Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36332e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e36332e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          sHIa5nfx+9Y5v+8qgUL16PyhRBtVo5d9f56ZG1o2O0U=
Subject key identifier:   7F:3F:2E:72:0C:0F:E2:04:13:6A:C2:C9:7B:80:F9:59:CF:71:81:A7
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       577CB29373A4625B08B6F6ECE071CC57823BACAB
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36332e302f32342d3234203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:32 +0000
ROA not before:           Thu 04 Apr 2024 10:53:32 +0000
ROA not after:            Thu 03 Apr 2025 10:58:32 +0000
asID:                     263500
IP address blocks:        177.223.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7c:b2:93:73:a4:62:5b:08:b6:f6:ec:e0:71:cc:57:82:3b:ac:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:32 2024 GMT
            Not After : Apr  3 10:58:32 2025 GMT
        Subject: CN=7F3F2E720C0FE204136AC2C97B80F959CF7181A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:6c:de:72:fe:2f:98:7c:00:7d:ab:f3:36:
                    ae:3c:67:f8:a8:53:64:2a:9c:22:45:44:f7:d2:29:
                    ee:42:74:d6:ee:d4:99:91:3d:64:7e:68:75:c4:ef:
                    31:cf:48:b9:73:46:87:6b:14:f8:be:49:28:d1:29:
                    af:cf:52:94:a6:00:41:c1:4b:6b:46:a8:9f:bc:4a:
                    b7:bf:e7:69:85:a7:f8:3f:05:cc:84:bc:90:79:89:
                    27:f8:e6:e9:50:63:c5:7c:d3:79:de:bf:d1:c6:0f:
                    db:e3:30:96:a2:cc:f8:dc:76:a8:f9:1a:59:d0:2b:
                    d5:9c:db:1f:fa:f5:6a:50:2a:6c:32:0e:d9:84:46:
                    db:22:aa:ca:fb:1b:6b:b1:07:bf:5c:bf:5c:b2:1a:
                    3e:08:9e:0f:eb:40:ae:53:48:5c:44:26:02:fa:f7:
                    d5:3f:8f:cc:65:ec:65:d6:2b:ce:e6:7f:6a:f9:e0:
                    ed:44:06:8f:ab:e9:35:6c:23:57:7b:69:ca:a5:85:
                    40:db:76:d1:e7:d7:4e:4c:24:8f:ea:49:a4:57:d0:
                    2e:0e:4a:c5:ca:52:c2:2b:4d:35:6b:a4:ba:32:e7:
                    87:ef:c3:e1:8a:78:43:ad:aa:cb:ff:33:87:79:c6:
                    de:3a:9d:48:fb:b1:a2:8f:eb:d1:09:76:b5:07:79:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3F:2E:72:0C:0F:E2:04:13:6A:C2:C9:7B:80:F9:59:CF:71:81:A7
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36332e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:81:24:ae:bd:86:af:75:66:92:fb:32:93:88:73:33:02:
         a3:ee:24:9c:d1:7b:ab:84:58:32:89:e8:b3:02:ad:b3:0e:11:
         d1:49:25:0a:66:1f:19:55:72:8a:92:24:31:56:91:1f:4c:3f:
         9d:03:7c:b6:44:38:81:68:c3:3b:9f:97:54:3a:a2:79:ff:fe:
         1c:ef:2c:9d:a6:d3:7a:53:22:ad:a2:81:4e:0b:3c:c3:30:0e:
         15:fb:7a:d0:b4:4b:ea:f0:53:f9:1c:d5:5d:fb:24:93:0e:5f:
         fd:18:d3:a0:9b:06:1e:77:96:94:62:ed:a2:dd:54:77:a8:6a:
         a1:b6:11:49:18:2b:88:8c:2c:62:e9:e7:22:97:6a:13:a0:34:
         bd:1d:cc:a0:7e:3b:d5:9e:08:ac:09:67:e4:55:8c:88:26:20:
         b1:b1:d4:b0:3b:89:3a:18:79:b7:aa:c5:31:67:6f:9d:84:17:
         73:07:d8:c8:c4:27:57:49:ae:f8:e8:84:82:80:8b:d5:35:6b:
         95:04:e5:c0:ec:a0:6f:b6:c3:31:4b:c6:88:2c:17:ad:58:10:
         9c:ca:a8:b1:3d:e0:05:d8:60:7f:2c:6f:10:ad:26:ee:7f:4d:
         8a:1f:57:e5:54:c0:e1:9d:ee:c4:45:48:ca:66:bd:f8:a5:0f:
         e9:72:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org