Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
File:                     3137372e36372e32382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          +V9CpaQ6ZUQof5ZfuCoBhflVraacqBYFpsbNfpARzeQ=
Subject key identifier:   27:85:CA:EA:50:18:A4:6B:E9:35:32:39:F6:EA:95:E3:D1:4E:2A:F1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6B791008684CCAD19DE554091D0EDBD5A1674106
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
Signing time:             Fri 23 Aug 2024 19:44:50 +0000
ROA not before:           Fri 23 Aug 2024 19:39:50 +0000
ROA not after:            Fri 22 Aug 2025 19:44:50 +0000
asID:                     262324
IP address blocks:        177.67.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:79:10:08:68:4c:ca:d1:9d:e5:54:09:1d:0e:db:d5:a1:67:41:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:50 2024 GMT
            Not After : Aug 22 19:44:50 2025 GMT
        Subject: CN=2785CAEA5018A46BE9353239F6EA95E3D14E2AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:5b:17:f0:76:12:ce:c6:5e:b2:b3:b8:03:
                    4d:f7:79:67:f5:50:bb:bb:fb:8d:a8:2d:c9:43:df:
                    b4:3e:f2:f5:6c:b3:02:38:15:6f:94:7a:90:40:7a:
                    7a:ed:51:82:d7:f3:be:4d:20:81:f7:fa:62:70:c4:
                    18:ff:8f:fa:63:e2:6d:b9:20:4a:1a:8f:67:81:19:
                    4d:0a:cb:15:bf:9e:e8:a1:b2:f8:7a:83:dc:31:31:
                    f2:e0:8b:40:4c:f2:3f:d4:ad:1c:09:81:ec:b6:1e:
                    28:ba:7f:39:3a:a2:4a:79:77:04:43:39:8f:10:81:
                    a5:dd:98:6e:c4:f0:b0:d0:91:49:70:e9:e6:eb:31:
                    05:c5:49:ef:d5:b7:8d:bc:41:51:3d:f2:96:6b:5b:
                    7f:73:6e:33:59:56:58:8d:69:10:91:05:5f:ca:15:
                    40:5a:67:49:6f:1b:70:2b:6e:b9:4d:14:04:e4:e6:
                    46:11:9b:60:c1:53:0c:8c:43:be:c9:da:45:ed:94:
                    31:9c:1b:33:77:46:7a:6f:f7:89:70:6c:59:ad:3b:
                    f9:94:62:8b:34:80:4c:f8:ba:9c:40:fe:c0:4a:1c:
                    ad:06:31:1d:24:61:75:b9:3a:fa:81:5a:33:45:2d:
                    b7:4f:8a:7f:f7:f5:fe:58:ab:3a:8d:eb:27:e6:c8:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:CA:EA:50:18:A4:6B:E9:35:32:39:F6:EA:95:E3:D1:4E:2A:F1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:1d:3d:2a:06:c4:02:78:04:38:61:6f:9b:b0:b2:d6:a5:
         fa:68:b5:2a:00:01:66:5b:1d:80:33:77:80:bd:a6:9f:28:50:
         16:14:ef:b8:46:57:6f:35:e1:45:4c:f7:87:8c:b9:b0:ee:28:
         90:b2:e9:78:67:e2:15:8d:20:d6:69:c4:3a:d6:fe:af:e5:1c:
         0a:0a:14:50:5e:2b:93:fb:c4:78:73:4d:39:97:c5:fb:31:54:
         18:b4:7d:86:09:89:23:c7:3d:64:57:c1:be:95:44:6e:a2:ba:
         8f:ca:d5:73:62:85:dc:dc:76:cd:dd:88:66:14:ea:31:33:51:
         87:52:0a:f9:7a:0e:cd:61:40:7b:92:49:49:99:b7:3c:4d:87:
         6b:16:8a:76:3e:6a:e9:86:c6:1b:9b:7a:b0:2c:ca:a3:b3:5d:
         bb:b2:64:76:e3:e3:1e:16:a7:de:8e:d1:b3:79:e4:ab:50:c2:
         8a:e5:6b:a7:9c:bd:72:ce:f6:27:4e:cd:09:d4:48:8b:cd:d6:
         d5:7b:c0:0c:28:fa:d6:53:4f:1d:64:bc:e7:5e:91:38:5e:9b:
         c2:48:44:c6:ad:1a:e0:0b:38:b8:7a:fb:ba:c3:04:02:2c:40:
         c9:4b:12:93:ed:18:12:a9:03:5e:e8:9a:05:fe:5e:9b:09:1e:
         35:5b:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org