Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa
File:                     3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          7QQajZd/Fkwn1dX2JqyWhdw6kAs36DQ6FOWvAY47DGk=
Subject key identifier:   62:BF:FC:5D:29:90:11:70:B5:49:29:D0:84:7B:AD:6F:13:CC:21:2D
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       6A9C392E80A7504738C9905A4FE81D6A2CDD7163
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:26 +0000
ROA not before:           Thu 04 Apr 2024 01:33:26 +0000
ROA not after:            Thu 03 Apr 2025 01:38:26 +0000
asID:                     263661
IP address blocks:        177.221.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9c:39:2e:80:a7:50:47:38:c9:90:5a:4f:e8:1d:6a:2c:dd:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:26 2024 GMT
            Not After : Apr  3 01:38:26 2025 GMT
        Subject: CN=62BFFC5D29901170B54929D0847BAD6F13CC212D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:b9:7c:8c:80:4b:a9:f3:b5:d5:0a:33:5a:
                    e8:85:d4:3f:3b:84:03:53:48:79:09:6b:60:e6:a0:
                    0e:6a:f7:ac:9a:3d:92:5f:e8:06:a0:44:9c:6a:22:
                    33:9b:18:e5:22:b1:8f:f3:ce:b9:cf:32:e5:82:04:
                    ae:21:8c:24:7f:6a:d7:8b:4c:29:68:8a:71:a6:df:
                    54:19:80:8f:a6:1f:55:4f:2a:d9:d9:2e:b5:61:d0:
                    53:a1:8f:54:42:e0:da:25:e0:83:08:23:eb:d4:3e:
                    f5:72:67:6f:db:b1:46:a1:de:7f:9d:d8:d1:7f:aa:
                    05:11:08:dd:6c:e8:79:49:16:24:d2:f1:c7:1a:2c:
                    ca:85:b6:87:ed:a6:05:1c:76:54:f3:41:93:62:53:
                    a1:a4:2a:b3:41:3a:26:45:98:d4:ef:5e:dd:a0:b6:
                    30:1a:c5:c2:ed:a2:13:92:7a:8c:68:f6:b8:50:06:
                    fe:90:99:10:df:a3:44:f9:f6:d5:44:9b:99:ea:eb:
                    40:0f:ef:5c:77:68:b9:27:1e:31:a5:42:8f:44:5d:
                    85:66:0f:ae:b1:4a:07:1f:d2:18:5a:85:d7:3e:f5:
                    40:b7:3e:95:60:6a:45:48:62:3b:9f:85:08:dd:39:
                    12:c7:89:83:d8:0e:8c:31:c2:c7:0d:59:ed:f7:0b:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:FC:5D:29:90:11:70:B5:49:29:D0:84:7B:AD:6F:13:CC:21:2D
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:e7:24:11:c0:55:c7:5e:70:8f:21:2b:d3:78:a9:b4:6c:
         9e:b6:5d:74:2e:08:96:ed:24:d4:f6:3f:9b:fc:d5:ed:d4:44:
         37:d2:27:9d:fb:9a:37:5b:a9:4e:7c:29:52:90:39:08:fb:aa:
         da:94:a7:44:c0:0b:d5:08:6b:a3:2c:1a:00:16:c8:48:b3:3a:
         b5:96:1a:9f:fe:de:45:ea:91:3d:29:8a:3e:e2:95:af:8b:6f:
         c9:4a:d9:47:de:eb:31:ae:ff:5d:e3:b5:b0:8f:70:de:20:d0:
         77:48:c9:5d:a1:34:e7:05:86:c9:11:8f:54:f9:66:26:93:be:
         78:94:5f:ee:1f:f6:57:80:67:ce:14:d4:93:53:98:1a:9e:12:
         19:13:d7:96:17:4d:4c:00:8f:7c:c5:4b:42:f5:7a:b5:ad:17:
         d1:eb:28:f0:39:25:63:51:72:05:b3:28:2c:5f:cc:7c:c4:0c:
         2d:74:0f:08:9b:53:3f:24:4e:8f:bf:8d:8d:06:4c:3b:c0:5a:
         65:1b:fa:07:8d:c7:a5:d7:39:5b:79:7d:47:01:ff:13:5b:55:
         a1:c4:13:a4:5b:5a:e5:02:d1:86:8d:ba:1b:ae:eb:4a:b5:a3:
         04:cc:78:fe:41:8b:86:c4:9f:71:7f:74:97:5d:ec:a5:7d:bc:
         63:b8:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:27 2024 by rpki-client on console-fra.rpki-client.org