Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132302e302f32322d3234203d3e203238313538.roa
File:                     3137372e3132392e3132302e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          sOiO2Jh3LHUdgeOHFdsPFEJmGgIU5u4PKNgTUdUFPFk=
Subject key identifier:   52:C1:0F:20:DA:AC:A0:96:9D:E9:3C:C9:A5:B2:EF:93:9A:13:68:1B
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       4BC360BA11E12F698B4104419A01B7CBDBB62331
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132302e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:38:16 +0000
ROA not before:           Thu 19 Sep 2024 14:33:16 +0000
ROA not after:            Thu 18 Sep 2025 14:38:16 +0000
asID:                     28158
IP address blocks:        177.129.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c3:60:ba:11:e1:2f:69:8b:41:04:41:9a:01:b7:cb:db:b6:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:16 2024 GMT
            Not After : Sep 18 14:38:16 2025 GMT
        Subject: CN=52C10F20DAACA0969DE93CC9A5B2EF939A13681B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:1a:f8:31:9d:d8:23:8f:55:e1:f5:84:f2:
                    02:b4:e8:87:29:21:25:d8:aa:4e:72:d5:09:2b:1c:
                    27:0e:3c:00:b0:32:ff:4d:f7:c0:94:8f:17:58:f5:
                    29:cc:d8:c5:99:c7:20:7f:10:bf:ad:93:73:c7:bb:
                    84:ba:a3:32:55:35:88:e0:90:5e:d7:89:b7:61:5a:
                    27:d9:39:3a:8b:1b:5b:ff:36:0e:7c:00:7f:13:dd:
                    62:f9:ac:32:d1:4e:eb:2c:59:6d:4c:d1:37:4c:ea:
                    79:c5:89:5e:4d:84:ce:b8:41:b8:0c:a4:bd:cf:56:
                    d6:04:9b:01:bc:d5:bc:b9:10:80:41:02:b8:89:5f:
                    c3:95:68:6e:84:32:c3:c9:5c:5d:74:14:72:b7:42:
                    50:2e:79:30:ca:01:25:23:c3:ad:4b:63:81:68:01:
                    dd:8a:d7:b7:b9:2b:b9:36:fd:65:f9:0c:36:34:57:
                    3b:b7:17:a6:da:d8:c1:5e:a1:f4:5f:42:22:64:24:
                    3b:75:eb:58:00:ef:ee:a9:2b:cc:ba:4b:d7:d6:8a:
                    ee:e2:b6:3e:77:59:d0:76:9d:98:b6:ba:31:bd:f4:
                    e5:8e:25:61:64:bd:2e:ea:92:4a:6a:99:2f:a9:6b:
                    57:28:6e:03:d8:36:2a:41:a2:ca:ff:18:ca:bf:d5:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C1:0F:20:DA:AC:A0:96:9D:E9:3C:C9:A5:B2:EF:93:9A:13:68:1B
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132302e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:91:8a:a0:68:6d:9b:53:9c:02:9e:d2:5b:a4:92:01:97:
         ec:75:a5:21:9e:18:bd:2d:17:47:a7:01:42:ea:3d:d8:fd:a2:
         68:6d:5f:81:46:06:7a:38:fa:02:a9:59:ee:ab:61:69:05:59:
         e6:51:18:99:ae:79:68:58:19:bc:02:df:61:65:85:fe:3e:5c:
         43:5a:cb:aa:f7:01:6d:28:25:8a:ab:6c:b7:52:cb:62:5b:c1:
         5b:4a:bb:64:1f:ba:7d:d4:83:e6:a4:a9:ad:cd:d0:17:25:11:
         12:8c:b2:4d:79:1e:ba:2d:7f:6c:49:48:41:a8:c8:4a:b7:80:
         76:d9:f0:f1:8f:e1:d9:69:01:4b:41:23:7a:d6:32:48:a3:13:
         39:ac:89:c2:aa:c3:0b:62:ee:28:df:98:3d:f0:07:c3:bd:d3:
         83:56:2c:de:28:bc:32:db:ef:d4:ab:01:8b:04:fc:af:d2:16:
         f8:fc:c1:6a:e4:dc:a4:c4:a4:7c:e5:7d:16:ee:e1:91:dc:87:
         9e:d7:f8:46:2d:f2:fc:7a:07:d5:6c:18:c7:2b:78:48:ef:dd:
         10:c3:2f:c1:9a:d9:e4:ac:bc:e0:06:1d:3d:d6:5d:59:fa:f6:
         d3:9a:a8:72:bf:76:2c:4b:63:42:29:4b:92:bf:7d:a2:58:26:
         53:47:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org