Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32342d3234203d3e20323633363631.roa
File:                     3137372e3232312e35382e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          WlNxRzu8yr7phab1OGDw9DLUebvzaAYaOyte+iogoas=
Subject key identifier:   A2:2E:8E:16:5A:9E:33:8E:50:20:3E:53:05:4C:4F:D7:9E:3D:CF:80
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       2C22F10A5F8AB99D47A45A439CC9DF5A47F75018
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:29 +0000
ROA not before:           Thu 04 Apr 2024 01:33:29 +0000
ROA not after:            Thu 03 Apr 2025 01:38:29 +0000
asID:                     263661
IP address blocks:        177.221.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:22:f1:0a:5f:8a:b9:9d:47:a4:5a:43:9c:c9:df:5a:47:f7:50:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:29 2024 GMT
            Not After : Apr  3 01:38:29 2025 GMT
        Subject: CN=A22E8E165A9E338E50203E53054C4FD79E3DCF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:53:5c:42:cc:3c:69:e2:17:f5:98:99:2a:
                    94:d1:06:69:36:24:1f:e5:b9:ea:9b:e1:b0:26:ad:
                    07:d4:bf:92:1b:93:e3:77:67:5a:f1:17:c9:f8:0d:
                    67:6b:2f:45:9c:2d:8a:81:64:46:dd:6b:50:b3:38:
                    d2:d4:dd:61:32:e4:f2:3a:bf:c4:07:6e:bb:12:91:
                    9f:d0:65:5a:59:d2:30:fe:5b:c8:8a:65:01:59:86:
                    ce:54:33:cd:26:04:cc:4e:ad:f9:b3:6e:0b:5a:20:
                    19:08:b1:68:82:c7:a6:c4:95:a0:4a:dd:4f:f8:7b:
                    22:9a:7f:48:56:04:cc:1e:8a:38:d9:1c:8e:ef:5c:
                    09:25:e3:d9:b3:b5:7e:5a:fd:f5:66:67:1c:78:a4:
                    07:a8:37:94:e4:32:57:f8:74:51:bb:57:4e:4e:a3:
                    60:6f:86:72:59:c2:14:a7:b4:bc:f8:63:09:45:3a:
                    92:ee:8c:c2:db:11:bd:fd:3d:53:ff:34:3e:e6:16:
                    31:90:53:f2:e1:d0:b7:b8:0c:4a:b9:3f:d1:a1:93:
                    96:94:38:52:97:63:86:58:df:3b:17:0d:21:e2:ac:
                    01:60:4c:a8:2a:cc:3b:a5:9f:86:31:71:97:d1:b4:
                    e8:26:95:01:68:47:7c:a3:6b:a9:ee:f0:f5:b8:90:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:8E:16:5A:9E:33:8E:50:20:3E:53:05:4C:4F:D7:9E:3D:CF:80
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35382e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:50:4d:2a:16:35:f0:b3:da:98:33:51:4b:55:e8:0a:ff:
         79:a1:31:7c:bf:d9:72:8b:73:55:64:fd:a5:f0:38:87:35:8e:
         d6:4b:a2:c5:a5:b1:48:96:f5:fb:81:0a:24:35:07:9f:f5:cd:
         af:ff:93:4e:c2:ee:92:6a:42:86:af:76:52:9d:3d:65:e4:c3:
         73:a5:fc:cf:5a:2b:63:b3:f7:20:79:69:d9:36:db:6f:4d:76:
         80:fe:ee:5d:fa:b0:94:d3:ac:1d:83:02:7f:ea:f0:e9:ed:9a:
         54:71:fb:a5:c2:54:f4:2b:65:94:e9:48:97:87:ad:d5:e3:b7:
         f3:a4:93:91:d6:13:d4:af:ce:c5:e2:fc:b5:db:96:34:67:21:
         e6:ad:19:af:ea:22:14:3f:60:cf:15:85:8a:a1:5e:d5:bb:85:
         a3:3f:ff:29:4b:27:ae:c3:9c:9e:57:40:e8:5e:1e:e2:2b:6a:
         7a:21:ce:82:18:38:11:14:c6:7e:00:66:75:82:1f:d5:3a:b2:
         1e:21:ee:84:b6:0e:cb:fc:f8:b8:7b:0f:e8:3b:20:c7:89:32:
         b7:86:ee:36:e1:70:5f:07:8a:d1:fb:10:1d:ae:f3:8f:e3:6c:
         c9:3b:ae:10:19:1f:99:e0:a2:0f:62:9a:e1:3d:da:de:86:ed:
         3d:ac:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org