Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139342e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3139342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          QmaOFXnzMg6fOjMtiDxIfCYwMxgGviVw8zSJ7uYZ2ws=
Subject key identifier:   59:16:8A:71:CF:6C:B1:73:03:B2:D4:00:8C:9D:31:95:C2:B9:39:4B
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       010EB6F6AC5C1CF0C5D9AC03634D6D942B919585
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        177.92.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0e:b6:f6:ac:5c:1c:f0:c5:d9:ac:03:63:4d:6d:94:2b:91:95:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=59168A71CF6CB17303B2D4008C9D3195C2B9394B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:46:b1:a1:61:43:46:22:7c:11:6d:af:15:
                    29:90:0f:14:43:42:74:ce:12:ae:4b:28:44:c2:1f:
                    c9:4c:ec:f4:1b:1a:2c:87:71:0e:fb:ba:15:0c:68:
                    54:03:26:5c:b0:db:15:94:7e:0c:3b:8e:28:c2:b7:
                    09:13:4f:dd:fe:e3:0e:51:02:d1:f5:ae:83:b5:4e:
                    bc:da:ae:95:e6:35:70:04:3a:4f:64:35:2b:8a:5d:
                    06:00:15:a0:44:fc:de:bd:dd:cf:d4:6e:f8:f2:06:
                    f7:9d:04:e4:cf:71:3d:76:34:58:f6:ca:db:8d:ea:
                    84:94:1d:60:c2:80:d8:d8:4e:fa:df:c0:3a:20:1d:
                    49:bb:35:2a:24:2d:5e:ef:7b:43:7e:8c:ad:7d:f5:
                    3c:2b:8e:d9:44:7f:02:bf:8d:e4:5a:fd:6e:22:f3:
                    16:20:54:4b:d3:32:4c:ce:0e:36:35:9d:66:bc:7a:
                    49:60:ac:8c:a4:5c:fb:c5:b0:1e:de:66:8d:56:34:
                    5a:ee:06:ce:c8:4c:48:5b:04:fb:c5:4e:b5:d0:ae:
                    d0:ac:1d:2f:b3:76:df:bd:13:44:d1:dd:72:48:09:
                    5b:b5:bc:d2:1a:71:9c:db:3b:7f:28:23:44:96:26:
                    c0:cf:88:02:35:ac:c2:be:99:ac:7a:23:37:c5:a7:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:8A:71:CF:6C:B1:73:03:B2:D4:00:8C:9D:31:95:C2:B9:39:4B
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:02:5d:bc:d6:28:c8:e1:04:85:2b:ea:d1:c7:d3:d2:8d:
         bf:a7:cc:72:29:3a:dd:b2:1a:39:d3:72:e8:45:16:fe:97:20:
         11:dd:40:39:91:68:11:f5:83:f4:a3:90:48:45:22:79:8a:6f:
         56:16:a1:03:dd:f5:d7:f2:84:05:3f:e1:86:11:f6:d9:e9:3c:
         5b:ca:11:c6:75:8f:2f:2b:26:1e:a4:47:38:7b:5d:3a:6d:f9:
         ec:6c:e5:37:8b:5b:1d:7d:2e:34:9e:a7:8d:31:63:fc:dd:42:
         4b:95:d2:a1:c5:bc:72:0f:fa:7a:9b:93:c8:57:e2:95:6e:4c:
         e1:f8:64:a5:14:22:2f:ca:b2:af:c4:63:bf:35:e4:1a:aa:33:
         45:84:12:b3:7b:92:ff:2c:91:b5:fb:df:6c:cf:ea:c1:3c:d7:
         52:93:14:c4:ae:23:2b:59:4a:ee:64:cf:2e:77:b6:c9:be:b6:
         bc:6d:1d:f9:d8:1d:99:b7:a3:0e:04:e2:37:00:c6:77:97:2e:
         f1:00:b6:7d:74:45:3e:e4:83:ad:ce:a7:b3:b9:1e:7e:7a:cf:
         ad:65:12:1f:82:2a:24:cc:78:d5:fc:62:91:b0:fa:47:0b:03:
         de:fd:10:af:b9:5d:8a:d3:61:a0:4b:af:ea:21:e0:01:39:7e:
         85:22:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:39 2024 by rpki-client on console-fra.rpki-client.org