Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32302d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          Nir8+XZRfEz+ULREgMHw8aCfvd7RIvBHohsTFoiJ3vs=
Subject key identifier:   B1:CD:71:FD:36:1C:D5:43:4A:3F:90:85:99:1F:CE:3B:D6:A7:D9:D9
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       07DAA4127482605BD54621A6E40E0F88DB734DF6
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:19:15 +0000
ROA not before:           Fri 19 Apr 2024 20:14:15 +0000
ROA not after:            Fri 18 Apr 2025 20:19:15 +0000
asID:                     269073
IP address blocks:        187.17.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:da:a4:12:74:82:60:5b:d5:46:21:a6:e4:0e:0f:88:db:73:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:14:15 2024 GMT
            Not After : Apr 18 20:19:15 2025 GMT
        Subject: CN=B1CD71FD361CD5434A3F9085991FCE3BD6A7D9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:86:c5:d3:6d:b1:5e:6a:9c:b8:b5:5d:65:
                    1c:5e:b3:7e:f7:d6:61:8b:6c:53:21:33:ef:bc:cb:
                    8a:56:ff:07:50:7f:08:35:77:37:d4:8c:10:77:46:
                    77:26:b0:ec:aa:7d:60:2f:d8:70:b4:8b:a8:47:3d:
                    61:54:dd:bc:2f:13:17:50:03:62:f5:8d:7c:9b:c0:
                    83:c7:d0:d9:03:14:63:61:49:47:1e:be:53:27:3b:
                    15:6b:96:93:1e:ee:09:2e:75:9f:a6:ce:30:23:43:
                    83:d1:e1:a1:fa:05:b3:91:e9:7b:6e:ea:c4:99:14:
                    e8:78:7c:14:f3:69:2d:c9:b4:90:ad:1f:c2:1f:46:
                    88:06:31:20:a8:d9:d9:cf:6a:1e:20:94:d9:eb:cb:
                    af:a2:22:19:ff:a8:50:08:35:6b:b5:9a:8c:c5:a0:
                    53:a0:c6:76:d9:b8:1f:80:a7:c3:e7:74:36:5e:dd:
                    2d:e6:dd:ee:c7:d5:b6:eb:96:75:8a:e7:d7:b8:0a:
                    bc:fc:22:80:f2:8b:e5:18:aa:15:56:6a:db:03:2d:
                    c0:bf:0b:a8:33:69:79:33:13:f6:78:fd:fb:36:bb:
                    4b:37:f8:0c:0a:5f:5a:e3:6a:91:cb:c3:6f:11:7d:
                    c1:6d:b3:c7:45:36:9a:9b:74:c9:e4:5a:4d:76:27:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:71:FD:36:1C:D5:43:4A:3F:90:85:99:1F:CE:3B:D6:A7:D9:D9
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:0e:83:10:ef:5b:12:d4:85:28:a8:d6:65:b1:8f:7b:9e:
         72:82:28:d3:7a:0a:51:16:42:79:e0:21:16:9e:a1:f7:ca:0e:
         1c:f6:92:6a:43:15:b2:b4:c1:49:94:85:92:6e:d3:79:87:d4:
         04:f3:84:0b:94:56:16:13:ae:b1:bf:34:36:a4:27:e8:eb:cd:
         b4:e4:08:d0:e6:cf:e5:f9:44:ac:e3:9f:8c:53:b5:ca:db:d0:
         8c:08:60:a9:26:b9:5b:01:66:1c:5a:2a:74:ce:b8:36:62:f4:
         9a:d0:5b:c8:6a:4a:4c:14:17:da:8b:6f:35:55:4a:38:b9:7e:
         91:55:90:50:74:e7:bf:79:5b:82:dd:0c:6c:ca:21:92:ed:e6:
         e8:37:b7:4e:84:41:dd:a4:b1:08:bc:6e:ea:2e:a6:04:d6:64:
         97:2a:8b:48:32:7f:32:ec:b1:cf:37:e8:7b:04:35:2b:b9:5e:
         51:a1:14:34:3c:7c:94:01:51:ed:f5:53:f8:59:92:a6:50:bf:
         a8:a9:57:17:a1:19:d1:cb:6a:74:8c:95:27:e2:d9:eb:13:7c:
         b6:1a:17:03:9d:5a:f1:a9:51:1b:95:b3:7f:68:b6:54:31:2e:
         18:79:e5:70:39:59:ad:ba:f1:e7:90:bc:12:e1:8d:c6:99:76:
         37:d9:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:07 2024 by rpki-client on console-ams.rpki-client.org