Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          fNUYRYiYVUF260+RTJH00sQk2BHq/R7TXXNz3nWr5ZY=
Subject key identifier:   E1:A5:0B:D6:22:F2:01:7F:17:B9:65:7A:2E:19:5C:4D:B8:1E:46:2D
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       78B9C48CED7F2C0722CB7C338BEEE225933AC299
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:32 +0000
ROA not before:           Thu 04 Apr 2024 10:53:32 +0000
ROA not after:            Thu 03 Apr 2025 10:58:32 +0000
asID:                     263500
IP address blocks:        177.223.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b9:c4:8c:ed:7f:2c:07:22:cb:7c:33:8b:ee:e2:25:93:3a:c2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:32 2024 GMT
            Not After : Apr  3 10:58:32 2025 GMT
        Subject: CN=E1A50BD622F2017F17B9657A2E195C4DB81E462D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:9c:93:47:b4:09:fc:71:8e:42:6c:ad:33:
                    fc:dc:80:09:72:91:b4:62:ca:9e:cd:df:39:3e:9e:
                    99:10:3d:b7:2f:7e:b5:14:dc:46:3c:35:fb:f2:d0:
                    1b:43:e1:db:49:45:92:f3:39:7e:f8:b0:7a:04:1e:
                    5d:53:19:15:c1:ce:2e:25:ac:e5:c7:4a:21:b9:1f:
                    9a:3c:cf:41:0c:b7:88:72:fb:e0:4f:4b:d3:6e:d2:
                    52:3d:40:5c:fa:79:86:10:22:d8:d5:96:b6:7c:8d:
                    66:c8:93:b8:35:de:d6:3c:b6:0c:57:1a:a2:86:a4:
                    cb:48:76:9c:5f:9f:4b:6f:72:25:02:46:35:e0:b6:
                    0d:54:ac:e3:bc:8f:49:b9:f7:6e:8c:ba:8e:e0:3d:
                    88:be:0d:c6:76:13:06:e4:7b:f8:4c:6d:6d:4d:34:
                    5f:43:d0:f8:f4:9a:57:7e:26:24:26:69:80:92:18:
                    57:4f:96:f9:22:e5:77:0e:62:09:8f:fa:de:8c:0f:
                    65:33:44:72:97:eb:38:30:86:e5:42:84:2c:f5:6c:
                    d5:66:b5:f5:f9:c1:1c:83:eb:07:25:70:d8:d6:7b:
                    7f:5b:12:da:5d:29:37:2a:38:7a:99:d3:b6:a2:9f:
                    52:34:dc:25:55:ab:96:65:49:3c:cf:22:1a:73:b4:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A5:0B:D6:22:F2:01:7F:17:B9:65:7A:2E:19:5C:4D:B8:1E:46:2D
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:c8:c9:fa:b4:db:b1:f4:46:8e:40:1d:e2:27:62:c3:e5:
         c2:15:34:57:04:b5:26:0b:45:e3:20:f8:4d:70:98:ea:55:54:
         a0:78:eb:a3:e3:9d:e1:15:6a:d9:f2:13:8d:84:e9:e7:94:df:
         49:32:11:22:01:83:8c:8f:c6:f8:a0:c5:8c:93:66:5e:ef:78:
         19:43:8a:d3:6d:b5:59:f9:44:f5:b1:c1:de:56:12:20:d0:61:
         a6:20:7e:32:e6:b6:20:1f:53:4b:b9:a8:16:ea:00:c7:80:f7:
         28:5c:92:e2:2c:e2:ee:7e:f5:50:e9:0c:d3:20:37:97:df:60:
         34:9f:f1:2c:07:63:90:c6:07:fc:aa:e3:29:10:b0:76:05:09:
         12:97:80:f9:b1:93:ec:0e:c7:83:5e:17:99:18:bc:f3:21:86:
         39:72:8d:66:f8:39:f9:f4:98:8f:8f:a8:c7:55:5a:34:b3:46:
         4f:29:89:3a:36:fe:72:11:b6:e2:76:ac:e2:24:fb:29:a7:c1:
         e7:07:96:f9:78:43:26:85:0e:f8:bb:81:d6:89:a7:b2:f6:38:
         9a:d0:a9:2f:66:13:a1:2e:73:48:60:22:02:db:cf:6e:e2:ea:
         bd:41:d8:23:85:81:83:bf:b9:01:6e:13:fe:e1:25:c1:ad:8a:
         e3:b4:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org