Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          vLu55RDwOJryV6/m671YgvVNuLYTQ9YtYM38wHbBqeM=
Subject key identifier:   14:2E:13:5D:53:08:D3:FC:90:68:36:E9:6A:22:2C:7C:70:51:53:25
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       79A60B67F54E1B8F9E4DDB7E3AEC8F75C7C8A9C9
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:25 +0000
ROA not before:           Fri 05 Apr 2024 02:31:25 +0000
ROA not after:            Fri 04 Apr 2025 02:36:25 +0000
asID:                     262478
IP address blocks:        177.47.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a6:0b:67:f5:4e:1b:8f:9e:4d:db:7e:3a:ec:8f:75:c7:c8:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:25 2024 GMT
            Not After : Apr  4 02:36:25 2025 GMT
        Subject: CN=142E135D5308D3FC906836E96A222C7C70515325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:da:7d:1b:b6:c3:76:5e:2d:7a:32:11:1f:97:
                    e8:fb:2f:de:62:a0:5f:15:d3:3f:a7:6f:d7:8c:14:
                    00:a1:35:8a:70:47:13:b4:4e:0a:a5:91:06:a3:84:
                    17:f2:48:24:0e:a4:de:ba:22:31:c3:c0:d7:64:19:
                    1b:fe:5d:fc:98:4d:28:7a:98:91:4f:c6:18:35:5b:
                    a3:f2:b7:f7:5b:a3:da:59:d7:7f:4c:9d:a8:3f:51:
                    f1:a2:3f:da:9a:ec:e8:d6:6a:cc:bb:fe:2a:73:ba:
                    15:66:87:8c:3d:d5:e2:ce:ae:dc:c1:be:c0:1b:4e:
                    f7:84:07:24:41:5d:4d:ff:dd:d2:f7:2d:7a:78:d6:
                    c4:0a:59:a9:a3:f0:a2:86:e4:15:a0:a3:68:a2:9e:
                    0e:70:89:2d:d4:bb:7a:6c:14:bb:06:58:a3:4b:ff:
                    08:21:b7:d3:42:24:4e:19:41:9d:67:3f:5e:07:63:
                    3f:ec:9b:a1:5d:8d:6c:ae:0f:2b:b4:91:8b:48:3c:
                    3d:7b:db:69:5f:fb:8f:19:07:d7:36:63:20:a7:24:
                    2b:92:a9:85:43:eb:0f:41:55:08:cc:1b:5e:68:d9:
                    d4:93:f7:b5:c1:af:09:68:79:1b:79:db:37:73:be:
                    10:bb:e3:69:db:01:4c:a2:99:9e:eb:c8:d4:b8:f0:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:13:5D:53:08:D3:FC:90:68:36:E9:6A:22:2C:7C:70:51:53:25
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:58:bb:49:a7:f6:49:5a:8f:10:e1:b1:1f:e8:c1:be:64:
         85:14:f5:f4:9a:5f:7d:1a:58:a0:fa:58:76:9f:85:88:d0:27:
         a5:84:a4:48:51:59:70:f0:d5:4a:c8:42:a0:3f:23:f4:cd:67:
         75:58:32:41:0e:87:4d:d5:66:60:8f:57:1f:db:07:17:98:6c:
         2d:66:ae:fd:1b:ea:fb:6c:b2:7a:78:15:ea:8f:38:54:7c:fc:
         6f:19:1c:ba:14:ef:24:fa:d9:42:7c:dc:ec:4e:b6:96:7e:0e:
         75:b4:73:4f:37:98:1c:78:81:7c:22:e1:d4:f8:14:9f:df:54:
         67:f6:3c:4a:93:da:67:b1:7a:65:78:79:d6:96:c0:a8:fa:c7:
         b9:2a:f6:dc:2c:d2:c6:17:0b:32:17:c9:74:fe:8a:ce:98:7b:
         73:c0:ee:ba:91:9b:2a:11:27:d3:57:c9:b5:99:69:e9:f0:05:
         d6:ec:ce:10:bc:d1:f1:61:e6:60:0c:d4:99:e9:70:2f:f9:5b:
         f7:ce:b0:7f:63:a9:79:a5:8d:00:e1:58:5c:e4:4a:c3:4f:6e:
         a0:de:93:48:86:5c:de:35:64:45:63:04:30:32:4c:e7:8f:ba:
         70:6f:6a:42:24:15:0d:de:fe:e0:fe:cc:19:ce:e8:4b:db:7d:
         f2:dc:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org