Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
File:                     3137372e32332e3139322e302f32312d3234203d3e203238313538.roa (raw, json)
Hash identifier:          eHpJVN24tmTJuEwb23n2lIKc95L7oNi9+wU+PlvjPJI=
Subject key identifier:   0E:2D:E5:C3:E1:72:91:08:0C:B1:6D:2A:5B:ED:25:53:EB:59:9D:C7
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       49A233338407587BBB0BE4AB9DB83AF5AA66D3F2
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:38:07 +0000
ROA not before:           Thu 19 Sep 2024 14:33:07 +0000
ROA not after:            Thu 18 Sep 2025 14:38:07 +0000
asID:                     28158
IP address blocks:        177.23.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a2:33:33:84:07:58:7b:bb:0b:e4:ab:9d:b8:3a:f5:aa:66:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:07 2024 GMT
            Not After : Sep 18 14:38:07 2025 GMT
        Subject: CN=0E2DE5C3E17291080CB16D2A5BED2553EB599DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:44:53:a0:ac:dd:93:b9:f2:0a:91:a6:fa:22:
                    49:36:70:ef:e0:ac:16:6a:21:00:54:d2:1a:6b:f1:
                    67:c6:12:97:1b:aa:40:0e:f4:ca:9e:bb:c9:50:1a:
                    d0:08:a0:cc:44:77:c6:48:f0:15:36:62:d3:28:94:
                    67:25:d8:03:50:c9:6c:57:9f:fc:03:99:f6:57:47:
                    cc:5e:a9:80:8f:df:b8:1a:f5:e2:7c:67:ff:4e:dd:
                    08:f0:de:40:5c:61:56:e7:06:de:85:c6:4c:d8:e6:
                    de:d2:5d:f0:b9:99:a9:e8:b5:be:f9:ae:2b:53:40:
                    c1:53:dc:50:14:eb:6f:fb:58:cb:e4:8e:59:0e:54:
                    30:56:e7:5d:ce:00:60:b9:ae:13:21:03:95:c8:21:
                    0d:3e:b3:86:03:3c:38:e6:94:74:3b:7a:3e:4a:ba:
                    e6:a8:ab:e4:26:47:36:74:ab:2c:f8:05:e5:81:b4:
                    d4:3c:d3:f9:ec:d6:4c:9a:0a:44:0b:9c:de:ef:6a:
                    b9:fb:8c:18:0d:40:8b:77:71:15:a0:9a:a8:ca:10:
                    f0:fa:d9:2d:a6:29:c7:9b:11:80:c3:5d:b5:c0:9f:
                    c8:ae:9b:2f:53:32:91:a5:58:b6:79:c0:8a:a4:00:
                    39:63:2b:41:b9:ba:c2:7a:a5:ae:b6:c4:7d:03:51:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:E5:C3:E1:72:91:08:0C:B1:6D:2A:5B:ED:25:53:EB:59:9D:C7
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:82:0c:73:fb:c3:65:c7:60:36:c9:d9:51:8a:fa:e6:03:
         51:ed:aa:b3:e4:75:00:4f:ce:a6:fb:f1:ef:36:b3:ea:79:c0:
         fd:5d:2f:ab:a2:9d:0b:12:28:7e:ef:51:35:45:42:37:c5:b2:
         c1:06:bf:b8:d4:8b:d3:3c:f4:af:22:56:ec:6b:1c:51:f4:05:
         48:0e:36:01:06:ec:36:ad:06:d8:1e:7a:cd:27:55:a2:ce:5b:
         a0:43:00:d5:ea:b9:90:03:63:83:fd:da:b4:77:5a:f0:89:d4:
         42:f8:11:03:0e:70:87:22:12:5c:4c:f0:9f:4e:e4:a2:5f:ff:
         21:fa:4a:7e:1f:ef:a0:7d:93:af:2d:e7:52:b5:0b:45:25:5d:
         d7:46:71:2d:83:eb:d4:b3:5f:6a:8b:fc:d6:f7:83:63:0a:9c:
         d2:0d:4d:0a:ef:c9:ee:7f:9e:84:e5:ad:f3:af:37:e5:6d:d0:
         27:86:e4:cc:65:a5:e3:6a:04:1e:72:31:93:de:2b:36:36:9a:
         69:71:d7:c9:5e:21:48:64:7e:9a:68:69:c0:09:0f:a4:52:bb:
         de:7a:a0:5c:2e:5a:b3:c1:64:ff:51:de:fb:6c:f4:97:9d:66:
         c1:05:6a:77:04:fd:2e:b6:e0:60:2c:8d:1f:db:a0:76:c6:aa:
         ba:0e:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:10 2024 by rpki-client on console-ams.rpki-client.org