Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137352e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137352e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          yw2eFF6Iz88px8guzpxLuE8gLYagJSSeQup+pNkTB8Q=
Subject key identifier:   26:1D:EB:78:0E:0B:59:B2:62:77:4A:2E:AA:9A:6D:F5:D7:18:EF:48
Certificate issuer:       /CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
Certificate serial:       74D06BDEC735FD90706DFFF521CABD14DBEA0A2C
Authority key identifier: 1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137352e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 06 Sep 2024 12:52:45 +0000
ROA not before:           Fri 06 Sep 2024 12:47:45 +0000
ROA not after:            Fri 05 Sep 2025 12:52:45 +0000
asID:                     263459
IP address blocks:        177.190.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:6b:de:c7:35:fd:90:70:6d:ff:f5:21:ca:bd:14:db:ea:0a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
        Validity
            Not Before: Sep  6 12:47:45 2024 GMT
            Not After : Sep  5 12:52:45 2025 GMT
        Subject: CN=261DEB780E0B59B262774A2EAA9A6DF5D718EF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:bb:6d:2b:70:25:8e:b2:40:7b:81:8f:31:
                    63:7d:b1:ab:15:4e:5c:63:ad:70:9b:25:d9:86:88:
                    12:b2:80:fe:ba:43:df:80:53:8d:56:a1:5d:cf:59:
                    d2:45:e3:a2:72:13:42:f0:24:f0:8d:e8:a3:32:4c:
                    5c:44:91:dc:7d:45:a2:36:20:22:44:3e:57:54:d2:
                    84:6c:c0:d4:26:40:16:f0:7c:58:31:10:13:60:be:
                    bd:00:f4:6b:a2:f2:e1:f8:1c:55:c6:91:86:5c:c6:
                    fe:e2:6c:6c:45:c3:52:c3:bc:90:32:1f:49:16:76:
                    42:c3:71:f2:b9:74:e5:20:a5:f5:0b:6d:26:61:2f:
                    a8:01:e8:74:8c:ef:e7:6e:0f:48:0b:81:5f:81:87:
                    3d:24:77:87:f7:3d:d1:2f:8b:76:72:39:91:dd:94:
                    5b:0a:af:19:70:38:80:8b:eb:c5:7f:dd:2e:2e:4d:
                    ff:1a:44:19:87:e0:86:e3:5b:8e:fb:71:75:db:4a:
                    38:96:2c:77:3b:6a:35:99:93:e2:c8:e8:4d:d7:43:
                    41:ef:80:f0:8c:fd:70:c5:64:08:39:6c:ea:c1:67:
                    37:d2:3e:7b:c5:c6:9c:9e:3f:c1:3c:1f:e4:e6:c1:
                    24:76:b6:86:52:b8:81:34:32:1d:06:60:5b:2c:4a:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:EB:78:0E:0B:59:B2:62:77:4A:2E:AA:9A:6D:F5:D7:18:EF:48
            X509v3 Authority Key Identifier:
                keyid:1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137352e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:fa:e1:d3:b3:d8:a2:86:b0:60:6d:1d:0d:53:05:04:7d:
         6a:56:c2:7c:c8:99:84:2c:ba:83:5b:5f:9c:01:1a:e0:c0:9e:
         fb:e5:0c:73:d3:49:71:ec:1c:c7:d8:b8:65:4d:79:39:19:fb:
         34:0e:bb:e3:b5:d4:2e:1b:50:e3:25:d1:d0:f7:be:6a:3c:73:
         64:4f:ff:94:f0:64:9f:e5:0a:e1:26:e9:0e:67:43:ab:af:32:
         d5:bd:1b:2e:9e:16:83:68:69:c8:6b:7e:29:c1:7f:21:87:f7:
         39:ef:f2:45:f3:1d:eb:27:0b:d4:34:3d:26:f1:30:6f:5b:f2:
         0b:74:76:ec:a6:3e:7a:ec:30:96:e5:bc:bb:d5:b5:df:85:68:
         42:f4:d7:97:68:c3:87:c7:ef:4c:f0:23:0d:8a:fa:1e:00:23:
         b0:29:8e:32:49:d9:3e:ea:61:90:44:2d:23:29:1a:1a:d9:4e:
         8d:c0:23:ce:b3:66:71:3a:80:4a:3d:59:02:bc:94:72:6c:fa:
         31:39:88:70:91:2e:50:f9:5e:00:ff:e8:ae:a6:58:e5:fa:87:
         53:5c:cf:9a:03:b7:97:92:64:48:ef:0f:38:60:9e:0d:a3:00:
         26:ed:24:d3:4b:8e:51:a9:4f:6b:84:ab:1f:22:fb:0b:5d:97:
         5f:82:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org