Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa
File:                     3137372e33362e34382e302f32302d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          p98UVOks9bnaFrgD+69bZgs6aUIt7gGwmLvOrFvKn9I=
Subject key identifier:   CB:CE:78:B5:FD:AB:0D:B6:C0:10:3C:75:76:BF:75:CE:21:42:83:F9
Certificate issuer:       /CN=C92598511D78173796EE1B06996EA90E775D9542
Certificate serial:       1DDE0B74C0CA8E5B1F2F13C721A6683A2D76012B
Authority key identifier: C9:25:98:51:1D:78:17:37:96:EE:1B:06:99:6E:A9:0E:77:5D:95:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa
Signing time:             Tue 17 Sep 2024 16:39:14 +0000
ROA not before:           Tue 17 Sep 2024 16:34:14 +0000
ROA not after:            Tue 16 Sep 2025 16:39:14 +0000
asID:                     262909
IP address blocks:        177.36.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.crl
                          rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:0b:74:c0:ca:8e:5b:1f:2f:13:c7:21:a6:68:3a:2d:76:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92598511D78173796EE1B06996EA90E775D9542
        Validity
            Not Before: Sep 17 16:34:14 2024 GMT
            Not After : Sep 16 16:39:14 2025 GMT
        Subject: CN=CBCE78B5FDAB0DB6C0103C7576BF75CE214283F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:3c:e6:82:06:7b:3d:38:e1:b5:77:af:6b:
                    21:b3:e6:1f:ab:f4:7f:da:2d:e4:51:86:ee:56:e9:
                    00:5e:08:77:c4:64:4d:d6:a7:46:8a:b1:8f:4a:89:
                    ff:7b:e7:bc:73:54:8c:78:15:3b:c1:00:a1:9a:16:
                    2b:76:b9:8c:4f:83:20:88:63:c0:39:ac:f3:e5:04:
                    55:4b:20:63:24:1f:26:fb:b0:ad:98:e0:fb:09:4a:
                    1b:23:a6:14:f4:fc:24:ea:ec:cf:ee:54:5e:e6:da:
                    d5:3b:ca:8c:26:eb:2f:37:1b:ce:70:8d:59:46:85:
                    0d:00:45:90:d8:f7:52:32:7e:ec:9a:e8:0c:f8:6e:
                    34:41:25:1e:4e:b0:cc:44:22:b4:08:d7:fc:78:d6:
                    6e:43:26:c5:99:f9:15:db:15:55:0c:0c:14:e1:39:
                    25:1b:a7:9d:71:15:38:8b:c1:e8:3e:fc:ed:3a:02:
                    79:42:4f:d1:83:fa:f4:c3:32:02:d5:82:f4:9b:32:
                    ff:99:46:f8:b2:bb:7d:7a:2d:33:23:b3:b9:b5:db:
                    34:89:0c:29:ba:a0:9f:d5:37:57:9a:0e:2a:ee:9a:
                    c5:71:cb:a2:65:5e:1b:24:8c:12:78:f6:56:aa:64:
                    ae:15:bf:f9:3b:6b:57:68:95:33:c5:78:5d:2c:be:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:78:B5:FD:AB:0D:B6:C0:10:3C:75:76:BF:75:CE:21:42:83:F9
            X509v3 Authority Key Identifier:
                keyid:C9:25:98:51:1D:78:17:37:96:EE:1B:06:99:6E:A9:0E:77:5D:95:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:35:56:56:5e:a6:c9:c3:1c:2c:4f:d8:40:13:75:4c:ed:
         82:b9:17:dd:ae:ad:ae:2a:3a:c2:51:a1:87:3f:7a:28:66:57:
         fc:37:07:f6:15:dd:3b:c2:b9:02:0e:63:62:bf:31:30:2f:69:
         94:b4:99:e1:69:ca:75:71:35:7d:d2:be:df:99:fd:a0:36:fa:
         a7:21:eb:4f:58:d3:a1:86:62:ac:34:e8:18:e4:eb:90:4f:32:
         dd:97:51:fd:fe:41:38:cc:bc:0c:74:f0:8c:6c:77:11:7f:1e:
         75:a7:9f:64:08:44:33:f8:7c:f9:aa:cb:a3:b2:3e:34:21:7f:
         7d:f1:cc:32:58:8c:6f:b5:a0:78:30:01:d2:99:35:e2:24:a4:
         53:5e:8c:b6:2f:0e:a8:8f:bd:6a:0c:b9:68:d6:48:cc:08:18:
         8c:1a:db:5f:8d:6f:3e:74:41:86:92:8f:56:9c:50:00:2d:fc:
         16:95:29:6b:ef:cf:63:18:16:eb:63:21:b7:49:c4:1d:0d:9e:
         70:0b:39:96:ea:d0:06:ed:be:16:e1:43:70:3a:d8:97:75:b9:
         51:68:b6:fa:89:b6:7f:69:4d:53:9a:3d:a6:d7:6f:57:1b:b1:
         9d:9e:09:47:ed:a7:91:a3:d2:04:c1:07:d3:f3:75:cb:f8:1a:
         b3:02:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:04 2024 by rpki-client on console-ams.rpki-client.org