d4:d9:
                    b3:3e:4e:a4:ee:50:77:51:0e:1b:21:dd:a5:ee:61:
                    d7:d0:61:55:d8:58:fa:cd:9e:45:d1:47:a4:cb:16:
                    6b:3f:51:eb:71:75:b9:1b:4c:1c:9a:e9:cc:52:f5:
                    fb:ad:62:16:cb:7f:6f:8b:05:d2:9d:22:b4:80:e0:
                    96:88:69:df:a6:d3:5c:f2:44:a9:21:f9:dc:ef:1f:
                    df:72:1a:55:3f:ae:42:8d:77:0f:01:4a:0b:de:01:
                    1b:e6:ee:5f:7b:f0:99:4d:2e:b3:07:ab:9d:cc:d2:
                    1b:4e:f4:23:e5:27:07:9e:cb:1f:70:44:35:d3:0b:
                    0f:67:43:63:70:a4:8a:fe:6f:bc:f2:a0:2f:c9:4b:
                    a0:09:a3:0c:09:8c:16:da:02:2c:62:ee:1b:e9:1d:
                    e8:9a:72:15:d1:6d:f8:18:06:12:91:9a:1f:68:af:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:9D:9E:BA:4C:17:E7:42:DE:1E:97:80:1C:0E:4C:2B:C0:1A:A6
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132322e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:72:f5:8f:9f:a9:65:f1:29:cc:ea:d2:3b:89:d7:c7:0e:
         f7:5e:f0:79:90:96:b3:ce:10:7a:2a:0b:85:9d:cd:98:3b:1b:
         ee:b7:d7:f8:93:4c:79:ac:3c:0c:31:67:5e:dc:29:40:e9:ab:
         83:e7:c8:63:b1:0b:ee:39:be:53:33:bb:32:8b:11:be:b9:f9:
         4e:2f:94:52:9e:0d:fb:a3:4d:e9:94:65:4d:e7:8b:c8:62:3e:
         d1:6d:ac:52:62:6c:65:d0:18:de:28:e7:52:74:7a:83:29:d7:
         07:7b:e2:a6:dc:0a:84:3e:5b:88:58:cb:43:97:47:99:70:d7:
         ce:0c:d4:27:da:34:a1:65:f0:73:42:c0:d1:2c:0c:e1:6c:d0:
         e8:b7:27:74:9f:60:4a:ac:0c:86:f9:1b:97:46:52:88:be:93:
         e9:2f:0c:62:d0:3b:0e:24:6a:7e:6e:aa:9e:07:1d:22:66:fa:
         62:00:d5:25:f2:f4:6c:09:0b:2d:4a:8b:63:8b:15:17:3f:37:
         74:45:4f:ac:51:8b:98:ef:91:36:55:c8:83:73:7a:e4:6d:83:
         e6:60:79:fd:4a:68:12:9e:c8:66:b9:c8:11:15:52:45:99:a7:
         f8:a5:06:8f:16:27:14:40:63:16:d4:8b:3d:09:ac:60:ce:07:
         8c:19:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org