Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa
File:                     3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          yMSwSljRQuueLq1e1BFTov7aFbRAu5IfVAB1xFDMzGI=
Subject key identifier:   96:27:70:C7:4B:0B:BC:84:EC:B7:9E:FA:95:41:D1:05:CD:AE:3F:72
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       1DB7E991BC8FE67AAE2B475EFDE2F5FD6ED0B3D6
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa
Signing time:             Thu 04 Apr 2024 20:40:20 +0000
ROA not before:           Thu 04 Apr 2024 20:35:20 +0000
ROA not after:            Thu 03 Apr 2025 20:40:20 +0000
asID:                     262299
IP address blocks:        177.54.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 18:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:e9:91:bc:8f:e6:7a:ae:2b:47:5e:fd:e2:f5:fd:6e:d0:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Apr  4 20:35:20 2024 GMT
            Not After : Apr  3 20:40:20 2025 GMT
        Subject: CN=962770C74B0BBC84ECB79EFA9541D105CDAE3F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:42:a9:1d:9f:6d:20:fb:c4:b7:0c:b0:3c:
                    6e:72:d0:7d:9e:34:77:75:67:c1:67:05:75:f9:91:
                    96:06:ae:43:c4:da:fe:70:e8:b2:5c:db:aa:91:1c:
                    72:55:45:b7:02:18:b7:95:c9:47:47:4f:df:01:1c:
                    54:61:f1:f1:b4:96:26:ea:e6:cd:40:b2:75:e3:5e:
                    7d:e5:33:65:67:d1:a2:c8:63:60:8a:a0:e0:08:f3:
                    77:00:76:73:2c:02:c8:33:25:b9:ee:11:5b:f0:fd:
                    31:ae:ce:6f:2e:46:78:d2:a5:fe:41:06:59:87:30:
                    15:2e:eb:b5:5b:de:85:17:76:58:c8:d2:67:7f:0c:
                    41:ae:4a:4b:cc:ae:ee:ec:55:00:13:e0:b1:25:03:
                    85:40:8d:f4:7a:75:b4:33:ec:e5:a5:a5:8f:84:7a:
                    a7:42:39:e6:c0:b9:df:38:1d:f9:af:67:d9:19:23:
                    e7:a4:c3:e0:6b:7c:ea:61:86:7a:fc:d6:22:98:88:
                    52:50:79:e5:ef:6e:5a:16:39:aa:0c:b2:33:a6:0c:
                    6a:ce:12:ca:34:e2:8d:c2:dc:25:07:fd:50:9f:1a:
                    f1:20:8f:3e:26:c7:0b:2e:3c:c2:ab:e3:75:0e:4f:
                    35:82:3d:75:4a:22:28:e0:4f:aa:11:5b:17:cf:d4:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:70:C7:4B:0B:BC:84:EC:B7:9E:FA:95:41:D1:05:CD:AE:3F:72
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:8d:7c:03:7f:e0:22:02:66:30:f1:13:21:c0:43:6f:5c:
         46:9f:31:c2:3b:1f:e4:0a:99:a9:b0:66:91:86:b8:62:94:36:
         69:a4:72:50:ac:0c:30:e6:c5:dd:ba:1d:15:44:9e:6c:27:ef:
         4c:7c:60:ed:e0:f1:a7:e9:e4:b2:7a:0b:d3:4c:b0:b8:43:6d:
         c5:dc:3b:40:35:30:41:75:97:96:f9:3d:d2:98:db:68:05:94:
         80:52:e2:25:7d:ba:41:a6:e1:a8:0b:42:55:75:8f:f5:54:19:
         ea:7a:4b:b3:48:3e:34:fd:fc:2b:92:20:d1:1e:41:8c:e7:ad:
         a8:56:71:a1:44:30:b0:12:bf:20:31:0b:b6:40:f4:74:fe:a5:
         62:7c:98:4d:84:f2:39:9c:ac:e8:6b:64:56:7f:78:1d:38:e8:
         bc:e7:92:1e:97:02:e7:2c:22:18:aa:c9:35:c9:91:5d:b4:01:
         ee:ed:0e:89:11:11:e8:b0:da:30:02:05:4d:6c:df:d0:8f:d8:
         15:c0:9c:39:e4:c4:d9:d6:ad:b6:ec:32:45:03:da:fc:8c:3b:
         f2:5d:a1:e2:b9:22:75:b0:bd:0f:d3:cc:7d:72:c8:51:79:ea:
         13:c5:de:4a:52:ac:1b:92:d0:24:27:12:9c:6c:23:36:4e:7b:
         4e:ad:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:35:58 2024 by rpki-client on console-ams.rpki-client.org