Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          y4Wn23BBvfh1K5++ls+fVwInHETUyqCB+6Pe2IESg8o=
Subject key identifier:   1E:40:05:03:09:EB:1B:6E:4A:B9:63:55:C2:4C:43:05:E5:06:23:7A
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       5EEB60C939237D49FDB2DFE2A30FC354834DF8ED
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        177.92.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:eb:60:c9:39:23:7d:49:fd:b2:df:e2:a3:0f:c3:54:83:4d:f8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=1E40050309EB1B6E4AB96355C24C4305E506237A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:01:a5:f0:0b:ae:68:3f:b0:0a:42:d2:0c:
                    46:c6:78:89:c0:35:48:73:dd:69:2f:6e:f8:3d:b7:
                    33:74:1b:83:65:fd:6e:2e:f0:1b:82:d1:34:6a:61:
                    89:fd:dd:74:10:e3:c7:32:13:b8:14:6e:f9:47:fc:
                    f0:da:5c:2f:2e:8b:dc:ed:46:29:a1:ee:4e:bc:29:
                    ad:12:0b:a0:1e:1e:29:c8:4c:b8:2d:9a:79:85:3e:
                    72:76:d4:ce:07:b7:5d:af:8b:08:a7:46:ba:e3:03:
                    b6:a7:64:ce:08:e8:a6:a8:40:63:18:dc:f2:4f:e6:
                    d0:a2:8e:2f:96:35:0d:31:ec:78:8e:a5:9e:d7:91:
                    97:db:ad:c4:ee:34:51:46:b6:e0:03:52:24:4d:22:
                    53:e7:51:a6:dc:d4:c8:ff:64:f6:d3:50:28:15:f6:
                    29:20:8d:46:a3:74:9d:51:cd:db:29:ff:f8:8e:f0:
                    d2:74:70:0b:71:27:28:cf:81:90:08:b8:10:f5:e7:
                    54:a2:1d:25:33:bd:4f:d2:fa:02:82:2c:c8:a7:54:
                    e9:4f:4e:ed:23:6b:36:a0:5b:ab:a7:7c:76:76:9c:
                    0a:4c:8c:27:ff:e1:b0:95:f7:d4:75:86:5c:ec:d1:
                    9d:13:39:28:14:8d:44:f7:c9:66:7c:bf:15:f7:85:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:05:03:09:EB:1B:6E:4A:B9:63:55:C2:4C:43:05:E5:06:23:7A
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:02:09:a5:f0:2e:79:3e:9a:e1:73:f8:ba:d8:55:32:b8:3b:
         4b:6f:3a:a6:84:f5:75:ee:dd:dc:ef:b0:80:36:bc:05:d6:b4:
         00:a2:bb:48:84:dd:5e:cb:59:ae:9a:f5:77:71:7e:55:e7:c7:
         e5:19:24:1e:69:4a:f2:ec:95:9e:7b:87:34:a3:9d:67:f9:68:
         87:40:76:32:df:bf:44:b1:6a:d3:9c:70:71:87:f0:1e:e6:3e:
         2a:0d:4b:1c:82:35:29:36:62:56:03:b0:df:15:1e:e5:66:00:
         ac:af:20:5b:43:97:ff:3b:83:53:d3:b0:f6:2b:5b:aa:9c:1b:
         1f:2b:2e:79:8a:e1:9f:81:7e:dd:72:ac:07:9f:9f:c5:71:97:
         99:0a:52:e4:51:d8:de:43:88:36:4a:40:c0:87:fc:6d:59:0d:
         4f:af:af:50:0b:b6:9b:29:08:59:bf:e6:7c:e9:15:89:fe:1e:
         e9:7a:4f:10:e4:51:c7:1a:99:98:26:8f:54:ca:c6:bb:97:47:
         d1:da:1f:2f:15:1a:7d:e6:d9:db:59:15:42:2d:f1:70:1f:9f:
         df:c4:90:7f:14:9d:ac:f5:66:a9:ef:c0:45:36:11:d0:86:05:
         51:8a:37:94:ee:8e:68:cc:c0:83:29:5f:7f:ee:a9:2c:6c:1b:
         2c:4b:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:25 2025 by rpki-client