Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa (raw, json)
Hash identifier:          QM99vELXd/OR0rPusHzkcrNd+0L9Sc0249iGsFU1oeE=
Subject key identifier:   9F:5A:C3:D0:6A:7F:F4:B4:E5:C2:06:4D:96:DA:1C:3C:B1:38:06:56
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       2A675AF00F24FDDDE4B12787132A9EB2714B2D34
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 19:48:08 +0000
ROA not before:           Tue 03 Sep 2024 19:43:08 +0000
ROA not after:            Tue 02 Sep 2025 19:48:08 +0000
asID:                     262828
IP address blocks:        177.155.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:5a:f0:0f:24:fd:dd:e4:b1:27:87:13:2a:9e:b2:71:4b:2d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 19:43:08 2024 GMT
            Not After : Sep  2 19:48:08 2025 GMT
        Subject: CN=9F5AC3D06A7FF4B4E5C2064D96DA1C3CB1380656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:85:3e:9b:85:00:fd:aa:00:6a:67:db:8f:
                    5f:97:6e:6c:66:6e:6a:04:b0:d0:09:af:e6:51:1f:
                    56:ab:7a:f0:c7:9f:77:ba:51:61:90:a3:19:24:bb:
                    24:37:79:f8:84:01:6e:41:02:38:97:c4:d2:39:61:
                    23:e5:13:cf:13:67:36:4a:f0:d1:53:8e:4e:c9:d5:
                    1c:55:7c:87:8f:f7:11:7d:92:67:72:f7:4e:d7:91:
                    c5:8f:73:3f:92:2c:55:45:b1:3e:a1:a7:ec:66:03:
                    e5:76:b4:4b:67:bf:e0:1c:f8:b2:af:d0:31:f6:c5:
                    52:4c:ef:0c:d9:83:32:06:79:03:bc:44:f0:f8:f1:
                    50:3e:6a:46:57:89:6a:fa:71:05:be:48:84:4b:f3:
                    13:2d:49:bf:1d:cc:9f:29:b7:24:8f:b9:cd:f9:68:
                    2b:c1:70:a1:40:66:df:28:1a:69:0c:90:ea:97:cb:
                    40:c9:a6:c6:ae:b5:0a:5a:71:0d:40:46:ac:77:eb:
                    75:9d:1a:a2:b7:63:51:f2:68:3f:de:b7:37:a6:7f:
                    08:0e:e2:29:e9:52:fb:51:ce:49:03:08:9a:9e:8a:
                    45:10:28:30:b0:26:3f:c8:2a:4f:50:bd:e0:c9:65:
                    4c:37:4d:6c:1c:40:01:d0:ed:ce:d7:53:ac:20:ea:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:C3:D0:6A:7F:F4:B4:E5:C2:06:4D:96:DA:1C:3C:B1:38:06:56
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:d2:5c:21:71:3f:82:62:dd:27:f9:00:82:c8:e0:d5:e9:9d:
         8b:b6:d1:26:2e:6d:05:5a:b7:0e:dd:c3:bb:86:b5:b8:7b:f8:
         a9:aa:1b:49:88:b6:7d:8b:e4:f0:c8:fd:ef:c0:a6:a5:0c:99:
         d1:69:84:cd:3e:19:37:4f:c2:c3:08:41:53:8b:8d:cb:05:60:
         ee:97:52:e0:21:b7:51:96:48:19:c8:fb:59:53:0e:56:a9:dd:
         a4:cc:f9:a4:13:18:81:bf:7a:bd:eb:2d:47:05:06:9a:2c:87:
         23:82:ee:ed:e8:87:81:b4:1c:c5:fc:e0:b8:1a:7e:b6:05:be:
         54:2a:2b:98:75:e9:b4:e9:97:12:44:c9:c9:4d:88:61:c3:52:
         66:2b:83:44:cc:d7:27:9c:50:9a:5f:26:02:b4:4f:a2:16:6e:
         a7:bf:b4:bb:00:fe:a2:a9:a2:75:ff:02:68:a2:e1:b2:ba:09:
         11:93:eb:a5:5c:d4:b2:d9:29:be:cc:1a:e6:b0:39:0f:22:fe:
         74:32:1e:f1:32:e2:77:16:3c:8d:d0:4e:11:2d:5a:1e:57:bf:
         95:19:71:f9:b7:33:08:ed:09:6c:45:7d:d7:9a:ab:28:d4:9c:
         f7:82:5d:1b:2e:0d:5a:55:32:60:79:ed:45:e5:8a:ce:a8:99:
         4c:e0:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org