Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
File:                     3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          Y7B6UqIi+yqc5WmNK91mJKHwY/GIbPRuuL56ijbQMFA=
Subject key identifier:   D1:C1:C5:A9:67:EF:23:E1:1B:EE:41:F3:2A:AB:A2:55:5C:8B:3D:60
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       2A1D4C6F46C266CFA629EFAD1D72878E5AD1C569
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
Signing time:             Thu 04 Apr 2024 03:01:23 +0000
ROA not before:           Thu 04 Apr 2024 02:56:23 +0000
ROA not after:            Thu 03 Apr 2025 03:01:23 +0000
asID:                     268323
IP address blocks:        177.53.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:4c:6f:46:c2:66:cf:a6:29:ef:ad:1d:72:87:8e:5a:d1:c5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Apr  4 02:56:23 2024 GMT
            Not After : Apr  3 03:01:23 2025 GMT
        Subject: CN=D1C1C5A967EF23E11BEE41F32AABA2555C8B3D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:6c:7f:25:79:3e:b0:45:a9:0c:e2:b6:d2:
                    8e:ca:06:4d:36:4a:72:4f:1d:02:63:33:f2:4c:9b:
                    01:31:8e:74:04:a0:9c:10:86:be:1b:35:e8:cd:32:
                    73:74:d1:f5:8c:fe:15:67:b1:54:ad:6a:a3:b7:15:
                    7f:1f:a6:1c:32:d6:9f:4f:80:49:c7:34:3a:f4:df:
                    55:ef:a6:9e:e6:3a:69:2b:98:b6:c0:c2:10:0a:2d:
                    41:69:a8:01:5c:5f:5b:91:b6:c9:b4:41:a6:a6:30:
                    52:4a:df:7c:d7:03:36:be:e2:01:78:ee:d6:9a:29:
                    16:ea:3f:5b:36:10:d4:17:6e:95:53:d0:4d:f1:b8:
                    2a:c4:b0:d6:0d:c9:5f:96:6e:69:3c:4e:41:bc:ce:
                    a1:32:b3:b5:ff:1b:5e:50:4c:fb:24:35:64:f7:96:
                    2b:43:ba:e9:a7:91:10:2e:67:8a:9b:9d:13:98:e4:
                    36:25:54:50:97:52:77:aa:96:65:42:87:6e:9d:b5:
                    f1:f4:e5:78:23:de:47:b2:43:1a:0c:77:3b:d0:aa:
                    50:3a:ce:96:7c:40:de:78:4f:4e:9e:5f:6f:66:b4:
                    18:92:77:71:0e:b1:86:a2:8e:78:1c:94:6e:1e:e5:
                    2e:b9:e3:70:db:88:34:75:21:a2:72:22:7a:8b:f6:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:C5:A9:67:EF:23:E1:1B:EE:41:F3:2A:AB:A2:55:5C:8B:3D:60
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:18:e0:88:39:c4:62:f1:7d:49:01:52:8f:94:f0:3d:69:
         ea:29:7b:16:bd:72:17:39:ae:2c:83:3d:b3:26:db:d7:9b:1e:
         53:0f:56:3f:11:8a:9d:43:4f:da:ea:2e:74:f3:95:3e:d1:2c:
         71:39:26:53:7f:13:2f:7f:14:a4:7a:5f:65:33:bb:8c:c3:30:
         bf:f0:a0:9e:c1:fc:2e:b8:dd:62:74:71:c4:4b:a9:8d:78:37:
         1d:c7:49:ca:3f:b9:19:3d:c2:8c:7f:16:11:56:d8:f5:2e:53:
         42:40:9d:fa:45:58:55:e8:e3:8b:95:e3:e3:e6:ca:ea:21:32:
         7b:6b:42:33:ad:1c:e6:b1:c2:9d:3b:90:ad:72:86:91:f5:90:
         01:6c:62:19:f1:30:d3:62:58:3f:6a:07:cc:d0:a6:f2:72:39:
         36:71:c1:7a:f1:42:f3:b9:df:10:f0:7a:82:69:8a:44:05:3d:
         96:ac:8a:c5:68:4e:d0:b3:da:6d:6f:f7:68:64:27:e9:22:47:
         99:b6:18:22:f3:1e:e3:64:7c:eb:df:24:2f:ae:6c:df:44:f7:
         4a:31:43:7e:af:db:fd:15:46:6b:68:d5:c0:f6:51:5d:b4:b3:
         93:24:b0:a9:83:8b:82:f2:f7:65:e3:1c:27:4b:7c:1c:e9:b6:
         e7:2f:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org