Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          vnFShiLkLFnMM0eJj4slOKwebByBrOVxsNmTgiCrTcg=
Subject key identifier:   34:B3:42:0F:47:84:0A:80:26:EC:0E:E6:2F:04:6E:8B:BA:F7:57:E6
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       69826CD1910EFA2470704BEC002C3432B04C3C7C
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:26 +0000
ROA not before:           Fri 05 Apr 2024 02:31:26 +0000
ROA not after:            Fri 04 Apr 2025 02:36:26 +0000
asID:                     262478
IP address blocks:        177.47.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:82:6c:d1:91:0e:fa:24:70:70:4b:ec:00:2c:34:32:b0:4c:3c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:26 2024 GMT
            Not After : Apr  4 02:36:26 2025 GMT
        Subject: CN=34B3420F47840A8026EC0EE62F046E8BBAF757E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:6f:3d:ca:f8:78:2f:1b:e8:39:0b:4a:82:
                    44:52:40:14:eb:e7:be:32:af:ff:5c:c4:4f:5e:6b:
                    ba:ef:0f:97:f0:18:0e:0d:af:25:a9:da:fa:ab:36:
                    07:4d:e6:62:ca:6e:5b:67:5d:27:5b:47:33:25:eb:
                    1b:80:f0:55:45:41:ff:d6:d1:dd:c3:d3:52:70:d6:
                    9e:0d:58:dc:a4:59:b4:62:16:9e:6d:36:f2:a9:d9:
                    47:98:13:4e:ac:25:df:9a:3d:25:6b:ac:35:cc:49:
                    4f:cf:59:dc:e9:21:15:62:57:07:26:9a:d9:bc:a5:
                    6a:7e:78:66:4f:c7:2c:87:b5:63:f6:2d:62:28:6a:
                    04:ab:02:0c:9a:d3:6f:9e:c3:67:7e:4e:52:d8:ea:
                    cb:94:d0:77:dd:c7:29:36:9f:60:b3:60:a5:17:86:
                    2c:56:a2:72:4f:4a:b2:38:c5:e0:fc:cb:20:ea:a9:
                    56:ee:61:1e:09:9c:cd:01:e4:ac:3e:e1:ba:9b:93:
                    25:ff:60:c2:43:57:5a:a4:10:b1:d6:4a:82:3c:39:
                    98:67:3e:ef:0c:f8:31:4b:d2:bb:ca:2e:92:26:49:
                    59:3c:6a:f1:2e:5f:ea:db:34:2d:8d:63:0f:f4:8a:
                    1b:10:60:0b:f9:19:8c:be:9a:65:8c:60:ca:fc:cc:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:42:0F:47:84:0A:80:26:EC:0E:E6:2F:04:6E:8B:BA:F7:57:E6
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:71:2f:ef:94:63:6e:74:f9:c0:33:39:c0:03:48:75:11:
         0c:53:40:2c:7d:a7:d9:e6:d9:44:bb:e0:f0:83:3a:d5:ea:d8:
         97:5b:1f:b1:9f:4c:80:2e:7c:c4:d3:b9:82:4a:2d:57:ff:66:
         d9:35:9c:ac:d2:27:e6:7b:97:1c:43:59:cf:11:96:03:cb:2f:
         6a:a4:41:9c:47:51:db:b8:a2:11:5d:5d:76:ba:a8:f0:f0:1f:
         76:3c:e2:bd:ac:be:28:ba:e7:a6:18:5b:97:c7:0b:2e:8b:a2:
         7a:b4:56:ab:8f:98:37:c7:d7:6f:73:c3:03:5b:64:5d:d5:50:
         ee:f0:9b:d1:a1:8c:11:f0:6a:b5:5f:c1:d9:cd:80:3d:50:db:
         45:bd:8e:34:8b:ec:9e:3b:e1:08:7d:18:1c:33:d1:83:ab:fa:
         74:49:16:a4:eb:3a:f3:28:b4:67:1a:6b:2c:a7:81:2d:00:43:
         51:89:bc:83:f6:e2:8a:0a:db:37:2d:f2:7c:be:9b:83:96:fa:
         e2:29:7c:ff:b3:f7:d1:89:05:ed:d2:22:ed:9f:ee:2f:ab:6a:
         a4:24:cc:ba:fb:b9:f6:cf:b9:64:1d:8d:ec:c1:d7:69:58:5d:
         0f:45:6c:ad:fe:46:65:f5:7e:1b:db:19:ff:2d:c1:9e:34:cc:
         66:4a:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org