Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa
File:                     3137372e32322e34382e302f32302d3234203d3e203532393533.roa (raw, json)
Hash identifier:          ucPOY3q4xQw2c0vGShiobsLB9T0nju/H7pvDAmBw7mI=
Subject key identifier:   BD:76:09:00:EF:E5:FF:F9:FC:AA:9E:8B:A9:F9:67:25:61:A4:D3:A5
Certificate issuer:       /CN=136589E651A12B3538E17F7856FB523F01EC591F
Certificate serial:       079209C4C3130466975749E0B5E75F71AA11A645
Authority key identifier: 13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa
Signing time:             Wed 03 Apr 2024 21:32:05 +0000
ROA not before:           Wed 03 Apr 2024 21:27:05 +0000
ROA not after:            Wed 02 Apr 2025 21:32:05 +0000
asID:                     52953
IP address blocks:        177.22.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
                          rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:92:09:c4:c3:13:04:66:97:57:49:e0:b5:e7:5f:71:aa:11:a6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136589E651A12B3538E17F7856FB523F01EC591F
        Validity
            Not Before: Apr  3 21:27:05 2024 GMT
            Not After : Apr  2 21:32:05 2025 GMT
        Subject: CN=BD760900EFE5FFF9FCAA9E8BA9F9672561A4D3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:67:9a:02:ba:91:c8:d5:f1:2f:0d:d1:6d:
                    ce:e9:d7:5e:f8:90:f5:54:8e:eb:10:ca:8d:32:30:
                    ba:5a:63:4d:e3:6f:48:61:c9:f0:6f:38:a1:b5:9c:
                    06:30:62:82:07:8a:56:a0:cd:e8:92:34:b7:cf:f3:
                    a9:bc:a1:29:9c:f9:1b:a1:ab:dd:8d:8f:11:07:52:
                    95:4a:af:cb:5d:99:e4:0e:20:55:a1:b8:f4:45:18:
                    92:b4:31:62:7d:66:6b:0f:e7:4f:6c:73:be:b1:54:
                    30:08:b2:ef:cf:6a:26:2c:6f:72:d4:c1:96:84:4d:
                    9b:73:db:44:1d:16:af:fa:e9:2b:a2:1a:5d:c5:58:
                    9a:3d:35:24:cd:e0:a1:71:ea:cc:3f:62:f1:66:85:
                    52:3b:f0:13:cc:d7:44:1a:df:ee:44:8f:8e:ac:1d:
                    4b:a6:cd:0b:a3:6b:bd:60:91:86:56:f3:43:71:00:
                    8c:52:44:a6:1d:dc:e5:2d:01:59:53:2d:36:5e:de:
                    aa:1e:b0:45:53:ac:5d:3f:f8:43:f5:7d:df:b6:29:
                    b5:37:94:e5:39:b9:06:6d:bb:5b:f9:11:8d:11:89:
                    ff:c4:a8:90:c8:3a:95:32:bd:6c:8f:af:e0:f5:4a:
                    d1:df:3c:89:09:12:16:cc:e2:49:85:96:60:71:61:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:09:00:EF:E5:FF:F9:FC:AA:9E:8B:A9:F9:67:25:61:A4:D3:A5
            X509v3 Authority Key Identifier:
                keyid:13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/3137372e32322e34382e302f32302d3234203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:01:4b:2e:04:07:f8:e5:8a:a2:68:28:86:b5:d7:0d:5b:65:
         29:fb:3d:d3:27:4b:90:29:02:20:a2:22:2d:5a:da:70:0c:d8:
         71:39:a7:3b:c3:29:2a:d3:14:87:22:c4:74:7f:f2:60:48:1c:
         88:ee:a8:4a:e1:ff:8e:35:f4:08:e2:9f:64:d1:4f:d4:5c:04:
         c9:03:50:53:ff:b7:10:46:5c:0a:83:cb:58:2c:59:25:63:5b:
         84:f3:50:ac:35:4f:e8:8e:91:9f:5a:bd:d1:d1:45:01:e6:45:
         c6:c3:2e:82:56:69:61:bb:bf:ff:41:e0:30:45:2b:41:80:6b:
         61:fb:0c:b6:3a:e5:90:60:34:cf:7f:31:3d:eb:bc:83:9e:de:
         c4:1a:90:9e:24:ec:a8:5a:65:be:a1:ac:5c:33:cf:3c:7d:d9:
         8b:6f:4d:bd:cb:cf:2c:2f:30:17:2b:1e:5c:da:3e:02:f6:65:
         22:1a:b2:c6:99:9c:19:82:8f:37:f4:f3:fd:87:92:1f:8b:37:
         cd:4e:a6:13:c6:c2:02:30:f8:5e:96:5b:85:be:97:25:6c:c7:
         ad:23:24:68:a6:6d:25:2d:dc:99:a5:eb:f5:62:57:80:cb:df:
         03:cc:9a:8c:ea:fe:37:60:b7:a0:3d:e5:57:5d:83:75:30:4f:
         f8:5d:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org