Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e35322e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          wSkhMD+RfstI43mJbjzI/CDs+H1VKxd1rraF3FvSWrI=
Subject key identifier:   A6:DB:F4:CC:0E:69:7F:B6:3F:A5:E5:A2:2D:EE:6E:E8:E0:F7:CD:65
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       107DBF1882C5FD2F0260274DDCC02035FEDB3289
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32342d3234203d3e20323633353030.roa
Signing time:             Mon 15 Apr 2024 20:39:18 +0000
ROA not before:           Mon 15 Apr 2024 20:34:18 +0000
ROA not after:            Mon 14 Apr 2025 20:39:18 +0000
asID:                     263500
IP address blocks:        177.223.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7d:bf:18:82:c5:fd:2f:02:60:27:4d:dc:c0:20:35:fe:db:32:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr 15 20:34:18 2024 GMT
            Not After : Apr 14 20:39:18 2025 GMT
        Subject: CN=A6DBF4CC0E697FB63FA5E5A22DEE6EE8E0F7CD65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:10:24:ba:11:84:5a:5d:ac:4c:ce:b6:aa:
                    db:c1:4d:37:a7:a8:4f:e4:41:37:2b:0b:71:1b:0d:
                    3e:d5:cb:54:9a:f6:15:da:bb:a4:49:07:43:79:0a:
                    11:1c:83:b0:54:57:f7:92:c0:a5:a8:2b:78:5e:09:
                    45:43:b3:1d:d8:51:10:6a:ca:97:42:6c:72:af:86:
                    b4:6c:3c:d1:21:bc:f2:de:c8:37:5c:5c:ed:b2:41:
                    21:0e:6a:cb:74:cc:13:90:fe:76:8b:9e:e7:a1:1a:
                    64:da:6b:e3:ae:5d:33:55:88:46:d4:84:bd:20:f9:
                    f6:2d:9a:89:34:56:71:ab:fc:cf:4b:52:d1:fd:c9:
                    49:95:54:0a:ec:6b:90:67:67:c3:b7:e7:42:4e:dd:
                    02:f5:87:b5:3e:71:df:33:60:a3:ac:74:e7:a4:83:
                    ce:42:43:e3:27:5a:66:eb:6a:fa:2b:75:9b:48:ce:
                    c1:82:14:ac:4a:0f:cf:6e:d2:49:1e:91:dd:59:90:
                    51:e4:df:76:ad:89:8e:9c:ce:be:9d:e3:6d:7b:72:
                    be:8e:66:cc:05:5e:4c:a1:82:a4:03:0e:47:73:3e:
                    65:cf:85:8e:8a:83:bc:a6:59:81:2a:66:8c:ab:28:
                    e0:38:1f:ba:45:da:13:05:5b:98:5b:81:fa:70:e8:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:F4:CC:0E:69:7F:B6:3F:A5:E5:A2:2D:EE:6E:E8:E0:F7:CD:65
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:06:4f:5a:05:66:08:36:51:00:1b:68:d1:73:4f:d9:28:
         ac:cf:fd:e6:4c:73:38:45:04:9e:e9:81:8c:96:92:45:ad:27:
         e4:b0:96:24:ee:1d:80:6d:de:3a:9a:f0:9d:65:26:b4:a9:19:
         d3:f8:01:bd:ce:93:d8:c4:a8:2a:b2:84:5c:6a:c1:e7:25:0d:
         be:6e:58:f6:72:ac:1c:cd:e5:53:98:52:54:ee:8f:ab:b9:7e:
         cf:65:76:8e:56:b2:62:48:ea:bd:87:54:32:84:df:0a:a0:8f:
         4f:14:31:8a:f0:9d:b0:e0:02:31:5d:4f:0c:18:72:fa:73:c6:
         9b:d4:e4:0a:58:61:e5:e7:c2:9c:2f:4e:4d:99:c7:e6:fc:22:
         95:b2:83:7a:ac:61:c3:4e:f9:bf:cf:5b:09:86:44:b6:b3:b6:
         84:71:c9:ee:76:90:ec:cd:ac:e2:5c:dd:e8:c9:d4:1d:69:3d:
         e8:9d:4e:19:1c:07:a2:74:09:4f:2a:72:d0:8f:be:94:10:ee:
         aa:f2:ce:74:63:67:53:e3:e7:1e:52:2e:1e:e2:b0:8c:fc:d8:
         fe:b5:61:73:61:dc:12:0d:27:ed:cc:5b:11:35:83:1c:aa:a2:
         e1:a1:22:f8:c5:ab:29:81:a1:47:40:8b:ab:cc:17:26:7c:a3:
         c8:c4:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org