Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          Ka6xfn/3V9t4yQ3XuV92gwVn4sS9VkroU/cO5gSlWxo=
Subject key identifier:   1F:71:10:C3:A6:5E:E1:B3:9A:44:7E:F5:62:76:04:18:33:49:6E:C9
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       4616962E19D9A24BA56FC9079D007BA50F14D01B
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa
Signing time:             Sun 09 Jun 2024 11:35:14 +0000
ROA not before:           Sun 09 Jun 2024 11:30:14 +0000
ROA not after:            Sun 08 Jun 2025 11:35:14 +0000
asID:                     262478
IP address blocks:        177.47.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:96:2e:19:d9:a2:4b:a5:6f:c9:07:9d:00:7b:a5:0f:14:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Jun  9 11:30:14 2024 GMT
            Not After : Jun  8 11:35:14 2025 GMT
        Subject: CN=1F7110C3A65EE1B39A447EF56276041833496EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:b1:82:89:39:5d:fe:d2:14:ff:2d:f0:f4:
                    6e:38:bd:0f:e2:1c:1b:35:51:90:51:13:fd:d4:ea:
                    1a:bf:60:f7:92:c1:8c:88:62:f5:0b:4a:cd:78:2a:
                    91:f5:54:d6:e0:80:09:8b:fd:08:ae:cf:bb:27:45:
                    fd:00:4b:e6:aa:df:f2:3f:ed:07:fe:45:9b:a1:02:
                    4f:73:94:d1:25:e7:fd:59:bd:38:02:96:68:a5:69:
                    f3:ff:a3:2f:74:ac:38:f8:cd:98:c7:c7:59:7c:ad:
                    4c:a9:c0:82:2a:05:c0:71:ee:44:c0:c0:8a:4a:2b:
                    b8:fc:21:0b:49:92:00:9b:2c:75:fd:b3:c8:44:9e:
                    5d:70:43:bd:f3:53:68:e8:27:e5:72:c5:4f:e1:d3:
                    00:c2:61:46:9b:25:fd:37:65:6c:69:0c:ac:d2:97:
                    7c:c3:20:e9:2d:76:bf:c4:05:99:f9:77:30:9f:cc:
                    40:78:8a:9d:96:ed:59:99:d2:a2:c8:5c:91:72:cf:
                    39:53:ce:b5:b3:5d:de:87:e9:c1:88:a5:73:a8:2d:
                    6a:59:54:ed:b0:df:e0:19:99:e0:1d:fd:ac:14:fa:
                    19:5b:59:62:cb:79:07:89:2c:c3:6c:b4:5b:9e:0b:
                    00:f3:1c:4e:10:ee:c0:e1:51:b8:6a:73:0b:34:9f:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:10:C3:A6:5E:E1:B3:9A:44:7E:F5:62:76:04:18:33:49:6E:C9
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:08:67:f1:f1:85:3e:30:2e:fe:99:ff:ad:99:da:9c:17:
         0f:d4:ac:c0:9e:6c:ed:e5:05:5d:63:25:2c:90:eb:f7:ac:09:
         06:9b:3f:d6:ab:e7:07:6a:f7:47:57:e0:47:ef:c0:24:5e:89:
         17:0f:dd:30:39:09:73:f2:2f:2b:69:ca:ed:3a:32:78:cc:7b:
         eb:cb:ef:c1:7f:13:28:d2:a6:75:ee:2d:29:88:74:3c:ae:c6:
         3a:82:0c:e6:22:1a:e4:5f:4a:c8:d6:90:6d:79:2d:e8:c5:ba:
         c0:e1:3c:e5:35:ee:ed:7f:f4:4f:77:6d:ec:50:b5:6d:58:fe:
         b0:65:30:9e:7c:18:8d:63:ca:21:af:78:49:77:01:bb:89:0e:
         a8:be:a7:d0:fc:eb:2d:40:9c:69:5e:51:81:d6:6e:24:bb:f6:
         ae:81:39:94:b2:3a:92:4d:f6:7f:df:04:c8:34:db:8e:a5:86:
         2d:ba:40:7d:a5:b6:79:b8:ae:48:73:4f:a8:01:81:96:1d:15:
         ba:a1:f4:78:ac:6e:70:2c:e0:d2:b5:46:7d:eb:f3:88:ef:bd:
         c7:46:a0:7a:5d:8b:c3:e5:b2:0b:d0:af:54:0c:2a:64:0e:77:
         8f:53:fe:d6:1f:b0:cd:62:6c:ea:98:8b:40:bf:d7:c7:c3:5a:
         3c:b2:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:19 2024 by rpki-client on console-ams.rpki-client.org