Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e32312e3132382f32372d3237203d3e20323632333738.roa
File:                     3137372e3133312e32312e3132382f32372d3237203d3e20323632333738.roa (raw, json)
Hash identifier:          57cbyjRjcuqFcvvBh8cCGCqmWQhjMJjdUzg80GEpx+o=
Subject key identifier:   CB:7E:4C:E3:20:F7:B4:AF:5E:D6:BC:21:A2:C6:27:E6:F8:8C:EA:97
Certificate issuer:       /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
Certificate serial:       6F6369C950D77C2ED93E3FE1EE04D47EA15B72A7
Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e32312e3132382f32372d3237203d3e20323632333738.roa
Signing time:             Thu 04 Apr 2024 19:58:34 +0000
ROA not before:           Thu 04 Apr 2024 19:53:34 +0000
ROA not after:            Thu 03 Apr 2025 19:58:34 +0000
asID:                     262378
IP address blocks:        177.131.21.128/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl
                          rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:63:69:c9:50:d7:7c:2e:d9:3e:3f:e1:ee:04:d4:7e:a1:5b:72:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
        Validity
            Not Before: Apr  4 19:53:34 2024 GMT
            Not After : Apr  3 19:58:34 2025 GMT
        Subject: CN=CB7E4CE320F7B4AF5ED6BC21A2C627E6F88CEA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:3d:e9:73:12:91:00:67:38:ef:cb:44:12:
                    a7:f3:66:ed:26:74:78:ba:44:28:f0:a2:02:94:c0:
                    60:8f:94:6a:e9:1d:3c:d4:f7:ba:e3:17:28:54:8d:
                    32:5b:86:e4:05:55:15:b9:41:01:ce:51:6f:a9:5f:
                    90:48:9f:87:d6:37:cf:e3:95:79:f3:9f:e3:f0:f8:
                    72:73:2a:2c:e4:a8:33:a7:2e:0b:02:70:be:20:af:
                    12:0b:59:43:1d:5a:23:76:cf:32:af:e7:91:ff:84:
                    df:68:ec:f4:07:59:8c:49:e1:2f:32:42:54:0a:23:
                    0e:3d:11:ac:6e:e8:13:49:04:fa:fc:07:be:86:d1:
                    18:e5:1f:59:3b:cd:3e:b9:fe:42:13:85:42:cc:9e:
                    c5:d0:f2:3d:b0:20:10:c4:83:14:90:62:73:b8:fe:
                    b6:e1:35:7a:f8:f2:35:6f:ae:2f:89:65:14:65:2a:
                    9e:84:c2:76:d2:b5:19:8f:1b:05:70:9a:0b:e1:35:
                    ad:de:32:22:24:a6:0f:93:cd:dc:5b:dd:c0:33:62:
                    fe:1f:03:08:d8:e2:45:f2:94:00:a5:9b:1e:cb:79:
                    48:88:d7:60:8c:2c:a2:e7:67:a2:4b:db:d5:41:2e:
                    45:5f:d1:fe:ac:6a:9e:03:32:18:fa:44:d3:5f:3e:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7E:4C:E3:20:F7:B4:AF:5E:D6:BC:21:A2:C6:27:E6:F8:8C:EA:97
            X509v3 Authority Key Identifier:
                keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e32312e3132382f32372d3237203d3e20323632333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.21.128/27

    Signature Algorithm: sha256WithRSAEncryption
         71:07:f9:14:c1:73:f5:aa:c0:85:99:bf:13:c2:82:96:d4:24:
         e1:56:d5:d2:ee:f1:2e:10:30:0b:0b:3a:3d:4d:b3:ac:ae:38:
         cd:29:7b:c1:7f:4f:c8:c8:d3:60:c9:fd:4b:72:b4:18:86:29:
         24:b4:e0:32:8a:2e:38:b1:f9:85:3e:68:b9:ce:06:78:a9:15:
         af:61:4a:34:2c:fb:e8:9c:c7:6b:f7:3e:75:02:65:d2:03:b3:
         22:dd:78:a7:82:49:21:ce:4d:d7:22:dc:4f:8f:7b:67:ae:4a:
         d3:ed:0a:96:33:81:ab:f6:f3:50:e7:25:33:54:58:43:6e:22:
         dc:1a:9a:2e:f7:a2:69:f7:0e:d9:10:ad:71:77:78:fe:7b:b2:
         e3:a6:a0:cb:c4:91:b4:7d:79:4f:26:36:88:72:64:5f:9d:73:
         41:d0:27:ef:75:f3:be:2f:2b:d7:7b:72:a4:68:e1:48:5d:fc:
         c3:cd:b8:e6:53:3d:69:bf:6a:9b:db:b7:9a:81:42:d6:41:d5:
         07:fd:05:ee:fd:07:ca:82:b2:08:53:9a:c5:b7:d2:a3:cd:ce:
         6c:a9:bb:23:14:c7:44:03:9d:1d:d9:65:38:24:5d:fb:c7:30:
         81:0a:aa:24:94:14:32:9e:bd:fa:8c:ad:25:fa:e8:d2:0f:c8:
         7c:0b:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org