Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa
File:                     3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa (raw, json)
Hash identifier:          NstTkeWU+HdWMlMcQm3c8nCXzBGgVRR2thEZb7FFpzM=
Subject key identifier:   F9:94:9B:CE:81:7D:5E:4C:D3:A3:80:46:B7:F7:89:30:EA:40:E2:3E
Certificate issuer:       /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial:       67F51739F020AD014EB70D4C9E4DA3191B6138D5
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa
Signing time:             Thu 04 Apr 2024 19:13:05 +0000
ROA not before:           Thu 04 Apr 2024 19:08:05 +0000
ROA not after:            Thu 03 Apr 2025 19:13:05 +0000
asID:                     262433
IP address blocks:        177.39.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
                          rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:17:39:f0:20:ad:01:4e:b7:0d:4c:9e:4d:a3:19:1b:61:38:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
        Validity
            Not Before: Apr  4 19:08:05 2024 GMT
            Not After : Apr  3 19:13:05 2025 GMT
        Subject: CN=F9949BCE817D5E4CD3A38046B7F78930EA40E23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:fe:02:89:53:08:ad:a0:f0:80:f7:1d:44:
                    19:3f:c9:ef:7e:3d:93:31:94:c7:d2:7a:f9:18:c4:
                    9a:24:47:29:76:d3:c6:4c:1f:46:d2:a6:61:c8:9c:
                    93:47:f4:31:fa:4f:66:1e:24:03:b7:8c:28:31:00:
                    ab:39:ec:5d:b9:a0:72:d6:31:15:61:66:81:ff:f0:
                    9c:23:6c:dd:27:42:73:c3:72:d8:55:a9:23:70:93:
                    8c:98:9d:71:2c:4d:69:f2:b3:3c:1b:d0:84:5a:17:
                    20:34:8c:09:e3:82:12:5b:1c:86:25:70:9d:33:52:
                    92:29:3d:84:96:3c:2d:d5:7a:6f:24:b4:92:40:f9:
                    12:ba:55:ed:f5:ea:45:66:dd:39:9b:98:d2:6a:2d:
                    0a:ca:e0:8b:0a:95:19:e8:8c:fa:f4:e7:a1:9d:5c:
                    8a:24:74:6a:9b:96:92:9a:6e:ea:6c:b7:0a:46:da:
                    77:c1:8d:f5:dd:9f:c5:23:c2:a8:d8:f6:f0:5e:64:
                    89:f3:0e:38:11:e0:06:3f:fd:c4:e7:de:fc:94:ba:
                    5f:ec:c4:64:bb:b9:a2:46:05:0d:cb:e0:46:1e:f9:
                    8f:41:37:ed:af:b4:24:6b:29:96:e9:d1:b1:84:ad:
                    46:5d:df:0c:15:62:d3:b1:5a:03:ed:58:73:bd:c7:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:9B:CE:81:7D:5E:4C:D3:A3:80:46:B7:F7:89:30:EA:40:E2:3E
            X509v3 Authority Key Identifier:
                keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:cf:71:da:85:27:db:63:f1:79:e5:72:59:04:5e:57:da:b9:
         9d:ae:13:ec:0b:e3:92:07:8e:82:bd:f2:61:8c:71:f7:9a:f7:
         c3:d5:95:31:10:ae:a9:79:92:b7:fd:40:2e:24:27:63:2d:73:
         f7:1b:e2:01:71:c3:be:71:47:2a:22:a8:ca:c6:a1:44:66:f7:
         9b:16:de:c2:05:73:15:eb:4d:27:68:8b:b2:93:ad:52:54:8c:
         16:14:26:d0:66:dc:52:04:ab:13:99:89:44:4a:95:dc:82:d8:
         73:32:fd:bf:de:c9:25:a7:c2:51:a4:ea:4b:ce:cf:fa:33:5a:
         da:fa:30:d9:be:36:16:6d:07:83:fd:67:a9:d4:ba:84:52:0f:
         04:61:07:c4:61:c7:c1:95:07:f2:10:bf:39:45:de:ed:47:47:
         7c:5a:46:fa:17:12:99:d8:e3:48:9e:0e:d0:e0:c0:57:5b:8c:
         56:8b:c8:fb:4d:a0:bc:7d:28:a6:04:d5:b0:46:cb:97:88:9a:
         07:25:7c:e4:7d:f1:54:24:98:24:5b:e3:27:79:9d:c3:ba:e6:
         d8:13:fa:c4:63:9b:21:2d:d9:a2:bf:9e:78:cd:43:5c:92:3e:
         db:18:86:6f:3c:36:6f:c4:67:46:21:e4:2d:f2:d8:46:ae:d7:
         b6:d0:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org