Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
File:                     3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (raw, json)
Hash identifier:          Xek9wAOe0YuqsCtpm3fpvUJsZFd3/e1z0yuC1+TwbuY=
Subject key identifier:   04:5A:96:EB:09:B4:9E:92:87:A5:B3:77:07:95:FC:65:D9:BE:54:8C
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       7D5FE18B60F5BADE7F27868FF82AE5E1AC2BA11A
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
Signing time:             Thu 04 Apr 2024 02:10:08 +0000
ROA not before:           Thu 04 Apr 2024 02:05:08 +0000
ROA not after:            Thu 03 Apr 2025 02:10:08 +0000
asID:                     262408
IP address blocks:        177.38.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:e1:8b:60:f5:ba:de:7f:27:86:8f:f8:2a:e5:e1:ac:2b:a1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Apr  4 02:05:08 2024 GMT
            Not After : Apr  3 02:10:08 2025 GMT
        Subject: CN=045A96EB09B49E9287A5B3770795FC65D9BE548C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:e3:56:b2:34:3a:8e:e1:91:32:5c:48:a0:
                    40:64:f1:10:0d:1f:da:e0:45:37:45:ba:5e:85:6e:
                    2a:b7:0a:31:d5:99:19:e6:f0:95:86:6e:5c:cf:d0:
                    c7:bf:c8:2f:e5:fc:d9:c7:c8:aa:56:3b:d2:17:a0:
                    b7:20:72:70:89:e6:00:5f:8d:da:6d:31:ce:82:dd:
                    49:ef:d5:a0:5c:02:ed:c4:0f:98:eb:c4:36:f7:93:
                    fa:c1:8a:ed:f6:c5:ef:5a:01:03:ae:3e:cd:df:c6:
                    e3:4e:0b:8f:d9:db:c5:b7:43:fc:cb:92:32:37:45:
                    23:93:fb:db:fd:5b:51:a9:90:eb:70:cd:26:21:c8:
                    36:39:5f:f8:34:e2:32:e3:d6:21:ba:0c:ca:bf:13:
                    9c:b5:87:6e:ca:df:fb:fa:b6:a6:a9:79:01:c8:4e:
                    74:f9:27:9e:a0:9b:af:93:51:8b:fe:b4:ee:73:3a:
                    04:65:e4:45:75:a1:f9:e7:c0:3c:b2:b4:42:e8:ee:
                    ef:91:98:18:2f:38:33:49:e9:7d:00:49:b2:6f:4e:
                    41:5f:d5:b3:a4:df:d7:fc:e5:3d:e9:ac:79:2d:79:
                    41:51:3c:71:2a:6f:cf:88:14:19:35:96:ba:14:8a:
                    6f:ae:62:9a:fb:1c:24:dc:88:d2:c8:ea:94:fe:b4:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:96:EB:09:B4:9E:92:87:A5:B3:77:07:95:FC:65:D9:BE:54:8C
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:58:1b:0d:dd:d7:a0:c1:7a:a0:77:e5:17:71:57:04:00:
         d8:5e:89:a3:ae:3b:23:35:0a:8b:7e:d9:38:4c:9e:de:7d:b8:
         be:f8:4f:0f:f5:12:13:fb:e1:17:b3:d4:d8:03:be:37:ad:e4:
         4e:e8:ee:cb:f7:f8:5f:2c:8d:3b:92:2d:20:1d:f4:9c:32:ad:
         09:6c:de:df:6f:4b:f5:33:66:38:c9:0b:ba:85:c0:a4:d9:25:
         80:51:83:10:50:0c:2e:de:6b:4e:0b:16:a5:44:98:8d:fa:d4:
         8f:fb:ca:bb:71:52:30:37:4e:c6:40:6f:6c:dc:23:8e:43:4f:
         b8:d8:37:64:f3:f5:bb:8e:79:25:f6:c8:32:10:a6:93:09:67:
         c1:ba:2e:9e:e0:ff:f4:c5:a3:55:d7:7b:c3:c5:5f:ee:bd:40:
         c3:7d:f1:0e:fb:61:7e:02:3c:83:01:10:43:4a:3f:d0:66:80:
         18:53:2f:7d:d2:1d:ee:e6:8d:b0:e3:96:ca:77:8d:94:44:1f:
         8b:cb:f4:dc:25:9b:c5:2a:a7:d7:56:08:be:d3:60:8f:ea:4b:
         27:91:6d:93:cc:90:f4:29:ff:9a:ea:bf:cc:1b:5f:d9:00:e6:
         70:2a:5e:89:2f:1e:35:0b:44:3e:c4:db:33:60:ee:f3:ea:cc:
         ef:6e:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org