Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa
File:                     3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          G7LC8hcttUD54eF6AGPDXDUAvhh4DBMgxzsJRQTm4og=
Subject key identifier:   01:B0:30:9C:80:65:C0:0D:E2:33:08:A9:FC:99:00:DD:94:34:20:97
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       1F19FBDEE6A300FF17217157FFA3528AD910F331
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa
Signing time:             Thu 04 Apr 2024 03:01:23 +0000
ROA not before:           Thu 04 Apr 2024 02:56:23 +0000
ROA not after:            Thu 03 Apr 2025 03:01:23 +0000
asID:                     268323
IP address blocks:        177.125.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:19:fb:de:e6:a3:00:ff:17:21:71:57:ff:a3:52:8a:d9:10:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Apr  4 02:56:23 2024 GMT
            Not After : Apr  3 03:01:23 2025 GMT
        Subject: CN=01B0309C8065C00DE23308A9FC9900DD94342097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:2f:68:6d:eb:e0:5e:88:6c:39:3d:c2:e1:
                    63:6b:9d:3c:bc:14:ab:cc:21:0f:db:80:0c:ba:53:
                    f2:34:63:3d:c6:32:b6:08:4a:64:44:b0:53:11:bc:
                    b2:ab:24:4b:ab:97:ff:2a:74:ad:83:99:6d:ea:3f:
                    6a:66:9e:82:19:d5:b3:3d:8c:35:d5:b8:a5:77:94:
                    fc:11:f9:a7:f9:0e:79:4e:8a:71:a6:43:59:d8:36:
                    93:f0:22:87:da:82:ad:77:25:28:27:0f:4f:1a:60:
                    c0:db:f9:ce:2f:22:5e:c8:5a:df:a1:83:66:a9:b1:
                    96:b5:48:32:0d:1a:cc:be:03:a8:49:7c:20:3c:92:
                    c3:d8:50:55:36:ac:0b:f2:93:b1:9a:ff:61:05:5f:
                    12:43:a2:b7:3e:b6:39:3c:da:1d:39:46:e1:83:83:
                    b6:31:fe:0c:2a:12:fa:cc:cd:d4:7c:76:99:cb:33:
                    0c:4a:88:13:49:5b:69:c1:25:74:3d:da:a8:95:96:
                    02:37:3e:f7:39:cc:20:9e:10:52:47:a5:24:82:77:
                    c2:89:07:eb:00:59:2f:67:dc:d0:00:4d:d8:79:48:
                    d1:2c:16:05:3e:62:cd:c9:b5:f5:7a:f6:ed:86:bd:
                    f6:8b:b2:68:29:0d:b2:b1:a1:05:bc:f4:d6:89:dc:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:30:9C:80:65:C0:0D:E2:33:08:A9:FC:99:00:DD:94:34:20:97
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:0f:76:67:fc:87:e8:ac:17:74:ec:51:42:97:a4:18:68:
         63:ca:92:0b:1f:7f:5d:e6:2a:9e:9d:77:76:8d:d7:83:11:d0:
         1b:49:ee:98:a5:15:dd:b5:d0:26:8b:86:1a:53:82:0a:71:31:
         7c:a6:bd:20:a3:0d:21:70:4d:aa:d1:b1:b7:37:00:38:54:41:
         74:1b:c9:b8:81:ac:03:f5:a9:88:11:c8:34:ac:90:61:cc:f7:
         5c:6d:9e:94:7a:d3:7b:cc:ce:67:71:c8:e2:c1:5b:e3:3a:7a:
         87:0c:c7:fc:6b:25:ff:a1:4f:f2:30:84:e5:c4:ec:11:b1:75:
         53:12:32:6a:2e:66:48:ad:4f:12:c3:fa:64:9c:1d:bf:6a:73:
         51:58:4f:c6:c1:51:dc:98:7b:e3:9d:43:84:7e:72:a9:38:f9:
         f0:62:cb:70:51:33:ae:a6:23:79:1f:70:ac:9c:e6:35:7a:cb:
         34:07:9c:39:46:87:0f:08:06:dc:10:5e:ae:94:cb:af:4c:74:
         1b:23:8f:1b:d3:56:ad:97:0f:fd:b1:7e:fa:69:01:04:49:5a:
         80:6a:47:ce:e7:28:5a:2c:54:0d:11:f2:fd:6b:83:01:e6:2b:
         dd:36:aa:4a:e7:6f:98:4d:0b:87:d4:a3:11:dd:87:3d:fa:30:
         36:51:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org