Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS264569.roa
File:                     AS264569.roa (raw, json)
Hash identifier:          TtX0ena/PnUYc5l03BWHelWFy/C6mWdPwfvdxu8ZXAQ=
Subject key identifier:   EC:BB:CC:A5:CE:2E:C4:94:9C:30:BB:AA:0B:74:E1:52:C3:C5:DF:8B
Certificate issuer:       /CN=F74C2D958B550F7D08449AE576084BD914E5F64F
Certificate serial:       5003EA744FFDA5B3C71DFB61FCDDB85471825847
Authority key identifier: F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS264569.roa
Signing time:             Tue 22 Oct 2024 17:28:54 +0000
ROA not before:           Tue 22 Oct 2024 17:23:54 +0000
ROA not after:            Tue 21 Oct 2025 17:28:54 +0000
asID:                     264569
IP address blocks:        177.72.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:03:ea:74:4f:fd:a5:b3:c7:1d:fb:61:fc:dd:b8:54:71:82:58:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F74C2D958B550F7D08449AE576084BD914E5F64F
        Validity
            Not Before: Oct 22 17:23:54 2024 GMT
            Not After : Oct 21 17:28:54 2025 GMT
        Subject: CN=ECBBCCA5CE2EC4949C30BBAA0B74E152C3C5DF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:cd:67:f4:95:70:4e:52:8d:2a:67:52:34:
                    6f:e1:d8:e3:5c:80:f7:71:37:21:c9:3d:97:f2:dc:
                    cc:af:b9:f6:d3:95:85:ba:53:9f:e4:8e:43:c6:c5:
                    cb:6d:eb:d0:44:17:7e:41:7d:17:8a:13:a3:93:92:
                    fb:78:68:91:7d:27:77:eb:99:60:d8:6c:1d:a7:f0:
                    e3:10:de:c5:ce:40:96:d6:78:57:65:76:c1:05:24:
                    82:c9:bc:b3:09:b4:8c:14:be:2a:d8:45:b3:01:f7:
                    be:de:66:25:50:02:e8:55:4f:a9:a3:70:07:ce:63:
                    e7:e1:d1:1d:48:54:82:d5:e5:bc:aa:c3:0f:b9:5e:
                    40:3f:80:7c:64:a9:f3:78:b6:01:c5:59:18:80:27:
                    13:79:3b:44:54:4f:85:ce:f3:62:22:c6:b9:ba:2c:
                    1c:d0:fe:74:54:c2:d8:89:8d:c0:3d:da:0e:61:f3:
                    8f:c0:e8:5e:40:76:2c:f3:03:5c:60:97:82:a7:47:
                    d5:3b:99:b5:71:83:8b:c5:3f:26:c1:0b:9c:2e:2f:
                    87:ee:71:ba:41:00:33:9b:61:c8:32:8a:50:54:f0:
                    2c:a8:4a:3f:9f:b3:61:5b:6a:7e:10:95:90:dd:eb:
                    3e:f9:ad:fe:ca:e7:5b:46:2d:c8:d9:63:6b:d8:bb:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:CC:A5:CE:2E:C4:94:9C:30:BB:AA:0B:74:E1:52:C3:C5:DF:8B
            X509v3 Authority Key Identifier:
                keyid:F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS264569.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:57:26:6c:4c:4b:72:50:04:a0:fd:98:73:e4:0f:43:70:
         0d:4f:21:4e:15:c9:4f:ee:c7:a7:bf:10:23:55:f7:19:7b:bb:
         12:8b:15:f4:08:db:14:8a:70:16:54:90:ba:0c:1d:df:7c:3b:
         8c:f7:96:8f:c0:d5:b6:ae:04:92:81:04:c5:9c:47:2c:7d:d0:
         3f:3d:96:0a:03:64:7f:eb:6e:46:f8:66:60:0f:c8:d1:ff:92:
         4f:bc:e8:9e:98:b3:44:34:94:c4:3a:81:42:f9:df:cc:4d:b4:
         2f:94:40:66:6f:c4:cc:55:42:dd:80:e4:50:a5:a4:19:ab:d4:
         c0:b9:e0:ab:7b:c9:cc:9a:02:08:18:bd:5b:32:c7:73:3d:68:
         6c:dd:31:af:38:72:a1:42:11:05:87:fa:4d:81:75:56:e1:db:
         64:09:b0:4a:c6:af:f4:08:e5:33:ba:bc:34:1f:ac:4b:63:83:
         e4:c3:b8:66:ca:b6:c8:69:cb:6f:d8:79:10:60:cf:b9:f0:45:
         3c:53:d5:16:2e:b4:a0:85:ad:cf:00:4f:01:71:98:6d:f6:21:
         dc:c1:88:3e:77:a2:42:14:0d:18:5e:c7:4f:43:71:39:f8:74:
         a4:df:33:9f:dc:23:97:c9:4a:59:79:09:2d:a4:c8:a3:37:a5:
         6a:78:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org