Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          O54Qc7fGrThtakWWLc0oUsILWggTLQOUO0+NR5JWa1Y=
Subject key identifier:   C8:70:EF:CC:E2:E7:1E:92:44:29:E4:5B:28:31:F7:3D:32:82:47:7D
Certificate issuer:       /CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
Certificate serial:       0BAC566FEB9B0F166F0C377DD75264F0E5C86FAC
Authority key identifier: BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 21 Jun 2024 17:49:01 +0000
ROA not before:           Fri 21 Jun 2024 17:44:01 +0000
ROA not after:            Fri 20 Jun 2025 17:49:01 +0000
asID:                     263948
IP address blocks:        177.67.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ac:56:6f:eb:9b:0f:16:6f:0c:37:7d:d7:52:64:f0:e5:c8:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
        Validity
            Not Before: Jun 21 17:44:01 2024 GMT
            Not After : Jun 20 17:49:01 2025 GMT
        Subject: CN=C870EFCCE2E71E924429E45B2831F73D3282477D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:a1:d0:d9:90:aa:8f:f8:42:44:ed:0d:98:
                    29:f2:1f:58:e3:2b:93:5d:f6:13:32:51:de:b7:02:
                    de:87:b5:da:f5:4b:6a:42:88:25:b0:8e:96:46:29:
                    4c:28:34:7f:c5:10:f3:60:c2:99:f1:6c:f7:84:3e:
                    fa:2f:e9:49:36:7c:fc:5c:94:bf:74:16:52:08:71:
                    7d:ad:3d:06:d4:19:b8:4f:44:d1:d4:30:22:e4:bf:
                    2f:be:f9:0d:eb:79:5a:48:6e:76:06:a0:d0:8a:57:
                    bf:75:cc:57:1c:82:91:70:2d:ad:1b:c3:1a:70:97:
                    fc:6b:2c:95:21:dd:14:80:93:51:5c:5f:c4:c0:72:
                    76:4a:37:f6:72:0c:0c:e9:eb:53:d6:21:e2:4d:31:
                    0b:5a:72:e0:36:b9:1c:94:66:af:4d:8f:c0:61:bb:
                    d4:bc:60:10:da:38:39:d3:67:b8:33:6f:61:3b:2c:
                    a3:25:25:e3:b3:8f:e7:1c:99:19:84:54:4d:aa:d5:
                    6d:7e:41:77:3b:f0:4e:72:15:f7:f8:43:2f:38:aa:
                    2f:7f:04:ad:81:31:96:35:83:30:e8:c1:8b:55:26:
                    7d:60:50:b9:6d:76:35:2a:f1:ad:b2:da:36:12:9e:
                    b9:78:f8:2f:f9:e6:ff:a9:28:03:98:c1:db:ec:c0:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:EF:CC:E2:E7:1E:92:44:29:E4:5B:28:31:F7:3D:32:82:47:7D
            X509v3 Authority Key Identifier:
                keyid:BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:6d:73:08:12:83:b1:d9:19:92:f4:69:b0:e2:a4:b3:d2:
         50:df:21:b3:f3:12:1c:f4:53:19:65:ee:28:f6:7a:0e:92:22:
         67:0e:cd:90:4c:76:3b:b9:c7:86:86:73:dc:b8:c4:da:c7:da:
         07:e4:e7:b5:4f:78:34:01:28:be:63:7d:60:ed:b2:99:83:d4:
         28:48:02:9d:de:e9:56:ab:71:4f:f5:61:d7:6a:e7:55:95:1d:
         98:8a:69:58:64:8c:37:83:08:78:67:60:fc:3d:57:a5:ea:cf:
         40:5d:87:a7:e6:f7:d1:39:fa:17:f3:2a:c2:fd:f4:a1:86:ed:
         15:ed:68:ba:98:2f:86:07:ad:26:cc:d5:bc:33:bb:d9:b0:8f:
         bc:70:0c:54:04:1a:18:b3:a2:be:92:f3:c1:a8:c4:57:4d:82:
         6c:d2:58:7d:0b:62:6b:4e:68:52:ac:bb:db:74:4d:fe:9b:a2:
         a1:ec:cb:d2:d3:f6:dc:04:69:ed:62:88:76:63:c0:0a:d0:6b:
         b4:96:a8:8d:2b:f3:9a:ad:bd:4f:f7:bd:e4:50:90:9e:93:17:
         d3:c0:de:db:af:4b:a4:9c:30:99:12:28:54:09:40:a5:54:78:
         bf:55:d0:81:f4:84:18:f9:c0:b2:50:98:25:6e:18:ce:f2:22:
         2f:47:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:22 2024 by rpki-client on console-fra.rpki-client.org