Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32332d3233203d3e20323633353030.roa
File:                     3137372e3232332e34382e302f32332d3233203d3e20323633353030.roa (raw, json)
Hash identifier:          84x+3eArql0agbUvN/BQz1d3EZAbJpbln8VUhhs1otc=
Subject key identifier:   39:70:4E:F3:EC:13:71:28:2C:C6:B1:22:C6:63:31:DD:CE:FE:B6:B4
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       6F489E45B201B3C7ECD38CA5A87E77740AD8E34F
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32332d3233203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:33 +0000
ROA not before:           Thu 04 Apr 2024 10:53:33 +0000
ROA not after:            Thu 03 Apr 2025 10:58:33 +0000
asID:                     263500
IP address blocks:        177.223.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:9e:45:b2:01:b3:c7:ec:d3:8c:a5:a8:7e:77:74:0a:d8:e3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:33 2024 GMT
            Not After : Apr  3 10:58:33 2025 GMT
        Subject: CN=39704EF3EC1371282CC6B122C66331DDCEFEB6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:2c:46:56:58:19:6e:4c:a7:a8:9d:c5:68:
                    9a:5d:f5:03:23:52:d8:fe:fe:61:72:2c:30:58:39:
                    2a:bf:bb:fb:34:0c:ee:63:f2:07:66:db:34:b4:3d:
                    91:1c:61:dd:57:4f:5c:2d:41:a9:98:48:23:7c:14:
                    b0:4f:53:75:c7:53:e5:b3:9e:ff:ec:03:b2:f6:5a:
                    66:35:3d:da:b5:06:14:95:22:c4:2e:1a:de:5d:88:
                    fa:55:e9:20:cb:09:6e:ee:60:35:10:83:34:0a:ac:
                    73:8e:9d:b7:9b:d1:3d:eb:be:cb:0d:f2:5f:36:eb:
                    45:1a:4a:5c:8c:dc:90:a5:11:fe:1f:e6:b3:fe:f2:
                    0b:ea:0d:b8:1a:30:ed:eb:22:40:6e:5a:d2:cd:65:
                    d9:86:7d:29:eb:15:02:a3:c5:d5:b8:1c:15:b9:e2:
                    e3:15:2c:d1:04:cd:2b:1e:b8:88:87:bd:e4:e1:a3:
                    f1:ac:5e:d2:55:e0:82:09:44:2e:1d:cc:fd:67:00:
                    42:99:02:35:e7:65:d4:50:a7:43:34:32:f5:f9:79:
                    b9:e7:62:90:83:93:bc:a8:8b:18:27:fd:e3:5b:73:
                    51:09:85:14:09:64:69:15:bc:87:0a:34:ca:5f:cc:
                    e4:10:f0:2e:0f:ee:51:7b:89:4d:74:05:e8:5a:f5:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:4E:F3:EC:13:71:28:2C:C6:B1:22:C6:63:31:DD:CE:FE:B6:B4
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32332d3233203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:85:4e:46:24:f1:55:ef:dd:19:ed:04:44:74:0f:e2:04:
         64:26:c9:4c:d8:66:b3:d5:22:c5:a2:45:00:ea:49:df:d5:a3:
         38:c3:40:48:72:c9:35:58:6c:17:a6:df:f3:c2:f8:8d:ab:82:
         fd:d4:ac:f4:4e:97:30:f9:11:c3:cd:6c:37:1b:52:d0:95:83:
         3d:de:5d:de:e1:e4:95:1b:71:f5:ee:26:3e:3c:0f:b2:e0:d3:
         ae:7e:db:40:0d:cd:92:ba:aa:71:82:53:78:1c:03:4f:98:59:
         d6:3f:e5:6a:43:39:57:79:10:a3:cd:32:bb:7a:06:7b:8b:60:
         78:99:ea:dc:b5:7c:21:6a:3b:95:fc:c4:26:d9:d0:19:68:4c:
         d7:31:52:29:9e:27:1e:5f:73:9b:44:5e:43:15:3f:d4:43:08:
         cd:8f:60:e4:54:78:51:63:14:35:6a:25:00:6e:88:2a:e1:08:
         01:09:b8:1e:87:77:7d:7c:02:ab:e5:0b:03:73:df:5c:6b:6b:
         ec:a7:8f:68:94:b9:b9:60:4e:4b:ec:e2:aa:e0:05:5a:cb:9d:
         8e:c9:f8:82:ff:24:3a:72:da:ea:a1:34:ae:f4:92:50:ee:76:
         23:50:9d:af:2a:42:29:6d:6c:f5:52:6d:e5:19:1e:16:b7:a8:
         b5:cf:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org