Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32332d3233203d3e203532393136.roa
File:                     3137372e31302e32302e302f32332d3233203d3e203532393136.roa (raw, json)
Hash identifier:          bpFgj31s6rpsKOUe9zf221Ihvj1qyvZjKtlYvjQYGqg=
Subject key identifier:   F5:71:6C:56:78:92:71:6E:11:E4:A6:87:A4:01:BF:AF:E6:F5:47:BA
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       6711D5F46874FB06CFBDE084278ED242FEA4D8B9
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32332d3233203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:34 +0000
ROA not before:           Wed 03 Apr 2024 20:46:34 +0000
ROA not after:            Wed 02 Apr 2025 20:51:34 +0000
asID:                     52916
IP address blocks:        177.10.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:11:d5:f4:68:74:fb:06:cf:bd:e0:84:27:8e:d2:42:fe:a4:d8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:34 2024 GMT
            Not After : Apr  2 20:51:34 2025 GMT
        Subject: CN=F5716C567892716E11E4A687A401BFAFE6F547BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:b8:91:16:99:e0:76:f6:15:0e:44:38:8b:
                    d4:bd:e6:58:3d:e9:63:85:ff:e9:86:4d:eb:90:7b:
                    39:26:19:70:f2:be:e4:52:f7:57:47:1c:98:cb:b6:
                    d8:15:ac:2c:b2:fa:d1:f5:d8:6a:a9:b5:be:58:d0:
                    ac:3f:90:5b:ab:29:34:84:cc:7d:67:26:53:7b:66:
                    f6:48:69:9d:8f:79:2f:af:e5:9b:2f:cf:87:28:5a:
                    d7:30:73:a5:60:58:b6:f4:4a:09:b8:10:b8:ac:1d:
                    5f:57:d7:67:34:ce:ef:13:11:05:d5:8f:e0:83:93:
                    88:d1:77:70:29:15:2b:cf:ac:bf:f8:58:6a:51:18:
                    32:b9:f7:46:73:80:39:8b:28:fb:fb:a4:be:bf:57:
                    e8:a1:82:50:48:34:c3:6c:a5:6c:4e:f8:1d:40:62:
                    c6:1d:64:7c:29:fe:6d:d4:0d:2e:cf:84:25:5f:7e:
                    05:dd:58:2d:6e:87:3f:f0:9d:22:a9:d8:dc:db:b5:
                    cd:68:31:f2:f3:01:83:dd:9d:bf:41:54:ae:43:f5:
                    24:83:bb:4d:43:ab:e1:73:e7:f7:4d:8a:e8:8e:8e:
                    48:bf:c7:f6:97:87:b3:79:30:55:3c:69:72:46:df:
                    bd:16:47:d5:af:eb:21:b2:72:02:b4:8c:97:3f:37:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:71:6C:56:78:92:71:6E:11:E4:A6:87:A4:01:BF:AF:E6:F5:47:BA
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32332d3233203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:de:0a:af:cc:4e:34:be:c1:9d:c3:79:66:85:36:9e:99:33:
         ab:c6:01:80:36:d1:17:01:26:b5:d4:f2:e3:39:91:81:a5:ee:
         f3:97:7d:81:c8:5e:f5:2b:ce:6a:ca:4c:dc:b2:2b:cc:60:e7:
         92:ee:4b:57:8c:3d:39:ac:f6:b7:50:8f:cb:31:0e:20:c2:cb:
         e9:5e:14:15:8d:fd:65:d0:f1:7b:77:04:b0:f1:fa:c6:07:ed:
         0a:41:af:5a:0a:29:b1:e1:a9:39:9f:b9:90:b9:8c:2f:0b:e8:
         b7:03:01:03:06:b9:dc:5a:cf:ca:23:c2:2b:b8:4b:0d:63:46:
         ec:1f:a1:72:63:31:5c:62:24:fb:ea:97:56:0d:0d:45:3f:21:
         d4:d9:a3:e5:1f:e4:f5:80:d0:b6:7c:db:65:7b:4b:e5:b3:cc:
         10:46:49:49:40:eb:77:c7:6f:21:1a:16:48:cb:98:8c:a8:3d:
         36:13:a9:cd:bf:d0:5a:c5:27:41:93:65:e6:21:66:37:24:d4:
         bc:e1:38:d4:af:c0:57:75:d0:77:43:91:94:e7:cf:08:c8:1d:
         de:26:18:20:72:f0:54:39:02:55:81:72:a8:11:8c:1d:26:92:
         35:1a:90:7a:e0:f0:20:fb:ab:48:09:8a:bd:b2:c2:62:66:64:
         4c:3a:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:40 2024 by rpki-client on console-fra.rpki-client.org