Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137372e31312e3232302e302f32322d3332203d3e20323632383534.roa
File:                     3137372e31312e3232302e302f32322d3332203d3e20323632383534.roa (raw, json)
Hash identifier:          C+oVsmp5EejOX1eC6xPnOtFP0USrTmMY/QAWDNPcT3M=
Subject key identifier:   B4:73:87:8A:8B:AE:0B:4E:79:8A:30:F1:A0:EE:58:12:BD:94:9B:92
Certificate issuer:       /CN=484909AE55FE5D252EF7E025126B88260867CF80
Certificate serial:       2E716DA70AAC793426561321BEF3876E73AB93FB
Authority key identifier: 48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137372e31312e3232302e302f32322d3332203d3e20323632383534.roa
Signing time:             Tue 12 Nov 2024 14:55:01 +0000
ROA not before:           Tue 12 Nov 2024 14:50:01 +0000
ROA not after:            Tue 11 Nov 2025 14:55:01 +0000
asID:                     262854
IP address blocks:        177.11.220.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl
                          rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:71:6d:a7:0a:ac:79:34:26:56:13:21:be:f3:87:6e:73:ab:93:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484909AE55FE5D252EF7E025126B88260867CF80
        Validity
            Not Before: Nov 12 14:50:01 2024 GMT
            Not After : Nov 11 14:55:01 2025 GMT
        Subject: CN=B473878A8BAE0B4E798A30F1A0EE5812BD949B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:59:2b:87:ae:e2:5a:36:72:92:c8:fb:cc:
                    bb:ca:f6:60:92:55:b7:ee:53:56:8a:f1:74:9a:b4:
                    41:2f:78:e2:51:4a:f6:52:1a:ef:09:fb:64:e3:92:
                    91:c8:46:56:58:aa:fd:bf:af:a3:53:74:cb:1d:96:
                    ea:f1:27:41:f3:94:75:e5:e4:65:f1:8f:68:0e:2a:
                    fe:64:53:67:f9:aa:a4:7a:91:da:68:74:2d:8e:5e:
                    bf:99:c9:98:2c:d3:5f:98:05:e9:fc:d5:0b:3d:aa:
                    22:7d:e1:13:17:bb:5d:7d:65:37:4f:3f:a6:52:82:
                    50:05:9a:f3:7f:a1:71:2c:04:3e:ca:69:6d:20:8e:
                    d3:b5:f3:37:c3:a8:77:a5:80:f2:e6:d5:ae:3f:2a:
                    0d:fe:12:ee:8a:95:27:f6:0c:88:4f:bd:37:db:63:
                    fd:c0:84:38:8e:4f:11:d6:91:35:0f:99:6b:c9:67:
                    8c:b6:db:e8:54:60:41:f5:7f:6f:d6:1c:2e:c4:eb:
                    23:2b:1e:9f:05:6e:5c:b0:08:7e:69:ed:9d:ec:1a:
                    6c:96:ea:6f:af:78:15:0a:53:4c:34:19:0d:8f:e5:
                    0e:cf:05:46:be:ed:6d:d6:08:a6:58:aa:c9:19:26:
                    ef:a8:29:51:9f:f8:cc:59:a6:13:be:c5:82:81:0e:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:87:8A:8B:AE:0B:4E:79:8A:30:F1:A0:EE:58:12:BD:94:9B:92
            X509v3 Authority Key Identifier:
                keyid:48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137372e31312e3232302e302f32322d3332203d3e20323632383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:71:c1:2d:a0:7b:cf:39:a0:77:75:ec:d0:7a:af:23:db:fb:
         2c:c0:61:f1:c0:30:50:0a:d2:bc:41:35:ef:08:e9:99:23:ec:
         36:0d:05:50:c8:01:11:5f:d9:d0:77:61:01:af:48:0f:88:af:
         fa:41:22:5c:97:03:22:9e:56:d9:7a:d5:39:4d:f3:df:3b:2d:
         f4:13:d8:47:41:9d:9e:94:27:68:8b:56:f6:83:43:09:bd:01:
         be:44:46:9d:d0:35:f1:b9:f9:52:f0:31:ed:4e:99:0d:45:91:
         f6:07:17:da:93:4c:a8:64:34:f6:8d:bc:d7:d5:a2:d7:01:89:
         3c:fe:35:7c:27:22:42:a5:f0:8c:ce:56:bd:17:48:72:d1:0d:
         12:7e:ad:1a:74:fd:0b:28:58:b8:d1:15:73:59:f1:35:bd:58:
         17:a2:fa:4e:a4:a4:83:f6:c6:fc:62:4e:fe:dc:9f:1f:8c:cb:
         c5:bf:33:f8:73:d9:1f:0d:2f:e9:ce:3f:09:96:1e:b5:53:d8:
         a5:dc:81:e9:33:aa:de:a0:b9:d3:04:8b:e9:cc:e5:47:ac:b7:
         e4:a0:0b:5d:f5:2b:e2:fe:ef:39:58:d3:91:81:a4:d8:e8:d1:
         5f:d4:9a:cf:f8:df:67:a5:c2:0d:f6:86:bc:18:cc:ea:0f:a0:
         a6:22:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:56 2024 by rpki-client on console-ams.rpki-client.org