Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323733333039.roa
File:                     3137372e3232322e3231302e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          1YbUyYNltLgCsnsmv2e2UFETDMpjGgOTy83nnkBJiCc=
Subject key identifier:   C6:B4:E5:DF:1D:CD:EF:38:07:22:7D:C6:E2:56:30:55:27:25:36:E5
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       63C95A0917DD5243A2898D62AC32120ED8162948
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:32:07 +0000
ROA not before:           Thu 09 May 2024 13:27:07 +0000
ROA not after:            Thu 08 May 2025 13:32:07 +0000
asID:                     273309
IP address blocks:        177.222.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c9:5a:09:17:dd:52:43:a2:89:8d:62:ac:32:12:0e:d8:16:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:27:07 2024 GMT
            Not After : May  8 13:32:07 2025 GMT
        Subject: CN=C6B4E5DF1DCDEF3807227DC6E2563055272536E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:6f:9d:b2:2c:a6:3f:30:86:9a:03:19:53:
                    7b:3a:7b:e3:6e:99:34:46:a8:f5:2c:66:aa:17:01:
                    61:c3:4a:18:7e:b5:e9:88:8f:48:30:c0:f0:5f:bc:
                    f8:74:18:60:d0:de:e8:42:e8:4d:93:11:64:c6:b6:
                    08:12:29:74:09:86:87:d3:e7:62:05:90:03:aa:48:
                    3b:0d:f5:0f:5e:b4:73:a5:29:7e:18:6d:35:c4:68:
                    da:dc:09:09:d0:33:31:8e:7d:4b:ce:72:8f:62:28:
                    7a:28:05:ee:b4:70:d5:b8:69:21:40:0e:f1:22:c2:
                    69:69:81:fa:ed:f4:46:1c:fc:50:d1:95:45:92:72:
                    00:9a:a3:5e:27:5b:a1:9a:43:ea:6e:08:f8:a5:61:
                    f9:b6:41:68:0f:ae:2c:25:ab:23:02:5f:dd:01:c6:
                    8b:0e:34:28:27:e3:8d:80:62:a4:83:c2:38:b1:c1:
                    55:a5:9a:c3:5b:35:f9:09:eb:88:3f:c7:a7:3d:ef:
                    ad:7d:6d:9e:ad:b5:fe:30:b6:c0:62:45:81:d4:b2:
                    67:bd:39:68:20:07:e9:61:56:f9:a3:56:63:22:cf:
                    f4:a9:cf:27:bc:ed:e4:f8:cc:9c:9e:e9:2c:89:f1:
                    b7:bc:ed:07:3f:55:97:be:2b:07:ea:77:4f:e8:d4:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:E5:DF:1D:CD:EF:38:07:22:7D:C6:E2:56:30:55:27:25:36:E5
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:9a:d8:3b:c7:84:ca:04:25:86:17:1a:bb:6f:9f:bf:43:
         73:88:01:23:e6:93:b9:7d:a1:57:4a:f0:91:07:36:96:1e:17:
         12:ae:35:7a:ad:d9:b7:58:95:28:cf:b1:44:b7:f9:d6:a3:c7:
         98:37:0f:c9:ce:11:65:34:10:48:14:d9:03:95:88:b6:f2:01:
         77:4c:3d:c9:c3:0d:19:24:f9:2a:9e:7a:64:df:af:25:81:f5:
         62:61:9f:e2:2b:3a:90:4a:30:96:7e:31:64:9b:c8:2f:50:15:
         45:bb:12:de:d4:1c:e2:3c:08:fd:0a:fe:f6:ad:3f:76:49:bb:
         de:58:61:69:c7:92:e5:f5:c4:58:6a:79:b0:96:5c:42:99:48:
         64:b9:80:54:61:74:b7:d0:e0:ba:75:7f:6b:49:b7:3f:ce:5c:
         d0:8c:83:d8:90:1c:da:b9:dd:6a:54:4f:f7:c1:c6:c4:dc:b0:
         c1:a0:3d:49:e0:02:9d:ba:33:9c:bf:e4:cc:eb:ee:5d:ec:cb:
         ca:49:b3:3a:b4:dc:9f:83:3f:6c:e6:ce:bc:a9:56:47:9d:50:
         ab:2b:b1:27:b0:a9:7d:3a:88:27:80:44:ec:1a:89:56:88:0f:
         dc:60:8e:76:e1:e7:11:0f:fb:c7:bb:fc:ea:f1:55:3e:43:fe:
         59:8f:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org