Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
File:                     3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          SvznabfhFYoG//BC+xzuxF6l+rRHph1MCef7ITJTBe8=
Subject key identifier:   D1:DE:8B:D7:57:F2:81:6F:8C:F6:B7:5D:96:C6:F6:58:37:5D:F7:16
Certificate issuer:       /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial:       4B6E0F5429CE8D2F4B2E077056F702AE733EF523
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
Signing time:             Mon 28 Oct 2024 18:34:35 +0000
ROA not before:           Mon 28 Oct 2024 18:29:35 +0000
ROA not after:            Mon 27 Oct 2025 18:34:35 +0000
asID:                     28299
IP address blocks:        177.185.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
                          rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:0f:54:29:ce:8d:2f:4b:2e:07:70:56:f7:02:ae:73:3e:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
        Validity
            Not Before: Oct 28 18:29:35 2024 GMT
            Not After : Oct 27 18:34:35 2025 GMT
        Subject: CN=D1DE8BD757F2816F8CF6B75D96C6F658375DF716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:f5:59:c4:15:44:ae:17:ab:5b:88:ca:17:
                    72:79:14:23:5c:fc:7b:50:13:2a:77:c9:a8:c6:6d:
                    ca:86:0a:dc:87:3f:eb:69:44:68:c4:42:a0:11:a3:
                    ba:1f:60:38:df:94:53:0f:d7:72:19:62:73:16:de:
                    7d:ee:0b:ee:d8:ea:43:30:6a:01:df:55:d1:b8:71:
                    6a:59:52:b8:30:40:ed:6c:41:25:a6:52:6b:86:2c:
                    33:cc:6e:01:4b:ee:00:60:94:27:9b:16:1a:0a:d0:
                    15:c6:00:2c:7a:17:65:c3:c3:d8:a6:a7:4a:7f:08:
                    1e:4d:47:bc:23:63:0a:9d:5a:75:2b:37:00:d4:bc:
                    ee:77:ac:f7:3d:e9:96:61:6d:1e:5a:89:9d:01:bd:
                    cf:9b:de:08:d8:6d:f1:5a:26:7f:58:59:b9:01:d6:
                    0f:c6:f4:da:67:8b:ae:ab:b1:5e:43:86:2f:97:30:
                    d1:70:b3:a8:ce:02:c9:a2:f6:0b:de:c9:e8:3d:a2:
                    94:a6:a3:18:5d:58:b0:fb:13:4a:d6:4e:a8:6a:0d:
                    8b:a2:f7:cc:05:f5:39:10:30:2b:fa:0f:d1:00:c8:
                    94:18:05:49:4f:23:da:16:65:22:9c:1a:62:7e:3b:
                    b3:a8:c7:ab:84:6d:34:99:00:e2:de:a0:4b:a7:05:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:8B:D7:57:F2:81:6F:8C:F6:B7:5D:96:C6:F6:58:37:5D:F7:16
            X509v3 Authority Key Identifier:
                keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:f8:d3:f3:5b:35:9c:67:34:cf:cf:df:2f:0b:35:33:15:
         51:df:23:6c:1e:2f:c4:9f:09:5a:ce:0b:de:79:94:ff:8f:0f:
         9f:26:82:c0:5b:da:e9:f0:26:48:c6:9f:e1:d9:9f:46:0a:46:
         4b:23:95:35:07:cd:6b:ab:b1:71:6e:92:58:69:ca:38:e5:60:
         ec:a3:93:d0:0c:b4:5e:d4:a6:ae:84:53:f6:eb:5f:91:12:c7:
         9c:b3:b8:78:a6:b9:20:ca:61:16:67:f4:88:f8:e7:6b:2c:e4:
         2e:ff:2f:40:06:08:91:e1:00:ee:d8:59:d7:06:19:4c:19:53:
         89:c5:60:a6:5b:0b:31:9e:6d:f0:8d:a3:1c:63:6c:99:43:f8:
         51:07:da:dc:87:12:18:59:17:62:a7:35:85:57:db:91:6e:a1:
         09:ca:1d:d8:c2:f6:02:45:87:f3:00:ab:d1:53:e9:9f:f4:2a:
         62:85:81:d5:c5:7c:c1:a4:db:f9:5b:77:0a:2a:f5:de:b8:ac:
         0e:9a:83:76:3b:11:ea:17:ba:8f:b8:16:11:c2:91:70:8b:e5:
         d2:4f:4e:cd:61:c3:81:3c:5c:ce:17:0d:0d:1f:78:68:8d:0d:
         c4:4a:0d:ca:03:e3:42:d6:dc:8b:93:bb:4b:0c:b8:46:62:a9:
         e9:d9:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:54 2024 by rpki-client on console-fra.rpki-client.org