Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
File:                     3137372e33392e3139362e302f32322d3332203d3e203532373734.roa (raw, json)
Hash identifier:          q2jGyI81gYnPUWekTdbDSNPXWmWAEaIQu0DmpIP59B0=
Subject key identifier:   B5:21:11:A7:E5:0A:A8:63:2F:51:60:5D:71:F8:4A:64:46:CE:53:5E
Certificate issuer:       /CN=B11FBF12F47198D00F06548FAD77699192D03229
Certificate serial:       441FE63C733673C233EBCE0849C0F3467C15CED4
Authority key identifier: B1:1F:BF:12:F4:71:98:D0:0F:06:54:8F:AD:77:69:91:92:D0:32:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
Signing time:             Mon 29 Apr 2024 18:00:17 +0000
ROA not before:           Mon 29 Apr 2024 17:55:17 +0000
ROA not after:            Mon 28 Apr 2025 18:00:17 +0000
asID:                     52774
IP address blocks:        177.39.196.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.crl
                          rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1f:e6:3c:73:36:73:c2:33:eb:ce:08:49:c0:f3:46:7c:15:ce:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11FBF12F47198D00F06548FAD77699192D03229
        Validity
            Not Before: Apr 29 17:55:17 2024 GMT
            Not After : Apr 28 18:00:17 2025 GMT
        Subject: CN=B52111A7E50AA8632F51605D71F84A6446CE535E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:5a:3a:26:6f:cf:a5:3c:34:49:1c:04:ed:
                    ad:8d:c6:d4:f4:a2:c2:61:dd:20:17:69:6d:17:2c:
                    c1:31:47:81:48:07:0a:b4:e4:4d:a9:9f:d0:b5:49:
                    2d:b4:68:fb:a3:40:7e:00:d2:16:93:66:f8:73:26:
                    5d:0c:ce:84:98:ab:11:95:41:bf:99:97:a3:10:7b:
                    76:1b:7f:33:04:20:a1:01:9b:6a:f8:d5:b6:44:23:
                    40:46:cc:93:a6:b2:3e:e8:16:42:f4:1d:38:0d:d5:
                    cb:1e:cc:d5:36:39:e2:96:1e:d7:25:a9:9e:8e:cd:
                    be:69:2b:6e:c1:c1:07:59:c0:78:be:1a:6d:d2:0c:
                    86:df:0e:25:ad:ac:aa:c2:e0:b0:a0:1e:9a:34:c0:
                    73:00:d9:67:cd:09:84:2f:c9:fe:2b:59:06:d5:6e:
                    c5:33:39:63:bd:fe:b9:8b:b1:75:06:16:2b:7b:70:
                    1c:e9:de:ab:b8:c7:63:99:22:81:0e:e6:53:7a:77:
                    a5:8c:69:81:5d:7d:52:ff:56:e7:35:45:95:44:64:
                    a4:e4:53:21:71:08:57:33:8b:60:6e:c9:57:f4:4f:
                    25:f0:5b:84:9b:31:37:3b:3a:92:56:5f:95:ea:a3:
                    75:b3:95:f5:3a:ff:a5:a0:b5:bc:f2:da:94:07:9c:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:11:A7:E5:0A:A8:63:2F:51:60:5D:71:F8:4A:64:46:CE:53:5E
            X509v3 Authority Key Identifier:
                keyid:B1:1F:BF:12:F4:71:98:D0:0F:06:54:8F:AD:77:69:91:92:D0:32:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:e1:3e:7f:b4:80:b9:62:c2:3a:b2:44:a2:ed:b3:3e:11:
         13:60:98:38:7a:9d:6a:cb:65:ce:e3:27:df:86:ce:84:3e:ac:
         94:a4:8f:ce:8d:5a:09:b5:77:0f:bf:5b:db:9f:bf:ab:7b:7b:
         0b:c7:ca:e0:dc:01:56:4a:e2:c6:94:d5:2f:45:74:fd:83:37:
         85:3a:a9:9e:1d:98:eb:b1:aa:f2:f6:73:9e:32:e3:fa:57:33:
         20:0e:c0:f1:e9:18:72:8f:bc:4a:da:72:59:bd:47:9b:b3:7f:
         7d:e3:e1:81:50:fa:1b:d1:f9:43:86:a1:20:71:15:8c:e9:35:
         3f:57:cd:c8:45:48:52:7c:13:19:c5:6f:a1:f3:92:d8:a4:fa:
         ff:37:97:f4:60:01:b6:ce:2d:40:e8:78:a6:cf:c1:2c:65:21:
         aa:d8:a8:36:42:3c:55:8b:5f:a6:a9:7c:ae:3d:7e:10:12:1e:
         ce:c0:46:0f:2a:8b:7b:eb:44:bb:2d:dc:cc:97:8f:93:91:d1:
         41:0d:82:51:2d:29:8b:ad:09:d1:67:6d:fd:22:93:cb:fa:8b:
         30:20:db:2f:14:3a:e8:f1:57:79:80:48:58:a0:0a:1a:48:0c:
         dc:c9:71:8f:ec:4d:41:19:4d:25:5f:30:0a:cb:6a:2d:05:67:
         c9:3e:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org