Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa
File:                     3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (raw, json)
Hash identifier:          OsB+ZM0/GYug82auzrTWqBjMlhxWIdl20qD8KOpQsSc=
Subject key identifier:   F5:C9:3D:63:C4:FC:E6:E3:77:8E:D5:37:19:67:D8:86:92:8E:FC:F5
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       196F5C0C2F700F567745221F322840105916A48B
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa
Signing time:             Thu 04 Apr 2024 04:44:45 +0000
ROA not before:           Thu 04 Apr 2024 04:39:45 +0000
ROA not after:            Thu 03 Apr 2025 04:44:45 +0000
asID:                     262427
IP address blocks:        177.39.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6f:5c:0c:2f:70:0f:56:77:45:22:1f:32:28:40:10:59:16:a4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Apr  4 04:39:45 2024 GMT
            Not After : Apr  3 04:44:45 2025 GMT
        Subject: CN=F5C93D63C4FCE6E3778ED5371967D886928EFCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:29:78:59:f5:e5:95:33:70:1a:ff:a3:15:
                    5b:95:46:a3:ca:fb:29:35:99:82:5d:e8:03:ef:0f:
                    21:b7:a7:b0:5e:e9:dd:61:ba:2d:8d:98:e9:0b:96:
                    18:53:34:86:a7:39:41:49:8d:28:3b:b1:60:a7:37:
                    03:bc:99:14:90:87:36:d0:08:36:05:92:14:7e:21:
                    3f:a0:59:bd:28:ea:7f:9a:d3:e4:e9:79:0a:ce:14:
                    fa:10:73:93:9a:4a:19:60:04:76:e6:72:21:cf:a9:
                    18:99:20:7d:60:07:a8:c1:66:2b:6a:c0:dd:8e:9b:
                    9f:bf:1b:fa:e9:0b:3b:39:bb:dc:b0:b9:3f:a5:41:
                    51:b5:22:6b:c3:e8:5c:6a:bc:ab:e0:99:f0:ca:a4:
                    12:5c:b6:78:0e:d8:d5:64:eb:e6:f7:b1:c6:bd:81:
                    00:f1:91:1f:9a:d5:b4:b1:32:d8:4f:5f:a2:73:87:
                    09:ee:cc:7f:d4:0c:22:fa:65:63:c9:96:e5:7e:20:
                    4f:21:16:3b:3b:20:56:17:63:37:13:07:1e:76:d7:
                    e2:f3:92:fd:f3:02:11:09:14:d1:80:c5:c6:60:53:
                    d8:ec:5c:5e:5c:87:dc:c0:d0:dd:ce:17:7a:d2:f7:
                    83:58:00:f0:19:5e:f6:db:96:40:54:93:14:fc:8e:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:3D:63:C4:FC:E6:E3:77:8E:D5:37:19:67:D8:86:92:8E:FC:F5
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:26:75:b3:b7:1c:be:24:19:df:1e:c9:bf:d3:49:93:6f:
         6d:c8:05:6c:aa:a7:6e:a6:8c:ac:e9:1a:49:57:8f:5f:ad:f9:
         6a:75:3f:fc:42:27:20:20:5e:21:88:0a:e3:dc:3c:2e:7c:6c:
         06:57:1f:2f:f2:53:ac:79:cf:b8:3b:bc:dd:6d:f6:53:2f:da:
         91:3f:f6:88:41:65:b7:6e:e0:8a:0e:26:f2:32:db:82:bc:9b:
         99:7c:c6:60:00:0d:7b:28:2e:a0:f3:16:bb:c9:20:6b:33:98:
         7f:cf:f2:cf:e0:a9:de:4e:b7:60:60:fb:76:d8:5c:be:1c:5d:
         37:77:47:46:52:27:09:13:f9:c7:06:e7:67:d0:93:0f:c8:c5:
         52:8f:26:d2:7c:37:7e:64:c9:18:2b:1e:35:84:16:63:04:42:
         e4:78:e4:e2:30:80:80:bb:07:55:c1:c0:1f:ba:97:d6:35:4d:
         6f:0c:24:6d:2b:8f:11:dc:60:11:8f:90:4a:27:8b:e9:6d:16:
         f6:5f:c6:0a:5b:90:98:48:70:3c:07:e0:55:41:00:31:79:02:
         88:79:f8:36:87:66:eb:6d:05:52:6a:a3:ab:0a:2d:bc:c1:0e:
         24:06:75:71:67:b1:cb:08:2c:c9:73:4a:27:fa:88:89:d4:21:
         0d:a6:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:09 2024 by rpki-client on console-fra.rpki-client.org