Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
File:                     3137372e3133302e302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          Q89lNWXv1A1N07NNpcK5ZcfTAHBKVYdEZNPDSz2nBok=
Subject key identifier:   C3:B1:71:E7:45:0C:D1:2B:AB:6E:C7:58:30:AC:D7:C5:F2:DB:9C:E7
Certificate issuer:       /CN=8BD556C1877889D5972C0C092DDCA81620EC2EE1
Certificate serial:       5C7CDB357A1B846022BAAA4B3CCB2071E9B84732
Authority key identifier: 8B:D5:56:C1:87:78:89:D5:97:2C:0C:09:2D:DC:A8:16:20:EC:2E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD556C1877889D5972C0C092DDCA81620EC2EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 29 May 2024 16:21:21 +0000
ROA not before:           Wed 29 May 2024 16:16:21 +0000
ROA not after:            Wed 28 May 2025 16:21:21 +0000
asID:                     28260
IP address blocks:        177.130.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/8BD556C1877889D5972C0C092DDCA81620EC2EE1.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/8BD556C1877889D5972C0C092DDCA81620EC2EE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD556C1877889D5972C0C092DDCA81620EC2EE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 20:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:db:35:7a:1b:84:60:22:ba:aa:4b:3c:cb:20:71:e9:b8:47:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD556C1877889D5972C0C092DDCA81620EC2EE1
        Validity
            Not Before: May 29 16:16:21 2024 GMT
            Not After : May 28 16:21:21 2025 GMT
        Subject: CN=C3B171E7450CD12BAB6EC75830ACD7C5F2DB9CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:fa:1e:8d:f6:38:35:0c:4f:9a:8f:99:b7:
                    a6:e5:e8:6e:7a:a6:55:57:49:f0:6a:07:f4:97:05:
                    48:da:0e:18:51:38:86:24:f8:ab:7a:d2:93:89:da:
                    84:f0:54:fb:83:51:e8:7a:41:ee:b2:1b:c3:44:7e:
                    d5:8d:8e:3b:f2:ae:16:8e:76:4c:54:86:28:b1:40:
                    64:0b:e5:e8:32:c7:95:ba:3d:f5:3e:84:92:34:88:
                    6a:ad:a9:34:2f:d5:02:5b:16:63:a2:dc:33:92:f3:
                    6c:5f:47:6b:6b:98:7a:15:32:c0:29:82:79:fe:83:
                    df:ed:79:eb:2d:76:bf:9b:4a:28:ad:d4:8f:4d:34:
                    11:5a:7a:9e:75:6a:fe:9a:8a:fa:d2:41:29:bd:8c:
                    bc:c9:7c:04:36:e8:af:27:6b:79:10:6e:16:50:48:
                    7f:30:b7:4f:51:94:19:84:5b:13:41:ef:fa:92:fb:
                    8c:dd:71:15:0f:48:91:0a:51:f5:47:60:6f:12:b9:
                    5b:66:37:1f:00:b6:c3:62:29:dc:77:95:a5:6d:bc:
                    6f:b4:3a:71:7c:6d:e8:bf:52:14:06:1b:45:ad:37:
                    33:c7:39:4f:df:9c:13:ae:2c:91:a1:fd:f2:f0:42:
                    1c:2f:26:08:c6:b1:d3:fb:3b:23:d8:77:47:12:0c:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:71:E7:45:0C:D1:2B:AB:6E:C7:58:30:AC:D7:C5:F2:DB:9C:E7
            X509v3 Authority Key Identifier:
                keyid:8B:D5:56:C1:87:78:89:D5:97:2C:0C:09:2D:DC:A8:16:20:EC:2E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/8BD556C1877889D5972C0C092DDCA81620EC2EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD556C1877889D5972C0C092DDCA81620EC2EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:f1:be:fc:63:77:02:c3:fc:4e:52:7d:89:dd:2b:bc:45:
         8a:3e:2e:14:9f:2f:b5:9d:c8:79:7c:ce:7a:be:b6:23:cc:a8:
         e7:ec:27:ea:56:56:88:2f:93:5e:5d:53:ef:eb:ef:39:ac:26:
         14:e0:5e:85:37:f8:bd:91:ae:e4:dd:c7:52:83:1c:d6:ff:d9:
         69:41:fc:37:89:24:e6:d3:98:2f:bc:20:ab:98:46:4e:3c:7f:
         b1:fd:61:5d:38:3e:20:67:13:a7:63:2e:ce:95:a8:d8:b4:2f:
         68:72:1d:f7:e6:2e:80:ff:b4:a7:8c:6c:6d:6a:e0:1b:dd:17:
         ad:df:ca:f3:ce:1b:d7:e8:c7:ef:de:2a:67:35:4a:5c:11:31:
         bf:ad:29:57:62:ba:7c:79:b6:1f:ec:a2:12:3e:e3:b6:99:a0:
         37:62:e2:1a:6d:28:f0:69:58:08:be:7a:55:25:45:06:00:d5:
         75:ea:1d:60:f1:30:94:f4:5b:11:69:d5:cd:91:6c:76:27:04:
         ba:a3:cb:f1:20:a2:50:db:4a:98:c5:aa:f2:bb:17:3f:58:c1:
         f5:5e:cd:89:1a:04:4b:5a:0b:ef:f6:ce:3b:ab:2d:0c:91:9a:
         59:3f:63:f9:61:a7:01:5f:3e:2b:b5:a2:88:94:b6:22:56:c7:
         4a:35:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:48 2024 by rpki-client on console-ams.rpki-client.org