Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          f/GGefzlAFWM7Q3Ubm0ZblohHOaQY/u2DlnD+RsTCGE=
Subject key identifier:   41:78:B0:BC:B0:5A:DC:EE:9D:E8:FA:BF:86:54:26:BD:11:C5:57:08
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       52AF6C8F9542C2A0DF8F3DF944EF9B7E64B7695B
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:23 +0000
ROA not before:           Fri 05 Apr 2024 02:31:23 +0000
ROA not after:            Fri 04 Apr 2025 02:36:23 +0000
asID:                     262478
IP address blocks:        177.47.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:af:6c:8f:95:42:c2:a0:df:8f:3d:f9:44:ef:9b:7e:64:b7:69:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:23 2024 GMT
            Not After : Apr  4 02:36:23 2025 GMT
        Subject: CN=4178B0BCB05ADCEE9DE8FABF865426BD11C55708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:e0:99:19:e0:af:4a:20:81:82:35:d3:8f:
                    a7:b9:a0:83:71:84:a4:bc:f5:7d:39:63:70:ce:bd:
                    bb:7f:1b:20:62:ed:39:13:45:c1:9f:90:0e:dd:86:
                    6e:d5:89:e2:01:b5:77:4d:8a:de:de:1a:f9:f6:7e:
                    69:02:f3:ca:8a:a2:4d:c8:2e:bc:0d:ce:82:27:d2:
                    81:4c:0e:b3:80:99:c8:53:14:37:4f:12:45:1c:4c:
                    3b:95:00:c3:85:20:ed:22:56:3a:ee:f5:34:a0:61:
                    00:dc:b9:10:ff:3b:db:bd:f1:d5:a3:cd:fa:c3:87:
                    9f:c4:31:ee:04:6e:25:8f:bd:11:52:2c:dd:b5:5c:
                    97:58:bf:51:ef:19:60:48:1a:82:ba:87:0e:4b:f5:
                    37:7d:5c:a9:94:8c:e2:fe:62:67:a3:f1:03:ce:09:
                    75:ba:c6:86:9f:e8:d9:38:a0:5f:58:3b:de:ef:97:
                    b6:ea:6a:93:56:06:3f:d3:74:9a:9c:f4:3d:10:b0:
                    4a:77:49:7f:45:ac:f6:d4:3e:f1:68:5f:f0:b4:dd:
                    0e:0b:d1:b5:1d:5f:ff:fb:65:b9:03:a6:e8:a7:00:
                    63:7e:b9:da:e2:d4:27:91:98:f2:27:01:f0:8e:53:
                    b3:e8:69:63:7b:98:f0:20:11:76:de:20:94:09:d6:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:B0:BC:B0:5A:DC:EE:9D:E8:FA:BF:86:54:26:BD:11:C5:57:08
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:14:c0:a1:2c:08:13:8a:35:de:4c:83:f4:99:50:e6:78:
         5c:d3:a3:4e:06:5a:99:5d:48:39:a9:0a:15:a1:c9:7b:29:ce:
         f6:95:7f:da:2d:d9:4e:2e:d7:2a:c9:53:03:f3:5d:e1:87:93:
         cf:53:90:30:19:2d:33:e1:c3:ff:41:85:35:22:df:60:03:9c:
         6d:7c:a9:8b:83:88:2a:be:02:13:4d:f5:ee:60:64:55:35:12:
         7a:c7:27:b0:6d:8b:44:c1:ff:b3:c4:e9:eb:3e:81:05:96:d6:
         39:32:ca:27:a7:7e:e1:49:e5:90:7f:70:74:2a:4e:48:fa:a1:
         6a:6c:06:06:f7:9c:82:95:95:e4:ba:ce:a3:11:15:7a:3e:e5:
         8f:19:24:14:bc:e3:f5:7c:87:9b:f1:d6:5e:cb:41:55:80:3b:
         4c:c3:14:a0:e3:83:a1:63:4c:35:f2:23:73:ea:6b:53:60:83:
         40:82:d1:b7:53:cb:1c:90:de:8a:14:89:55:f9:95:a7:5e:a8:
         50:55:9e:34:15:fe:17:37:75:81:ec:61:fe:0b:b7:5c:0c:e5:
         11:2c:83:89:82:81:a7:e0:8f:94:86:1d:d3:53:70:83:f1:a5:
         71:08:9e:5a:a7:10:02:21:93:ef:a3:52:99:14:84:ab:d6:e6:
         d5:8d:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org