Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136342e302f32322d3234203d3e20323731303435.roa
File:                     3137372e36372e3136342e302f32322d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          N4xIc5puo8RgbwQ5Ut3LZtNTN/6pzC9NmTRl3nPpiOQ=
Subject key identifier:   5F:04:20:5E:4E:5F:85:9C:32:FA:36:E0:8F:15:3D:C6:EB:36:2F:3B
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       5A5CFDB0D50EB62FF20C3A126AF66F7467FAD25A
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136342e302f32322d3234203d3e20323731303435.roa
Signing time:             Thu 04 Jul 2024 19:08:13 +0000
ROA not before:           Thu 04 Jul 2024 19:03:13 +0000
ROA not after:            Thu 03 Jul 2025 19:08:13 +0000
asID:                     271045
IP address blocks:        177.67.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5c:fd:b0:d5:0e:b6:2f:f2:0c:3a:12:6a:f6:6f:74:67:fa:d2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: Jul  4 19:03:13 2024 GMT
            Not After : Jul  3 19:08:13 2025 GMT
        Subject: CN=5F04205E4E5F859C32FA36E08F153DC6EB362F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4d:88:47:19:85:3e:b2:56:e7:7c:14:26:1e:
                    14:ec:e6:9e:6b:c5:5f:9b:94:ce:02:a8:ad:6b:69:
                    c6:32:67:c2:23:27:4c:17:19:82:a9:8b:d7:6f:37:
                    ec:eb:93:7e:92:cc:66:37:19:f7:0b:ec:cd:7b:17:
                    7e:26:71:b5:c2:27:85:97:d5:38:52:18:7b:54:77:
                    ea:65:c5:d7:72:5b:7f:d4:43:70:a6:53:f6:63:82:
                    db:25:78:e7:18:97:ec:09:d7:93:1d:af:f2:aa:dd:
                    db:df:46:a4:0b:6c:c3:2e:bf:14:e1:70:00:ca:b8:
                    29:64:29:38:23:b2:a1:69:a1:53:86:c8:4e:fc:5a:
                    a0:3d:02:05:42:8f:31:c3:04:6f:a1:2d:3c:6c:f8:
                    d3:6f:96:e1:1c:a1:73:5f:fc:b8:37:7d:87:59:5f:
                    ea:5a:32:32:7f:db:96:c8:2c:f3:de:17:71:0b:1e:
                    78:55:a8:4c:56:38:b2:cf:19:8e:6f:b0:f9:0f:50:
                    e7:f5:ba:47:15:3d:32:bd:a4:4a:ca:ce:33:13:ac:
                    83:bb:54:b6:60:e5:5e:98:51:d9:ab:bd:9e:ea:8e:
                    a2:c7:d9:70:58:2e:d6:ee:92:a9:b1:32:0f:0b:27:
                    2e:4d:06:e9:45:ce:2e:ae:32:17:18:79:7f:07:53:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:20:5E:4E:5F:85:9C:32:FA:36:E0:8F:15:3D:C6:EB:36:2F:3B
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136342e302f32322d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:e5:30:67:0f:f9:50:0a:0d:2d:c5:12:3a:e8:36:cf:8b:
         d9:8f:58:75:25:b6:45:27:2d:9b:f7:b4:26:00:43:3d:38:75:
         39:08:b4:51:b9:d5:4b:ee:ec:d8:18:1b:21:d9:34:1a:7a:b3:
         48:80:c7:d4:29:5c:67:83:90:78:34:3a:c4:9a:59:5d:ff:de:
         c3:cf:1b:ed:84:f8:d8:1b:2c:60:42:e9:59:f7:2f:a6:85:df:
         a5:c8:50:63:b4:f9:d5:d8:3a:62:a7:bf:ab:d2:f5:c1:fb:42:
         24:e3:01:6a:49:82:47:84:30:b5:df:3b:90:c4:0f:47:48:b8:
         49:e8:6e:02:49:35:b9:ee:b7:30:87:68:f4:62:e4:a1:98:00:
         c8:4f:ef:7f:58:62:b7:ec:a8:b3:df:c4:30:d1:bf:1c:7c:97:
         d2:f4:0f:a7:7e:64:f7:3c:c1:83:7a:c4:b4:06:1c:3e:99:10:
         89:03:c4:1e:b9:41:c3:b1:e5:86:56:94:76:9f:6f:3f:43:a2:
         75:ae:d7:12:c5:7f:31:4b:dd:f3:86:3b:1b:7f:2d:2a:0f:8a:
         54:ea:e4:21:96:4e:a4:c3:64:6d:d2:a5:48:0b:2a:d3:09:15:
         94:47:23:f6:ad:65:c5:53:20:82:b2:35:03:e5:d7:ed:0d:a1:
         db:c7:6a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org