Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/3137372e3130342e31362e302f32302d3332203d3e20323632363234.roa
File:                     3137372e3130342e31362e302f32302d3332203d3e20323632363234.roa (raw, json)
Hash identifier:          F/eCzspoa1q8rw6wJxGFslGG4g81kgk1oziIHTT2n/k=
Subject key identifier:   0B:10:2B:74:7C:86:20:7A:88:AE:29:1B:AB:E2:EB:B8:21:A5:00:37
Certificate issuer:       /CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
Certificate serial:       62B007DA3FB086FDEE53840A372B1763075350F3
Authority key identifier: 44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/3137372e3130342e31362e302f32302d3332203d3e20323632363234.roa
Signing time:             Fri 25 Oct 2024 19:17:04 +0000
ROA not before:           Fri 25 Oct 2024 19:12:04 +0000
ROA not after:            Fri 24 Oct 2025 19:17:04 +0000
asID:                     262624
IP address blocks:        177.104.16.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.crl
                          rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:07:da:3f:b0:86:fd:ee:53:84:0a:37:2b:17:63:07:53:50:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418672372D7B89BAF5317B3C66BDA9B0F826423
        Validity
            Not Before: Oct 25 19:12:04 2024 GMT
            Not After : Oct 24 19:17:04 2025 GMT
        Subject: CN=0B102B747C86207A88AE291BABE2EBB821A50037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:6f:9b:15:0b:ad:cf:23:b7:08:51:a4:cb:
                    e2:af:9f:62:cb:91:4d:c5:4f:20:fc:ef:ae:22:97:
                    c6:31:5d:9c:9f:66:d5:9d:2a:fb:35:d6:f3:46:c5:
                    bd:70:70:49:9d:9d:c6:d3:be:28:34:a3:d7:18:27:
                    f5:41:d7:43:33:f1:58:97:77:65:aa:d4:4c:f3:22:
                    fc:3b:7e:a4:56:d8:b4:06:39:26:af:de:2e:d2:5d:
                    2a:70:90:3c:41:a1:bb:0c:72:af:64:15:0a:55:77:
                    72:15:b6:83:33:01:28:78:fa:d6:a1:b0:8d:61:74:
                    75:36:f2:15:c5:97:7c:4c:d6:e3:00:a9:60:25:0d:
                    07:af:7a:88:c4:24:78:70:2d:c1:99:16:d9:c8:e9:
                    cc:60:60:f7:46:b0:a9:06:49:e7:d6:86:d8:f4:a2:
                    70:85:b5:32:0f:8b:3b:a7:b6:bb:66:e7:3a:ea:85:
                    6f:be:e6:c5:b6:4b:18:eb:fd:41:97:64:77:86:bf:
                    c9:2b:c2:b8:63:29:80:74:eb:3c:55:bc:a4:00:12:
                    c6:a5:46:45:80:86:32:cd:41:0a:a9:01:a6:9f:56:
                    e8:4f:63:2b:19:83:dd:0e:c2:a6:9a:8e:24:5b:78:
                    5c:56:06:37:a2:96:b7:e1:76:69:f1:c5:25:03:2f:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:2B:74:7C:86:20:7A:88:AE:29:1B:AB:E2:EB:B8:21:A5:00:37
            X509v3 Authority Key Identifier:
                keyid:44:18:67:23:72:D7:B8:9B:AF:53:17:B3:C6:6B:DA:9B:0F:82:64:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/4418672372D7B89BAF5317B3C66BDA9B0F826423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4418672372D7B89BAF5317B3C66BDA9B0F826423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET8zM9CYvxHjxZHaU3C9LgrSndySL4XbLhgV8N3e9vS4/0/3137372e3130342e31362e302f32302d3332203d3e20323632363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c2:5f:41:f3:72:fa:bd:cf:2e:c9:f5:44:05:ea:10:e9:70:a5:
         c4:13:9f:0a:88:0f:57:ba:4c:ed:18:0e:3f:b7:f4:c7:1d:ab:
         d1:1c:20:87:a9:01:8a:f7:d8:28:ba:ab:7b:a1:85:17:71:63:
         56:65:04:e1:e9:c6:80:01:90:10:5c:c6:ef:ce:62:98:47:88:
         91:99:6d:8a:93:36:52:53:11:f6:b3:16:d2:4e:0b:29:61:fa:
         7c:4e:50:2d:74:f5:96:13:a6:9d:33:4b:01:94:c9:d6:bb:82:
         8f:1c:65:c4:7e:dd:43:16:72:29:80:8d:a4:22:93:bc:ec:3f:
         68:c3:c7:9b:27:2b:ee:ab:6d:c8:50:c6:5b:c3:b3:8c:ce:6e:
         66:c5:65:66:62:d8:89:e0:c8:c5:16:98:11:10:b4:98:e9:58:
         53:9a:12:34:9e:cd:85:3c:d9:9e:b8:43:91:be:7f:46:8a:ea:
         00:7c:6c:8c:9f:4c:48:1d:50:1a:6a:fe:39:54:7d:f9:49:c0:
         88:a6:fa:03:c6:fa:f2:a4:b1:6d:f3:6f:1e:51:79:94:7c:f1:
         91:9e:9b:39:9e:6c:58:3e:9a:a1:56:81:8f:46:cf:93:44:5c:
         20:a4:4b:39:a7:89:03:89:8c:a6:dd:ac:7f:58:ca:37:ce:84:
         2c:93:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org