Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa
File:                     3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa (raw, json)
Hash identifier:          bATkp6Tq4fVA/KiHmueVse9eHrdv42w47G173ZpSUds=
Subject key identifier:   7F:BF:A6:6D:25:32:43:96:09:4F:C1:AF:DF:FC:BA:6A:97:24:34:A2
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       736FDFD882B9FC630DB7A8528D6BCB4530A8F31F
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa
Signing time:             Tue 05 Nov 2024 14:15:02 +0000
ROA not before:           Tue 05 Nov 2024 14:10:02 +0000
ROA not after:            Tue 04 Nov 2025 14:15:02 +0000
asID:                     270917
IP address blocks:        177.200.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6f:df:d8:82:b9:fc:63:0d:b7:a8:52:8d:6b:cb:45:30:a8:f3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Nov  5 14:10:02 2024 GMT
            Not After : Nov  4 14:15:02 2025 GMT
        Subject: CN=7FBFA66D25324396094FC1AFDFFCBA6A972434A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:29:c8:6f:d6:93:d6:ef:99:e3:a2:9d:fd:
                    ec:99:67:74:1d:03:36:f1:11:d5:93:e5:71:47:4d:
                    b6:27:68:9e:f2:65:ac:c1:74:f8:ea:b7:e1:62:19:
                    33:1c:f4:e4:63:c7:84:7f:b2:92:7a:dc:e8:d0:5a:
                    c4:e2:c2:c8:6a:c0:55:ed:6b:c6:be:19:fd:d1:b3:
                    f7:fb:7f:f7:05:5a:2d:c5:69:b8:cc:9c:8b:4a:37:
                    a7:54:27:cd:82:54:85:d1:59:3e:90:eb:b5:e6:c9:
                    9b:9b:d2:35:c5:e0:7b:11:df:cf:f0:ce:67:20:eb:
                    67:93:62:34:ec:4e:4a:ac:97:89:a1:a4:8b:d3:da:
                    bc:72:a6:96:b8:7e:0d:c4:9a:dc:4e:b9:34:47:81:
                    18:bb:85:ae:cf:33:b7:28:fb:0d:48:58:52:0d:4b:
                    c5:2a:18:0c:c5:76:1e:4b:69:83:dd:cf:f0:54:76:
                    b8:ee:d2:80:c7:8e:60:76:77:c7:27:bc:d8:40:1b:
                    42:33:2c:0d:e6:f5:da:c8:5d:72:d0:33:f0:b5:7f:
                    12:95:e6:8e:b8:ac:fb:da:30:90:41:4e:57:95:3e:
                    d0:47:c4:a8:43:af:1a:87:9e:39:9d:b9:1d:12:26:
                    d7:d9:ba:24:11:10:fb:bb:2e:c8:b1:0e:65:39:30:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BF:A6:6D:25:32:43:96:09:4F:C1:AF:DF:FC:BA:6A:97:24:34:A2
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:89:34:b7:11:3e:80:5c:51:17:73:75:c8:a0:70:44:5c:
         ab:e6:3a:e2:6c:46:c6:9b:38:d7:32:8e:6d:46:78:fb:51:d0:
         9b:da:b6:d7:31:66:96:3e:55:5a:bb:80:8c:bb:71:01:cf:37:
         c2:9f:2c:72:24:f6:e8:05:ff:02:67:d7:98:f4:59:52:f6:43:
         26:17:3e:b1:f4:f9:88:d5:3b:d2:92:22:12:4f:d4:19:9c:85:
         dd:55:b4:5d:46:4f:2e:a7:f9:6b:dc:58:58:59:1b:a2:11:a0:
         e7:21:ad:c1:c3:eb:f1:61:0f:72:ab:13:42:99:59:aa:c0:1c:
         4e:6f:c2:ba:fe:af:8e:fe:96:b7:08:86:b9:af:92:10:90:c2:
         5a:3f:c0:56:a2:cd:3b:a8:05:71:ab:70:f3:07:1d:02:5d:2a:
         d4:68:28:a8:a9:55:86:c5:f0:fd:a7:9d:c0:f3:f2:64:6a:7e:
         85:76:c5:05:f6:b3:0b:26:b2:88:6f:60:5d:24:a5:3e:54:12:
         c3:e6:d6:f2:06:81:f1:c5:5d:c8:02:d7:12:cf:48:fb:6e:e8:
         65:5f:1d:23:58:e4:78:73:2e:1e:28:fe:4a:5a:1f:58:63:29:
         84:7c:13:a6:98:5c:24:b4:be:90:ce:76:d6:ae:99:cf:4a:e6:
         ca:b0:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org