Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa
File:                     3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          IWDKSq1dobF5Gq2pLgN7mhh+t8qPTOBYS/WqcnVHfkQ=
Subject key identifier:   14:73:5F:DA:40:D5:EC:40:C5:36:66:73:91:1A:AC:4C:87:43:17:B2
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       49AA6DBC2DEE2F268F2447F4035E9840FC50BC12
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        177.92.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:6d:bc:2d:ee:2f:26:8f:24:47:f4:03:5e:98:40:fc:50:bc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=14735FDA40D5EC40C5366673911AAC4C874317B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:ea:0e:a1:c3:3b:6c:4d:80:3c:13:8c:06:
                    80:3d:b8:d0:32:25:5e:34:33:8e:54:de:b1:cc:a6:
                    2e:47:bf:15:f7:af:ed:6c:bb:d0:14:60:9d:08:c2:
                    e1:93:e1:3d:99:57:31:df:bc:a7:16:15:f4:b7:b7:
                    65:69:45:11:f1:a8:18:00:97:0a:42:0e:a9:4b:98:
                    ed:08:28:f3:f4:dc:46:66:36:17:e2:74:e8:ab:60:
                    74:57:ec:e3:76:09:65:99:79:28:54:d6:8a:70:b2:
                    9b:e3:10:0d:55:07:e7:f0:a0:5b:e9:0f:9e:2e:c5:
                    94:04:15:5f:e1:5a:a6:4c:52:23:36:a3:af:5e:60:
                    6b:61:ed:71:e8:92:89:fb:89:ce:8c:fa:fb:94:33:
                    9e:1c:64:2c:a0:eb:52:76:21:a3:7a:ad:8e:e8:12:
                    f1:49:f6:8d:cd:6d:b0:91:48:ec:71:6f:b1:c9:0b:
                    ee:ef:12:22:4b:d4:14:3c:39:cd:c5:bb:77:ad:74:
                    00:4c:c7:ff:66:b2:27:12:14:6f:e8:24:7d:e0:54:
                    3b:2a:5b:c0:4a:fa:cf:b2:c4:94:30:1c:4b:fd:31:
                    85:d0:f4:2d:d0:a9:5e:59:19:ac:ba:b0:23:11:72:
                    44:00:fc:7e:8e:c3:cf:3e:1c:f4:c8:f9:c2:83:33:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:5F:DA:40:D5:EC:40:C5:36:66:73:91:1A:AC:4C:87:43:17:B2
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:08:0c:87:60:7a:ae:09:b5:bc:73:e9:73:b8:82:09:38:
         19:f3:a2:48:8f:64:38:ea:7a:e4:bd:bb:8b:b0:9f:6e:68:90:
         3a:2d:da:8a:67:06:9e:48:f9:9a:64:c1:6f:30:a4:13:e1:23:
         af:61:d8:53:11:82:99:4f:e2:a1:b9:97:9f:4b:cc:53:58:6e:
         c9:4a:f5:f8:dd:c8:1f:8b:7c:d0:eb:7d:d5:e7:c2:05:de:41:
         de:55:98:d6:b9:97:5b:a4:8c:67:af:2c:e8:5a:ee:2b:ba:3e:
         75:17:74:3a:b2:64:1e:f0:86:53:1f:fb:2a:2d:bd:ac:d1:30:
         98:ab:3c:4a:ae:af:23:0e:5a:2c:b7:b7:b0:78:a0:78:81:49:
         11:bd:c1:e1:f0:da:7a:2b:af:a7:35:18:f1:14:2f:e5:db:7d:
         1c:9b:cf:e5:33:75:db:46:cc:3b:da:0a:38:f9:83:53:3d:41:
         60:6d:08:fd:e0:06:56:b8:ee:4b:f1:39:5b:5f:0b:19:69:e5:
         7c:9c:6a:9b:25:dc:10:19:35:2d:25:5b:ef:30:c1:39:5e:2a:
         10:59:c2:bf:08:00:da:a6:db:79:76:ec:95:9f:1d:e5:c5:b9:
         6b:5c:94:96:86:a8:f2:13:79:f3:e4:e0:d5:e0:a4:55:a4:ba:
         44:d7:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org