Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32322d3232203d3e20323632383238.roa
File:                     3137372e3135352e3139362e302f32322d3232203d3e20323632383238.roa (raw, json)
Hash identifier:          14tYBMJgrsO7H8UtIRDyUH9tBKXre0tOE6wKTuCHL/0=
Subject key identifier:   21:38:FB:92:7A:0D:F9:9C:F9:F9:B0:B2:5E:BF:3B:E8:77:0C:A1:09
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       13AD994217D83ED904DB058E06C159ED88A28B27
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32322d3232203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:13:51 +0000
ROA not before:           Tue 03 Sep 2024 20:08:51 +0000
ROA not after:            Tue 02 Sep 2025 20:13:51 +0000
asID:                     262828
IP address blocks:        177.155.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:99:42:17:d8:3e:d9:04:db:05:8e:06:c1:59:ed:88:a2:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:08:51 2024 GMT
            Not After : Sep  2 20:13:51 2025 GMT
        Subject: CN=2138FB927A0DF99CF9F9B0B25EBF3BE8770CA109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:a5:dc:75:79:d5:77:4a:39:cc:9f:6f:80:
                    a4:44:7e:9c:61:ed:83:a8:29:79:ac:70:e0:ae:99:
                    a4:fb:df:1d:f7:b5:8f:4f:93:a1:cb:67:1f:c2:ff:
                    db:fa:63:18:b4:a8:1b:41:8f:57:ed:08:47:9d:2b:
                    5b:ac:09:d2:73:b6:f5:49:3a:02:27:b3:2c:f6:02:
                    4b:21:26:61:f9:86:bd:5a:37:97:55:df:75:ae:15:
                    f4:73:99:7a:ec:77:3b:c3:7b:b8:8b:57:e3:c7:6d:
                    46:8c:bf:3f:74:aa:28:06:ad:4e:2f:75:64:dc:0f:
                    3a:8c:85:82:78:ee:3f:af:31:de:c4:ba:df:2a:17:
                    2b:cf:37:0f:d2:91:e1:76:56:e6:f6:a8:24:af:3d:
                    3b:67:f7:28:c7:26:d4:dd:31:db:b1:c5:2f:2e:03:
                    50:e6:ce:fd:c1:46:5f:2e:32:c4:05:b9:e1:a7:02:
                    29:6d:88:81:3f:85:e2:89:fe:a8:90:b1:ca:88:c6:
                    16:3e:ce:67:62:2a:c1:aa:44:34:5a:bc:ed:b6:be:
                    53:0a:ac:f1:84:05:fa:f9:59:84:65:f2:b3:0d:17:
                    b4:53:f9:ac:26:d5:36:7d:cb:07:a5:c3:68:0d:a9:
                    00:f5:f6:28:6d:88:c3:10:a1:24:3d:e5:59:d3:9e:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:FB:92:7A:0D:F9:9C:F9:F9:B0:B2:5E:BF:3B:E8:77:0C:A1:09
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32322d3232203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:12:92:0c:32:9c:87:5c:3e:a9:b1:8c:03:f6:b7:1c:2a:09:
         2b:a1:f0:34:8b:90:64:c4:2e:53:fa:5c:4b:23:15:84:cb:b4:
         a7:f1:eb:df:72:33:d5:15:86:91:56:57:89:c2:3d:d1:87:72:
         72:7f:73:b5:05:95:a0:dc:71:4c:87:1c:05:be:73:de:2a:e4:
         b7:82:78:af:c5:fd:2d:29:7b:39:04:c4:f5:e4:bf:80:6c:4d:
         b7:24:4a:ec:0b:db:3d:7d:b4:3e:d4:1c:ca:68:b6:7d:9d:13:
         9e:77:c9:9f:ae:02:af:24:2d:96:53:a3:69:ac:b6:e8:88:b3:
         74:34:2f:6f:e4:3d:e7:c6:96:03:dc:93:eb:0e:db:f0:a9:53:
         3e:86:11:b3:7e:2e:2a:38:d1:eb:00:0e:15:f8:6b:0f:d0:00:
         49:b8:86:07:f5:9e:69:c7:9c:a8:dd:e6:20:1e:bf:33:05:27:
         2e:18:91:d4:43:cb:14:b1:08:02:c8:b8:01:b5:de:39:4b:ec:
         28:2c:60:d0:bf:67:64:f6:3e:aa:b1:10:7a:da:1e:5e:48:61:
         c7:15:ad:04:b5:8d:d1:0e:18:4b:17:e0:b0:a7:9c:89:28:75:
         a8:f2:15:e1:2f:b2:0a:5e:16:6a:6a:89:bd:fd:07:e0:85:7d:
         e5:ea:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org