Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32312d3234203d3e20323632353832.roa
File:                     3137372e38342e39362e302f32312d3234203d3e20323632353832.roa (raw, json)
Hash identifier:          WVWYqq+GMD8kELhPMhEa80a6A+8Flaf5qWOqE5f/wC0=
Subject key identifier:   0D:30:CA:99:CC:72:91:D5:4B:C9:A7:5D:3D:B1:C6:2D:50:C0:4E:12
Certificate issuer:       /CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
Certificate serial:       240701A301F28F798F2B6D0C4295BF8785421D68
Authority key identifier: 10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32312d3234203d3e20323632353832.roa
Signing time:             Fri 30 Aug 2024 11:41:33 +0000
ROA not before:           Fri 30 Aug 2024 11:36:33 +0000
ROA not after:            Fri 29 Aug 2025 11:41:33 +0000
asID:                     262582
IP address blocks:        177.84.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl
                          rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:01:a3:01:f2:8f:79:8f:2b:6d:0c:42:95:bf:87:85:42:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
        Validity
            Not Before: Aug 30 11:36:33 2024 GMT
            Not After : Aug 29 11:41:33 2025 GMT
        Subject: CN=0D30CA99CC7291D54BC9A75D3DB1C62D50C04E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:f9:58:fa:62:3f:10:bc:a4:45:15:2b:00:
                    4c:77:77:11:5d:80:75:5b:b0:a4:d4:9f:6c:30:73:
                    39:86:09:46:51:d1:de:32:e9:86:38:1b:90:af:75:
                    a6:bf:b4:b9:59:ee:11:cf:86:a3:50:0c:10:e6:0c:
                    01:80:6a:b3:38:ed:65:10:6a:89:ec:51:8f:01:be:
                    cd:3b:f5:e2:6e:9e:96:28:60:16:f4:f0:f3:ca:5f:
                    d6:71:50:7c:d1:70:25:e6:13:99:27:13:3e:d8:d8:
                    3a:cd:90:7d:91:f2:da:63:6b:c4:d6:28:f6:3d:de:
                    e4:03:37:1a:c6:65:8a:3e:de:81:21:01:f0:a5:a4:
                    59:d4:9c:88:0a:d1:47:31:1a:04:23:1d:82:9c:61:
                    65:d6:df:58:7a:58:d4:87:ab:d2:46:72:01:b7:33:
                    97:4b:c4:06:6b:11:58:ba:71:5e:c6:ab:75:2d:8a:
                    47:e5:a9:72:f4:d5:b8:42:5a:e4:3e:a2:2a:0c:86:
                    9c:8b:d8:08:13:c2:31:42:47:23:48:e5:a0:1c:4c:
                    ef:fa:f7:8e:06:e5:49:06:76:46:9a:f7:f0:0c:d0:
                    6d:e7:e0:3f:5a:8a:4f:86:3d:68:86:ea:5d:e1:5c:
                    72:6a:db:92:5c:a9:9f:fa:be:5e:f2:1d:d6:70:f0:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:CA:99:CC:72:91:D5:4B:C9:A7:5D:3D:B1:C6:2D:50:C0:4E:12
            X509v3 Authority Key Identifier:
                keyid:10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32312d3234203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:0d:08:6e:f2:cc:60:3f:d9:82:9e:04:7f:ac:52:7b:c4:5c:
         b8:52:57:85:5a:8a:4d:13:ce:cf:e1:d3:6c:68:48:63:c9:d9:
         ad:7f:ba:7b:d3:fb:54:d4:e8:e9:ff:ce:d3:0b:f2:87:1c:40:
         2b:f9:f0:1d:6b:1e:d9:02:68:f0:b5:7a:17:de:81:a0:3a:d0:
         83:c5:34:4a:91:fc:0f:c2:64:6f:c3:92:35:a2:22:a7:e7:b3:
         d0:64:3f:b2:af:10:d2:8f:16:34:02:41:c4:a7:9c:9f:84:31:
         ab:2e:75:59:18:29:78:72:8d:30:e4:d3:d9:2d:27:c4:af:dc:
         a7:37:51:fe:35:c8:54:6e:ca:ae:8c:3d:64:04:13:d2:11:b9:
         64:03:ed:d7:38:91:ef:b3:43:95:35:3f:7b:cf:2b:37:3a:e7:
         1b:d8:b0:df:32:e6:d0:80:83:9e:53:af:9c:68:1a:97:bd:7b:
         60:9d:b6:e2:9d:a1:9f:94:01:31:95:1d:3b:34:11:05:42:3c:
         a5:93:b4:5a:29:8f:dc:94:b4:3f:ac:ee:34:d6:36:4e:de:e7:
         ca:5e:c8:de:2b:6e:5b:77:5d:9a:4f:53:ff:dd:81:45:88:91:
         99:1c:eb:b5:3d:c2:40:70:87:28:4d:70:46:3f:ab:4c:cb:dc:
         0e:44:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org