Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e38382e302f32312d3234203d3e20323632383035.roa
File:                     3137372e3132382e38382e302f32312d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          YgUw60Q+9JqxWSrxuEFQ0r0Dwha6MJhv3z3mK8h7qFQ=
Subject key identifier:   99:31:FB:E5:2F:5E:08:0F:FF:CD:C1:E4:5F:E3:0B:FD:98:C9:67:9A
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       7E796CBD0481EA1436BE0564E239046F6B7ADD9E
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e38382e302f32312d3234203d3e20323632383035.roa
Signing time:             Wed 03 Apr 2024 22:45:32 +0000
ROA not before:           Wed 03 Apr 2024 22:40:32 +0000
ROA not after:            Wed 02 Apr 2025 22:45:32 +0000
asID:                     262805
IP address blocks:        177.128.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:79:6c:bd:04:81:ea:14:36:be:05:64:e2:39:04:6f:6b:7a:dd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Apr  3 22:40:32 2024 GMT
            Not After : Apr  2 22:45:32 2025 GMT
        Subject: CN=9931FBE52F5E080FFFCDC1E45FE30BFD98C9679A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:36:4b:30:87:b5:93:63:4f:f5:d5:80:28:
                    13:e2:9c:db:a3:b0:8c:05:9b:b5:42:7d:1c:28:48:
                    f1:e7:49:3a:98:2c:71:f9:0c:3f:dc:be:b6:d2:61:
                    a3:d9:26:7b:51:ce:b6:37:29:57:80:cf:9d:18:35:
                    6e:d2:1c:0f:47:00:51:81:56:a1:a8:f6:83:b5:22:
                    15:12:7c:10:25:1b:a6:c0:7a:30:84:e8:92:78:f0:
                    33:42:40:b0:b6:44:2f:0d:ee:43:0a:40:c2:3f:d4:
                    d7:fb:88:29:94:1d:75:e4:dc:e1:95:c0:99:7e:24:
                    2d:a1:5e:53:b6:cc:e1:19:84:39:eb:af:05:6a:70:
                    77:1b:10:65:84:a5:d6:38:d9:80:49:65:ab:2d:11:
                    a8:cd:2f:91:21:ea:69:8b:ef:d2:1e:50:7d:96:97:
                    77:db:b4:03:f4:0e:51:7e:22:ec:19:02:dd:85:26:
                    32:46:b2:0b:43:3e:f4:a2:22:8f:23:21:82:1b:6e:
                    90:93:cc:77:06:6b:ff:9c:e7:cf:67:f5:d8:31:cb:
                    8c:d5:b5:38:58:c1:c4:c3:2c:cd:1a:56:84:cc:fb:
                    8c:50:88:6d:51:8b:8c:93:4b:f6:12:4d:84:03:bc:
                    9b:56:fa:97:4b:de:d0:43:22:cf:90:41:6b:b0:04:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:31:FB:E5:2F:5E:08:0F:FF:CD:C1:E4:5F:E3:0B:FD:98:C9:67:9A
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e38382e302f32312d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:85:99:62:5c:e6:63:40:3e:3d:7e:ea:6c:0e:55:de:4e:
         2d:97:66:f9:d0:0c:d5:62:e3:bc:0e:f3:eb:9f:d4:88:a5:2b:
         38:5d:9a:ce:90:c7:c6:3e:16:3c:f2:64:c4:7c:3a:24:d1:2d:
         49:e2:31:4a:61:d9:66:f4:c1:f3:de:5e:c4:95:a0:b8:5b:e6:
         fb:e4:90:2c:16:be:85:0e:80:57:d3:88:ce:24:5a:23:4c:e3:
         4d:59:d7:a6:5f:fc:f7:22:07:ac:c0:a0:31:35:81:4a:e1:d8:
         6b:72:a7:c2:43:e6:4f:7b:c2:53:0b:ce:08:5b:a1:55:fa:18:
         89:de:7d:12:5a:29:49:5f:e5:c6:93:19:72:5e:0d:60:f8:47:
         71:3a:c2:5c:c3:74:99:bc:4b:0a:c2:12:8d:84:58:95:aa:24:
         63:d6:46:76:74:30:a0:df:fd:03:4b:91:a4:ae:23:88:38:7e:
         ba:1f:f0:2e:92:b9:35:41:40:8f:4e:0a:43:cd:57:f0:18:d2:
         9c:3f:29:12:33:ee:18:ea:d5:60:e3:de:54:e0:28:c1:6f:80:
         1b:0e:bb:b8:97:3a:c2:fc:fa:75:4e:9f:47:70:ed:56:74:5f:
         88:cb:3b:89:45:cd:ab:fd:3c:7f:53:8c:e4:a9:85:99:bd:19:
         01:08:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org