Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
File:                     3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa (raw, json)
Hash identifier:          7kUXxH1/8TZxsEpTW7cRf1UKjca97iFXMgy7RbMdsSQ=
Subject key identifier:   CA:E5:96:9A:B8:CC:1B:73:A6:6B:F7:C0:90:92:6B:14:05:D4:37:C7
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       2A2981BDC0B6DA2F14D2C42280C44B800137C324
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:32 +0000
ROA not before:           Thu 04 Apr 2024 10:53:32 +0000
ROA not after:            Thu 03 Apr 2025 10:58:32 +0000
asID:                     263500
IP address blocks:        177.223.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:29:81:bd:c0:b6:da:2f:14:d2:c4:22:80:c4:4b:80:01:37:c3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:32 2024 GMT
            Not After : Apr  3 10:58:32 2025 GMT
        Subject: CN=CAE5969AB8CC1B73A66BF7C090926B1405D437C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:58:b1:0f:83:d5:35:6a:3a:39:74:ca:c5:
                    10:46:b9:ab:97:ea:55:23:97:50:26:b5:ba:1f:de:
                    ae:45:56:02:bf:46:67:af:6d:00:29:f8:ab:c4:b2:
                    a4:2b:c2:19:c9:69:7f:b4:74:66:fb:c0:d4:a8:8a:
                    5c:e4:38:f4:78:ce:42:d5:29:fd:c1:96:8c:87:8d:
                    80:72:c3:d4:89:74:b7:5a:6d:ac:84:bf:27:b8:48:
                    3f:4b:3e:3a:5e:01:0d:ca:82:21:a3:af:d6:f7:0c:
                    14:e1:25:0f:ed:eb:c9:0c:e6:fc:cd:c2:66:30:e4:
                    e5:b4:0f:41:ae:31:49:08:46:70:eb:02:f8:d1:f5:
                    08:68:e3:77:1a:77:b9:7a:15:f6:0c:51:8e:75:25:
                    1f:57:bd:df:81:d1:de:7f:90:23:1d:15:6e:c2:ed:
                    99:b2:65:1e:bb:e8:7a:0e:ee:be:2a:ef:9e:71:3d:
                    30:6d:1b:4c:f2:c8:73:15:bb:7a:11:ef:87:8f:7e:
                    12:7e:e3:9b:c9:08:1b:98:0e:5b:f6:fc:73:84:e3:
                    0f:ca:12:d8:60:f3:b7:49:e1:ad:d7:94:91:01:27:
                    49:07:8a:5b:9c:d4:b8:7a:50:cc:67:4a:ad:2d:22:
                    6a:54:68:8b:f5:20:da:d1:4d:6e:ae:f6:b5:4a:f8:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:96:9A:B8:CC:1B:73:A6:6B:F7:C0:90:92:6B:14:05:D4:37:C7
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:ce:94:0d:d3:be:ec:e4:80:53:3c:4e:cc:e6:98:43:41:
         30:d6:20:37:e0:b1:4f:4b:26:c2:9d:e8:ee:26:e0:37:cc:50:
         6e:95:10:69:49:16:2b:16:9f:1d:26:fe:56:ff:d8:57:df:e9:
         dd:7c:1b:4d:21:e0:9f:de:69:b5:7b:18:c9:49:1b:29:6e:5b:
         86:38:08:91:52:05:36:76:35:dd:e8:58:05:50:56:35:a4:f2:
         3a:19:d8:95:a8:e0:67:b7:77:ed:05:bc:35:f3:0d:dc:e5:56:
         87:ef:c0:24:57:43:62:a8:1a:5b:aa:da:73:89:e8:86:3a:a4:
         34:81:b6:c2:17:df:cb:cd:00:1c:04:c7:86:b8:c9:ca:5e:12:
         c8:39:61:6c:39:0c:94:ca:e1:71:1b:eb:34:9b:e7:9d:84:a8:
         60:7f:4c:4e:2a:81:e9:87:e3:13:91:d4:cf:6b:81:a5:74:2d:
         5d:88:00:64:22:58:b9:a5:82:99:93:5c:a0:9a:a3:1a:76:1e:
         eb:c6:f9:a2:88:52:55:12:c6:10:66:ea:78:8e:3a:d2:4c:14:
         6b:09:16:eb:01:dd:e9:23:60:87:11:9f:1a:5f:ea:b8:2b:fe:
         72:28:c9:8f:41:37:c5:56:f4:6a:6c:1f:07:71:d0:f8:69:ce:
         48:63:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org