Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139382e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3139382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          CfYXdIC+bVsWrlmXDzq3g4Ch/D2g/ePnoV1hH0RCGCs=
Subject key identifier:   1F:6B:16:92:05:49:B3:0A:50:E1:7F:4D:5B:59:5D:B3:FC:C2:3B:D3
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       4A56BE6B8D13C9FA341064B30757C8719D20435E
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        177.92.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:be:6b:8d:13:c9:fa:34:10:64:b3:07:57:c8:71:9d:20:43:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=1F6B16920549B30A50E17F4D5B595DB3FCC23BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:64:bd:a0:3e:d5:4d:cc:4c:ce:5b:0e:c7:
                    d0:32:e5:23:e6:24:91:2d:4c:ea:d2:c2:db:c3:58:
                    87:69:ca:82:18:73:71:9f:39:3d:e5:e7:f5:32:e9:
                    9f:92:6a:24:5f:36:00:26:53:04:35:d8:dd:b5:4f:
                    9e:1c:23:3a:13:02:bb:30:11:8e:c6:a4:52:1b:71:
                    b2:07:0e:f6:37:34:c1:60:7d:aa:d4:23:51:22:d3:
                    2a:28:44:8d:a3:0f:bf:06:75:97:ac:6a:10:84:28:
                    fe:b2:2d:61:d8:79:23:ec:d8:12:ec:9e:54:dd:f3:
                    c4:3a:25:96:5d:5a:85:92:1b:8e:f0:1e:7b:3e:d9:
                    e1:dc:24:56:f1:c7:c2:76:74:c8:07:2c:a4:f5:b0:
                    ab:ed:bc:7b:f5:53:d3:59:9c:db:36:82:f0:3f:2f:
                    c9:40:52:f3:7e:67:ef:13:e9:08:61:ab:8f:18:c4:
                    fe:c9:ec:9f:1e:aa:a7:7a:93:ad:4b:58:be:59:1e:
                    ac:fb:b2:15:97:2b:61:11:b0:0c:d9:55:79:2f:cf:
                    5a:c6:56:81:19:3c:33:09:c7:15:78:17:cb:91:ed:
                    36:44:d5:22:a7:1b:77:e9:ea:44:8b:0b:ba:b1:a4:
                    87:fe:3e:f8:ad:f7:b9:39:00:fc:4f:d9:29:e6:dc:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:16:92:05:49:B3:0A:50:E1:7F:4D:5B:59:5D:B3:FC:C2:3B:D3
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:e1:f6:fd:ee:82:58:90:fd:49:d4:d4:3a:a2:6e:ff:21:
         cb:3c:3b:16:70:04:ad:ac:a7:a7:b5:a4:4d:b3:50:82:7d:a3:
         49:48:59:b6:ee:04:85:5c:77:4f:f7:89:b1:33:87:44:0f:40:
         53:e0:ff:ae:c1:07:dd:db:90:6a:3f:58:53:d3:9f:b1:8b:15:
         1a:e5:da:59:2c:b5:a5:43:48:22:d1:ac:c1:b0:d3:a2:ce:29:
         67:94:76:e7:b1:bb:58:99:20:56:11:67:82:3f:46:78:04:a0:
         c1:d9:24:3e:bb:78:02:d0:13:c0:9d:06:8e:b7:44:c0:de:d0:
         1e:4f:10:0c:93:35:bf:bd:12:e4:05:b6:95:e8:42:74:65:c0:
         fd:ea:01:a9:8b:e5:03:59:86:29:81:62:d1:af:20:11:6a:dd:
         c1:0f:b0:fc:35:6d:3a:e8:11:7d:ce:5a:2d:de:31:e5:46:c9:
         f8:c7:0f:79:52:75:b6:d6:e5:80:6b:0f:2d:3a:b8:fc:88:8d:
         72:7e:de:c4:5b:dd:92:8e:14:cd:a0:5e:df:79:43:65:17:28:
         83:56:84:25:3d:45:bf:f8:5e:13:38:ed:22:14:78:b3:96:0d:
         fc:32:74:c9:e3:a6:0a:11:bb:89:8e:0c:fb:a6:79:51:af:2a:
         fa:f4:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:39 2024 by rpki-client on console-ams.rpki-client.org