Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
File:                     3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (raw, json)
Hash identifier:          iejlXufwDiPbrOwx1iKpvTXvvkKkyTPQew2WPX7Lr0c=
Subject key identifier:   37:55:A7:DA:4C:BD:C3:62:7A:5C:1B:D8:89:7B:1E:63:03:98:82:FA
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       3E805FDAE8F7B3AEE167674A2AFA31619DD9A3CD
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
Signing time:             Thu 02 May 2024 19:09:30 +0000
ROA not before:           Thu 02 May 2024 19:04:30 +0000
ROA not after:            Thu 01 May 2025 19:09:30 +0000
asID:                     263250
IP address blocks:        177.234.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:80:5f:da:e8:f7:b3:ae:e1:67:67:4a:2a:fa:31:61:9d:d9:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: May  2 19:04:30 2024 GMT
            Not After : May  1 19:09:30 2025 GMT
        Subject: CN=3755A7DA4CBDC3627A5C1BD8897B1E63039882FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:0e:f5:dc:e0:07:08:ec:6f:79:91:28:ef:
                    6f:ed:7e:31:0f:47:1e:2c:71:cc:fd:69:0a:a6:d6:
                    99:60:70:ef:68:17:66:47:87:b1:0c:b5:18:44:3f:
                    c8:69:2b:d9:07:32:77:11:09:3d:7b:93:03:9e:52:
                    5c:07:63:d5:4e:6c:54:ca:c2:8f:26:1f:13:81:23:
                    5c:19:00:7b:7e:3f:ab:03:da:6a:d4:e3:1a:cd:25:
                    96:46:b8:1d:c7:f9:f5:4e:5a:bb:79:18:63:07:0d:
                    8f:a6:a2:10:e5:dc:d1:29:cd:e8:82:ef:f3:e7:c9:
                    6d:12:cd:6a:eb:c5:78:f1:8c:c2:c6:ba:c2:94:5c:
                    fe:9d:30:bd:5a:f5:03:ce:ea:1f:ff:8c:0d:a7:cf:
                    88:b5:1f:3f:e5:5f:c8:31:98:e9:dc:cf:df:98:1d:
                    d1:3d:06:88:cd:38:20:da:b8:a7:29:f7:4a:ba:84:
                    73:98:f2:4f:d9:1b:bc:67:13:61:11:32:6e:ca:68:
                    2b:5a:39:9c:d8:fb:76:34:15:01:6b:1b:24:a2:b1:
                    2e:08:1b:b3:5b:21:53:ca:57:bb:be:1d:25:fc:3a:
                    47:c2:f5:6a:cd:2d:2e:46:a2:08:fe:b5:24:ec:8b:
                    36:31:2b:25:5e:1c:20:fe:d5:9c:42:52:b4:74:c7:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:A7:DA:4C:BD:C3:62:7A:5C:1B:D8:89:7B:1E:63:03:98:82:FA
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:86:c8:c0:26:9d:4a:4b:57:8e:0b:ec:6a:f8:e6:5c:09:
         63:d2:db:2a:27:b1:4a:d5:a0:a5:4e:7c:16:16:d7:e0:df:4e:
         bc:92:11:a0:73:ac:c2:44:40:54:91:cc:10:29:69:41:03:15:
         eb:60:ac:ee:10:9c:f7:d3:98:ff:0f:c7:27:38:fb:0f:50:fa:
         ec:45:0c:53:94:71:74:61:e7:6d:1f:c6:9b:1f:41:3e:56:97:
         0b:cb:e5:a9:2f:a0:13:d2:51:af:f5:25:ae:67:60:99:47:5a:
         e7:ca:c1:e2:10:09:96:79:9c:22:17:79:a6:43:28:4b:b7:0b:
         b0:d6:a2:22:4a:e2:c5:d8:57:ab:2c:8e:43:24:05:b4:58:38:
         4a:4e:53:4d:06:4c:fa:57:84:36:50:ad:43:10:00:0c:c9:1e:
         7b:02:e2:bf:56:8e:65:04:fa:26:80:af:f8:33:bc:58:fc:43:
         df:29:40:97:85:6f:a9:42:1a:c5:2f:c9:12:f0:10:47:6c:6e:
         ba:db:73:f4:68:2a:e0:8c:bb:07:58:7e:04:f5:23:01:07:6f:
         03:be:c1:25:d5:a0:65:76:0c:80:d9:cd:a2:ee:9e:08:72:8f:
         2b:43:5f:f4:54:12:a1:f0:3f:ef:28:34:76:a1:84:b9:6a:9f:
         dc:e5:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org