Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32322d3232203d3e20323733333039.roa
File:                     3137372e3232322e3231322e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          F4ilNxSnDl0iHaVqTwHR6dmZrtnnh0ZVgCbpB21hZeM=
Subject key identifier:   5A:E6:21:9E:00:E8:69:3A:5F:A6:B8:B6:EF:23:2B:AD:46:8D:A9:9B
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       49CB2263AC9F9CD75C859551DE45B8959A190E32
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:32:38 +0000
ROA not before:           Thu 09 May 2024 13:27:38 +0000
ROA not after:            Thu 08 May 2025 13:32:38 +0000
asID:                     273309
IP address blocks:        177.222.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cb:22:63:ac:9f:9c:d7:5c:85:95:51:de:45:b8:95:9a:19:0e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:27:38 2024 GMT
            Not After : May  8 13:32:38 2025 GMT
        Subject: CN=5AE6219E00E8693A5FA6B8B6EF232BAD468DA99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:6d:3a:c1:d8:88:6e:4b:29:8e:77:7d:f9:
                    3f:5f:bf:40:ab:e7:ea:3b:4e:6d:c1:9d:68:55:ad:
                    69:0f:36:2f:bb:5d:7e:53:d3:83:ff:b8:cf:8a:07:
                    7f:04:af:51:74:3d:66:d7:40:d9:5e:d0:b2:8e:6a:
                    2b:0d:86:7f:d4:99:63:8d:b5:d7:eb:05:b2:ca:6b:
                    ed:c6:d1:33:c0:ef:61:6f:30:26:70:d5:00:46:bf:
                    89:fc:a5:04:04:59:cb:44:45:90:48:75:f6:c1:a9:
                    fb:66:5c:46:3a:04:62:4b:c9:82:c1:c8:f3:a0:d0:
                    ff:80:8f:99:bc:a8:25:7f:05:13:21:af:d2:3d:cb:
                    e0:82:33:bb:d3:97:85:3c:b4:1e:4b:db:76:33:0b:
                    48:88:57:f8:c9:30:67:60:05:ae:37:23:f9:3f:b6:
                    8a:c7:43:da:3b:3c:2a:6f:82:60:fe:05:7b:f5:88:
                    94:4c:2d:ce:02:3b:2d:cc:6c:21:89:3b:48:f1:05:
                    97:40:f6:4c:1d:2d:e6:63:8f:3b:0d:29:b7:90:7f:
                    61:d8:45:5d:62:13:c9:46:6f:f2:49:ea:ff:b6:08:
                    2c:46:33:23:c4:4b:2d:f3:ca:60:dd:4e:b0:b4:c3:
                    e5:b9:4a:0e:d0:97:13:d0:4e:99:9e:32:90:90:f9:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E6:21:9E:00:E8:69:3A:5F:A6:B8:B6:EF:23:2B:AD:46:8D:A9:9B
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:7c:f0:f8:52:ee:26:2b:79:3e:45:9c:60:bd:f0:73:08:
         87:9f:bf:5f:75:74:77:00:2f:8a:c9:cd:b3:e6:10:92:c3:ab:
         74:5e:88:a4:be:bc:23:bc:24:38:52:2c:54:32:9b:c7:d1:d1:
         65:6f:01:8f:9e:69:6a:95:b5:5e:31:71:97:4c:83:24:f9:8b:
         f2:4c:fb:89:09:82:69:a6:b5:53:e7:2f:6f:a5:9b:39:76:e7:
         a9:8e:4f:bd:4e:b8:33:00:be:f4:94:7f:67:6c:33:e2:39:79:
         d1:f5:ff:20:a1:52:a0:ca:2d:43:0e:51:4b:4b:8c:7e:e6:d9:
         1e:05:a3:34:1b:2b:69:ee:63:ae:56:92:4c:23:e3:bf:d9:b8:
         93:5d:bc:36:12:7f:66:fe:8e:74:b5:27:cd:42:1b:45:c9:ab:
         79:71:61:a4:e8:89:0e:b8:0a:2f:7c:28:2c:1c:0d:b1:47:87:
         3f:c2:60:8c:a4:cb:4d:ea:ee:8e:e8:a8:88:f2:74:8f:7f:4a:
         f3:ea:51:24:cd:d1:14:4f:ba:28:47:13:9a:c8:fd:c0:de:4a:
         19:6d:32:26:72:f6:05:02:8c:36:1c:43:61:89:5d:a1:0d:e2:
         9d:15:4d:db:1a:33:aa:c9:c8:7a:fc:22:1f:ae:d1:70:a0:f0:
         c2:6c:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org