Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32332d3233203d3e20323633353030.roa
File:                     3137372e3232332e36322e302f32332d3233203d3e20323633353030.roa (raw, json)
Hash identifier:          OE/LEWZ3bEQ6shtNVun1C5Q92Jka9pVjnEeYRur/NWA=
Subject key identifier:   00:3E:2E:76:6C:0C:E6:5A:76:93:37:75:0D:95:6B:42:6A:7A:E6:DC
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       0F080C2434B32F402A3E97521647E2B88102EED2
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32332d3233203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:32 +0000
ROA not before:           Thu 04 Apr 2024 10:53:32 +0000
ROA not after:            Thu 03 Apr 2025 10:58:32 +0000
asID:                     263500
IP address blocks:        177.223.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:08:0c:24:34:b3:2f:40:2a:3e:97:52:16:47:e2:b8:81:02:ee:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:32 2024 GMT
            Not After : Apr  3 10:58:32 2025 GMT
        Subject: CN=003E2E766C0CE65A769337750D956B426A7AE6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:d2:91:cf:88:19:4d:6b:d8:bd:25:4f:47:
                    b7:de:cc:c2:27:5e:fd:6e:f1:b9:5c:e2:6d:e0:9b:
                    30:af:e8:a3:cd:52:f6:c0:77:37:da:f5:6b:bb:f8:
                    63:97:ee:6d:b7:18:fd:66:37:b6:e1:b8:13:2e:98:
                    2f:a0:be:11:59:b1:16:38:50:2e:07:72:b3:16:c5:
                    a5:87:5c:f2:d6:62:71:5f:30:6c:2a:4b:82:da:94:
                    22:8a:5f:ab:31:13:92:d8:a1:eb:20:8a:09:4a:32:
                    a0:ac:8b:c2:4b:74:d3:c3:76:d3:60:19:d6:68:7e:
                    03:7c:ab:25:7c:0d:8d:7a:1f:89:0e:64:f3:d2:b4:
                    28:ba:a4:30:a8:c8:1b:35:4d:60:c2:5c:28:4a:27:
                    67:95:bc:60:69:67:d8:ad:bd:3d:d4:2b:3d:36:44:
                    d3:f1:e9:1f:78:60:ab:7e:ea:f3:a8:70:59:f6:e6:
                    3d:4d:02:b0:fd:c3:15:93:4b:c6:3e:a1:d8:de:48:
                    22:0f:11:b9:ba:48:44:52:ba:5a:19:35:8b:dd:08:
                    58:49:5f:c2:fe:7f:b2:89:f5:8f:ab:d3:24:50:7b:
                    0f:04:15:f3:a4:e1:7e:e2:9e:aa:0f:3b:9b:61:dc:
                    45:1d:9c:09:32:0d:31:b3:25:5d:e2:c7:a4:41:36:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:2E:76:6C:0C:E6:5A:76:93:37:75:0D:95:6B:42:6A:7A:E6:DC
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32332d3233203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:89:07:d8:68:9a:f9:e6:3e:f9:ac:56:9d:6b:fd:49:9b:2e:
         a3:e9:f6:ac:e2:89:5e:75:fd:dc:1e:9f:5d:32:88:a0:f0:18:
         e7:23:6c:d8:42:02:c7:f6:90:77:25:cd:73:17:3a:39:9a:95:
         a9:93:09:3b:b4:97:4c:9e:30:a1:2f:56:6c:52:47:2b:3a:f1:
         ac:c8:e7:b5:44:9b:d3:38:e4:11:02:3b:80:78:eb:0b:9d:06:
         d6:39:90:2f:71:12:e9:eb:bd:46:a6:34:a9:b5:07:b3:10:61:
         33:27:11:3e:81:cb:3b:f4:78:b3:c3:99:26:67:82:cb:83:e9:
         f2:dd:00:be:19:9b:b2:6b:c1:d2:64:29:aa:6a:68:7f:16:fa:
         d3:89:93:f4:cd:72:99:cc:11:99:63:60:e2:2c:3e:cd:36:14:
         dd:cb:96:ed:d4:5e:2f:9b:dc:75:a6:c0:d5:53:03:5a:37:06:
         b7:f3:e1:a9:db:0f:f3:78:b6:e1:f0:c7:15:9e:15:e0:3e:eb:
         10:a7:d4:9e:3f:1e:09:fc:29:f7:2e:8f:d6:e3:f5:6f:10:00:
         ea:50:5b:67:fa:9f:55:0a:db:c7:fc:02:79:aa:23:58:dd:84:
         a6:e9:03:c3:32:d3:a2:d1:e2:0f:a0:02:54:39:07:ba:92:b4:
         56:30:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org