Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32332d3233203d3e203532373830.roa (raw, json)
Hash identifier:          zl3BR4rNQXCepcy+Zy5lOYHt/QRVkUkobhvC2J6yeYI=
Subject key identifier:   EB:14:98:A7:F7:88:90:BE:A2:61:FE:C9:CA:AB:7F:F1:77:7C:3B:BD
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       28084D94CD63337F10AB0C38C3D6B11C59A18AF8
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:23 +0000
ROA not before:           Thu 04 Apr 2024 14:51:23 +0000
ROA not after:            Thu 03 Apr 2025 14:56:23 +0000
asID:                     52780
IP address blocks:        177.39.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:08:4d:94:cd:63:33:7f:10:ab:0c:38:c3:d6:b1:1c:59:a1:8a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:23 2024 GMT
            Not After : Apr  3 14:56:23 2025 GMT
        Subject: CN=EB1498A7F78890BEA261FEC9CAAB7FF1777C3BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:af:f8:59:a9:e1:19:32:80:e3:ba:57:df:
                    9a:4d:6e:61:45:7f:e4:f3:31:39:aa:af:bc:a5:70:
                    39:71:f5:87:ec:95:cd:84:7a:4a:0d:7b:c8:81:e1:
                    81:76:a5:c9:64:8f:a1:25:47:97:40:10:fa:ad:d0:
                    7d:d9:99:90:ca:7b:0e:85:2a:94:ee:6f:d7:82:39:
                    a5:99:82:ea:36:e1:e6:56:0f:4f:5b:41:1d:2a:43:
                    29:23:b1:17:6c:50:63:1a:4c:9e:8e:80:59:e4:8b:
                    7b:81:d1:41:71:47:28:cf:7b:4f:fd:af:e4:e6:df:
                    94:97:d4:ef:b2:35:2a:90:12:78:f0:19:b3:9f:44:
                    a1:5c:20:de:51:4e:56:cf:36:4e:2b:63:34:9f:e2:
                    54:f0:71:d5:ef:3e:bf:fb:03:97:1a:0d:ac:ba:3d:
                    f6:d3:4f:09:49:b9:3a:9b:20:5c:f1:72:03:b2:2a:
                    2f:ac:24:69:3e:95:68:ea:cd:bb:f0:3c:2a:67:aa:
                    f1:20:92:2c:d8:d3:42:43:65:eb:99:ef:d7:e1:fa:
                    0a:71:f6:62:cf:3e:ae:a1:39:a7:fb:ee:19:fb:5d:
                    70:ea:7f:14:c1:65:9f:5a:c9:32:3d:83:9a:0a:39:
                    71:1b:98:a5:17:39:57:21:44:a3:1b:af:75:6f:26:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:14:98:A7:F7:88:90:BE:A2:61:FE:C9:CA:AB:7F:F1:77:7C:3B:BD
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:04:ec:97:f3:3c:da:cd:ad:7b:69:60:40:bd:72:a0:f0:40:
         2e:c8:da:6c:a9:2c:84:61:1e:81:63:b8:07:15:8b:cb:ab:50:
         23:40:09:19:06:03:aa:7b:d7:37:f9:51:fa:18:df:c8:e8:7f:
         ba:fa:5d:35:88:9c:5c:d0:82:97:c0:15:f7:71:d6:e8:3c:18:
         db:15:49:c4:34:cd:37:2d:4e:4b:8f:bb:a0:c8:a6:c8:22:4d:
         0a:cf:cf:4d:cd:8b:ab:61:6c:6e:a1:c5:ce:1c:49:80:27:e6:
         a5:91:13:5b:9a:b7:4f:6f:4c:c1:64:d6:4b:1b:e4:a6:0f:0e:
         00:25:23:17:ea:00:40:29:1e:0e:57:0c:91:9d:2d:9c:ce:1f:
         1d:71:bf:2c:98:22:79:4a:d2:ab:b5:7f:81:51:1f:70:8f:c2:
         c4:b4:1c:f8:9d:a7:bb:30:19:f2:94:73:4e:23:5a:72:e0:91:
         eb:64:6b:af:8a:1f:12:31:da:2a:91:ae:c8:65:fe:8c:6b:c3:
         3b:c9:3f:31:b8:0a:7e:9a:f6:29:10:b8:9d:65:a4:55:d3:57:
         d3:f3:b7:f0:f1:44:63:ad:e3:33:ec:29:1a:d3:a1:cc:62:e8:
         a5:39:3a:a4:d8:05:ca:74:53:58:77:76:0d:eb:fe:08:69:ec:
         eb:ce:ea:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org