Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35342e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e35342e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          K6Nt30YG9PQRJ3DvcJuGjfR+MVrrwuhgxqr76lLF2Ks=
Subject key identifier:   80:54:54:6D:5C:12:FE:F2:56:1F:23:4A:53:3C:0A:47:0B:F7:D7:5B
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       02E24E90ABC2EFD2FEFF4797A9BDCA5369CD4208
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35342e302f32342d3234203d3e20323633353030.roa
Signing time:             Mon 15 Apr 2024 20:33:58 +0000
ROA not before:           Mon 15 Apr 2024 20:28:58 +0000
ROA not after:            Mon 14 Apr 2025 20:33:58 +0000
asID:                     263500
IP address blocks:        177.223.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e2:4e:90:ab:c2:ef:d2:fe:ff:47:97:a9:bd:ca:53:69:cd:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr 15 20:28:58 2024 GMT
            Not After : Apr 14 20:33:58 2025 GMT
        Subject: CN=8054546D5C12FEF2561F234A533C0A470BF7D75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:f3:98:cf:3c:1f:2d:93:87:f1:ba:ce:35:
                    58:08:de:ad:38:9b:eb:8a:e1:13:9a:5c:7b:c5:5f:
                    1d:c2:4e:2c:98:1c:eb:b4:63:7f:28:1e:b8:8e:85:
                    7a:be:0f:18:bf:57:10:2b:e0:90:dc:aa:c5:aa:78:
                    eb:73:d1:75:ba:6a:2a:9e:d0:cd:e4:ad:c3:41:63:
                    ef:07:f0:4b:26:e3:b9:f3:8b:9e:c7:a6:e9:d3:24:
                    a1:b9:22:0f:fa:73:99:dc:5f:b9:86:83:51:a3:23:
                    72:a8:d8:15:0e:07:2c:5c:4b:d6:22:6d:1c:54:f2:
                    bc:8c:c4:5c:47:6a:d2:07:30:b4:cc:f4:54:44:45:
                    e6:96:84:9e:24:55:8e:c4:33:f9:d1:16:b3:62:d0:
                    4a:09:8c:c8:71:0c:57:ed:3f:78:5d:71:e9:48:b3:
                    2d:8a:77:32:05:4a:ce:0b:56:95:6d:06:26:66:c9:
                    dd:d5:d5:9e:51:3b:0b:b4:78:9f:ea:96:97:ca:df:
                    50:a8:6f:73:74:3c:40:b6:ca:69:37:cb:d5:90:f8:
                    41:d0:06:d9:f2:1c:c7:af:cb:c0:88:71:b9:c6:a1:
                    9a:c7:ab:d6:06:8b:43:37:e9:b8:9f:8c:7d:ad:b8:
                    08:fa:c3:c5:b1:5e:85:39:82:6f:b7:ea:cb:ff:65:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:54:6D:5C:12:FE:F2:56:1F:23:4A:53:3C:0A:47:0B:F7:D7:5B
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35342e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:a4:d6:8e:82:0e:ef:74:7c:3e:db:03:45:c0:a0:69:7b:
         d4:8d:c3:06:76:d7:6f:57:e5:c9:65:a4:1c:19:14:f3:18:5d:
         3d:a5:f3:aa:ec:46:5b:b4:fe:4e:1c:5f:0d:30:67:f0:62:14:
         72:1d:02:35:20:09:ae:43:3b:d1:b6:dd:92:81:32:3d:4a:ab:
         a7:f4:7f:f0:fe:38:ca:9e:c3:89:f2:81:a6:d5:82:52:bd:02:
         c0:60:49:19:c1:20:71:fe:a4:b9:86:13:f2:75:99:e2:15:40:
         48:dc:33:ab:22:71:6e:da:b6:66:59:dc:f7:23:3f:50:9e:5b:
         46:a2:3e:94:ae:57:e0:75:98:40:35:bb:e0:1a:cf:09:7b:5d:
         91:a2:1c:78:cb:27:31:cd:e2:83:c8:71:15:9c:c8:e8:0c:98:
         73:5c:d3:db:92:af:c0:73:d3:16:8d:52:4a:4d:c2:f7:93:e1:
         99:f7:8c:db:bd:48:4e:51:16:06:6d:a8:89:6e:a4:f9:50:69:
         d1:c0:8b:89:0e:71:da:3e:dc:02:75:2d:ac:25:7b:2f:9e:d7:
         e6:96:f1:65:5e:e9:9f:c0:90:a9:71:1b:86:25:3d:6b:e9:f4:
         15:d1:35:14:d7:06:dd:5d:79:4c:9a:91:9f:39:93:2a:da:92:
         64:c0:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org