Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          CiW9A5WEkl1ooE4kCoVLkgWaaeEPIfRQX4YCLQjchkg=
Subject key identifier:   B8:A7:39:24:CF:23:6C:DE:7C:EA:37:91:AD:D2:18:30:2A:C6:F0:8F
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       3DB7532B586F16063C625BEDF86E6177D8F29D03
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:09:14 +0000
ROA not before:           Tue 03 Sep 2024 20:04:14 +0000
ROA not after:            Tue 02 Sep 2025 20:09:14 +0000
asID:                     262828
IP address blocks:        177.155.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b7:53:2b:58:6f:16:06:3c:62:5b:ed:f8:6e:61:77:d8:f2:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:04:14 2024 GMT
            Not After : Sep  2 20:09:14 2025 GMT
        Subject: CN=B8A73924CF236CDE7CEA3791ADD218302AC6F08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:f5:98:95:26:b4:fb:5b:c9:09:b3:b9:e6:
                    69:8b:ff:55:3d:5c:82:1f:0b:bf:2b:0f:cc:45:e3:
                    b1:5e:db:db:81:05:b6:d2:be:26:8e:d0:e3:a8:e2:
                    aa:0f:12:e4:41:fa:70:48:ae:98:2e:e7:26:c7:5a:
                    f8:f6:de:09:9e:d6:37:c5:c9:25:01:9d:ed:14:84:
                    4d:8a:9b:1e:7c:56:3e:c1:4b:cc:82:5f:02:ed:b4:
                    3b:b9:7e:7f:e8:61:fc:2d:9e:f9:d2:ed:60:36:1e:
                    f0:59:62:77:90:fa:9b:61:43:bd:7b:17:0d:bb:a3:
                    53:73:d8:57:1d:b6:77:ea:5c:e9:b8:80:0f:72:b4:
                    ef:5d:7f:ec:f8:f9:6b:0e:9a:b0:77:8f:58:cb:9c:
                    96:42:47:2c:af:7f:56:9b:c3:ae:ee:4e:6c:8d:55:
                    ea:7b:9a:60:99:39:6a:7b:5b:9f:27:8b:7c:f4:0b:
                    0e:17:79:fb:9f:a9:2b:1f:2c:61:cf:76:d4:bb:eb:
                    68:61:f9:d0:bb:1e:64:0f:2a:af:49:90:55:ec:fd:
                    30:fe:c3:79:a2:76:43:dc:27:46:5b:28:62:37:3d:
                    35:af:77:ae:08:a3:7d:a4:5a:d6:0a:56:a6:af:17:
                    67:fd:c2:d6:d7:f7:87:f0:f8:e0:97:56:d9:3b:97:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:39:24:CF:23:6C:DE:7C:EA:37:91:AD:D2:18:30:2A:C6:F0:8F
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:9d:b9:e5:08:9f:21:a4:2b:e8:6f:28:b8:2e:25:ab:3e:
         b0:1a:c1:58:f3:dd:ad:43:ed:61:e0:cd:f7:97:59:9f:e0:a3:
         ec:53:f4:44:ef:fd:28:5b:57:f7:5d:91:99:a1:ee:92:f1:a3:
         53:8d:df:cf:ae:1f:9a:bb:d4:f8:c9:9e:4c:66:62:40:fe:5c:
         4f:5d:99:ad:5b:32:e3:71:32:be:be:f2:7f:79:ee:cc:9d:7c:
         3e:db:07:bd:08:0a:ea:c5:51:c0:06:53:b3:58:8f:17:67:0f:
         10:4b:2f:65:e8:66:d4:8a:56:6d:40:21:47:91:5b:ec:d2:5b:
         40:82:b1:38:ad:71:c4:85:58:47:77:4d:a5:ab:8b:c5:b2:2a:
         a7:d0:ee:5d:f1:a5:58:96:c2:c0:36:db:04:9e:07:d2:c9:f4:
         3b:9a:ff:4c:72:f2:88:72:61:6b:af:49:30:eb:26:12:f5:32:
         86:b6:ee:ee:1b:3e:2e:66:ea:63:74:d8:45:1b:c8:27:0b:0f:
         55:73:b0:cb:0d:fe:73:c7:8a:0b:3f:4f:ea:cd:64:a5:12:73:
         72:55:91:51:af:2d:95:ae:81:1e:0d:23:00:49:30:77:15:56:
         d2:8f:70:23:15:b5:82:8b:54:d2:59:2c:45:c2:ca:77:aa:c1:
         25:1c:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org