Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
File:                     3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          tXHsxz7tAZC3y2RpTkqsLmy+UScXR6kvNeqCltX2ja0=
Subject key identifier:   AA:D8:D3:43:84:33:6F:CD:78:22:13:5E:87:2A:2F:FB:81:48:5D:06
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       32E6CCF2C2351C79B97225696120B95BD8C32AF0
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
Signing time:             Tue 12 Nov 2024 18:01:20 +0000
ROA not before:           Tue 12 Nov 2024 17:56:20 +0000
ROA not after:            Tue 11 Nov 2025 18:01:20 +0000
asID:                     262369
IP address blocks:        177.130.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e6:cc:f2:c2:35:1c:79:b9:72:25:69:61:20:b9:5b:d8:c3:2a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Nov 12 17:56:20 2024 GMT
            Not After : Nov 11 18:01:20 2025 GMT
        Subject: CN=AAD8D34384336FCD7822135E872A2FFB81485D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:3e:2c:6b:df:4c:6a:ba:da:f5:de:d0:35:
                    35:b5:93:4e:79:f2:e6:1f:f4:dd:1c:a0:2e:b6:35:
                    65:79:ef:c5:41:86:5b:2c:83:44:e4:4b:05:3b:75:
                    05:4e:3e:34:9b:c9:7b:ce:65:7a:59:d5:e4:01:25:
                    b7:57:ae:00:f6:03:76:ef:7b:bb:5d:68:a4:e0:79:
                    be:d9:73:f8:a4:1c:6a:54:30:a2:a3:bc:5c:8e:2a:
                    fd:a6:28:00:ed:b1:ec:5b:0f:14:f4:a9:a4:d5:bd:
                    34:65:ff:69:a5:61:84:10:4c:21:6d:aa:0c:f1:2f:
                    ec:ba:b1:00:87:ec:1e:7c:c9:0a:d5:91:b1:29:4d:
                    5e:f8:d4:60:9a:16:f2:3e:ef:61:c8:e0:db:ed:d2:
                    79:15:53:66:96:8b:09:da:ea:9e:cb:41:eb:0a:c9:
                    b8:c5:a3:36:ac:55:a2:c6:57:1d:d6:dc:1c:a9:a5:
                    3b:fb:cf:cd:ae:c6:11:5e:80:3e:d0:f7:0e:ef:50:
                    87:8d:c7:25:67:37:0e:71:16:12:9b:92:eb:a3:2b:
                    35:36:18:0f:b1:0e:6c:df:9f:83:9b:f0:08:86:3e:
                    63:b8:9d:04:c3:3a:b5:a9:bd:1f:f6:1d:5c:02:08:
                    5f:f9:3c:4c:5e:b3:96:aa:b5:0a:5c:7a:cb:97:dd:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:D3:43:84:33:6F:CD:78:22:13:5E:87:2A:2F:FB:81:48:5D:06
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:a0:97:c0:e5:4f:b9:28:77:59:55:37:4d:be:41:08:3f:
         58:8a:2e:ff:91:78:42:71:4d:bc:cd:7e:d0:8f:9b:f8:a8:5c:
         71:64:0e:ce:cb:d5:8c:8d:d5:b2:af:2e:c9:ab:9a:9b:83:92:
         01:07:00:1c:98:52:4f:16:3f:a4:97:3e:7f:10:d3:88:f9:da:
         fc:64:2c:93:b3:81:26:66:6f:6f:84:70:1c:67:b8:6d:1b:50:
         d4:fa:5f:ef:ec:28:79:17:47:80:7b:49:a5:5b:e8:1f:33:7c:
         5d:d9:38:ae:dc:21:77:e4:62:16:c6:1c:69:1f:8c:a0:52:35:
         56:a7:3d:62:17:2a:e8:a0:10:35:1e:c8:ba:3d:f1:de:26:c7:
         ab:c0:3e:c7:0f:a2:bd:2c:9f:6a:62:d7:7b:7b:be:8d:b5:b7:
         b4:39:3d:85:a8:8a:f6:a7:a6:0e:a8:b7:dc:f7:67:d6:1a:16:
         67:98:a2:b8:39:08:b1:0e:fc:84:40:d4:8b:d6:ed:38:f5:74:
         44:49:8f:ed:4f:b0:3a:87:d3:47:ea:07:ee:0a:cf:9d:8a:88:
         72:48:f7:6b:58:c6:a7:01:20:0e:d1:40:ea:78:98:e8:f1:a7:
         17:26:9a:cf:fe:79:ce:bc:28:ac:ca:d1:5a:32:79:7f:1f:b4:
         42:61:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org