Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          SnXuhn9sA/hoUmo+Tfyk02iPzWydgpYQubZwIOfyNqQ=
Subject key identifier:   DA:CB:53:5D:61:AF:F2:C3:6D:AA:33:FB:41:5B:A9:9F:82:F2:3C:DA
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       4624DDE69227D489AF700A3D090A0F4766C12BF8
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:25 +0000
ROA not before:           Fri 05 Apr 2024 02:31:25 +0000
ROA not after:            Fri 04 Apr 2025 02:36:25 +0000
asID:                     262478
IP address blocks:        177.47.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:dd:e6:92:27:d4:89:af:70:0a:3d:09:0a:0f:47:66:c1:2b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:25 2024 GMT
            Not After : Apr  4 02:36:25 2025 GMT
        Subject: CN=DACB535D61AFF2C36DAA33FB415BA99F82F23CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:d7:61:d8:32:b3:66:9d:76:15:92:ef:07:
                    98:cf:e5:e7:79:9b:d4:ac:37:1e:5e:27:99:41:7e:
                    eb:fc:03:fc:dd:09:fb:69:67:a9:5f:71:91:88:02:
                    d6:03:c9:ce:cb:44:fe:11:73:d7:c6:b3:b2:59:1d:
                    0a:0f:8d:e0:5e:fa:76:36:97:e9:96:1b:51:04:6e:
                    6d:7b:22:75:e1:a5:6d:a8:c5:a2:27:82:78:5e:94:
                    4b:4f:6a:97:ae:48:1a:02:ae:c3:42:38:e8:38:cf:
                    d1:6c:06:6f:d0:31:17:95:97:39:ab:94:c8:a8:91:
                    3a:e3:73:39:24:a5:f1:d6:19:32:f4:b5:af:7a:40:
                    a9:2e:e8:63:31:8a:9d:0c:0a:b7:0a:eb:7e:33:d2:
                    80:1b:0d:7d:bc:76:00:ac:41:26:b2:6f:9b:6e:e8:
                    0c:f1:6e:51:12:18:f3:75:b8:73:ff:a6:e0:aa:54:
                    71:7d:c5:f4:46:cb:fe:a5:57:7d:46:6e:6b:fb:a5:
                    f9:6f:77:3a:05:cd:e8:e3:15:9c:1c:ce:b5:b0:91:
                    51:e5:92:f5:05:a3:13:a3:0f:23:a6:81:e4:c0:87:
                    68:c2:3b:b2:fc:ef:54:d0:58:bd:08:8d:76:aa:92:
                    a3:40:a2:78:c5:23:23:56:32:ca:02:26:47:66:29:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:53:5D:61:AF:F2:C3:6D:AA:33:FB:41:5B:A9:9F:82:F2:3C:DA
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:02:17:d3:9a:0b:74:f3:5e:1c:6e:1b:15:bf:27:02:d2:25:
         ba:61:60:cf:4b:eb:73:0b:c9:de:4f:e3:7d:02:fe:0e:20:57:
         38:3b:1f:35:e2:d9:4f:6d:6f:aa:eb:88:5c:12:04:d5:fa:bd:
         84:89:b5:5e:87:ac:75:45:f0:44:08:fd:eb:06:27:d7:58:98:
         c7:45:9c:b8:a6:22:12:80:57:e4:36:5c:04:65:f5:21:0f:eb:
         c5:0d:f3:0b:cb:3d:90:76:45:5b:12:e9:6c:e0:b7:94:95:06:
         e4:0f:3a:59:e6:f4:3b:12:d5:30:28:60:1a:93:ed:a1:d6:5b:
         09:d0:a3:3c:ad:58:b4:1e:b2:07:4a:c9:c5:d1:85:c7:15:de:
         1e:1e:93:f0:be:11:f5:02:08:22:38:88:42:38:42:9b:e7:fa:
         97:8d:d2:fe:d5:27:dc:4b:e1:a5:de:e5:21:f9:b3:ab:5c:89:
         ff:a7:69:7e:38:44:23:18:46:17:3f:9e:94:17:88:66:e4:3b:
         df:ba:35:75:02:b3:f5:3b:1c:5e:c6:0c:01:88:08:4b:84:b2:
         4d:5e:84:b5:1e:54:d8:02:fb:a6:4d:f3:38:4d:aa:b0:93:eb:
         c3:4c:b7:22:42:4f:ed:7d:7f:58:48:17:ee:95:c5:9c:5f:bc:
         3d:73:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org