Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
File:                     3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          hgj0Tg4fKxnVyGMwEB51bxgWq5Yli353O1n1o4Idylw=
Subject key identifier:   E4:13:BB:11:EB:0C:74:A1:12:E4:B6:A0:5B:0D:9D:25:94:E1:8C:10
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       5717231AEC86846B2F1BCEFB8A4E1F7EB95831CF
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
Signing time:             Sat 09 Nov 2024 14:29:05 +0000
ROA not before:           Sat 09 Nov 2024 14:24:05 +0000
ROA not after:            Sat 08 Nov 2025 14:29:05 +0000
asID:                     263441
IP address blocks:        177.91.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:23:1a:ec:86:84:6b:2f:1b:ce:fb:8a:4e:1f:7e:b9:58:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Nov  9 14:24:05 2024 GMT
            Not After : Nov  8 14:29:05 2025 GMT
        Subject: CN=E413BB11EB0C74A112E4B6A05B0D9D2594E18C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:cf:10:3f:82:41:44:6f:3f:8a:f2:68:72:
                    b3:39:0c:cb:12:b5:2d:3b:ed:73:6e:fe:2c:b0:3d:
                    2b:94:c2:66:64:5b:a8:ac:b8:ee:8d:fe:b9:82:fd:
                    bc:9c:4b:f6:4e:74:32:98:72:b9:40:bf:8b:c3:1d:
                    ae:a1:fb:43:af:b7:be:e9:9f:53:d8:74:0d:18:4a:
                    45:95:e5:64:ad:04:21:8f:67:05:b5:35:38:66:91:
                    99:e8:b2:b8:45:cf:ac:3f:81:01:0c:6f:5d:16:6c:
                    a1:39:0f:6a:d5:46:d7:18:e3:bb:20:36:3c:4f:4b:
                    ce:f8:94:f6:bb:f9:58:e8:eb:f0:8c:42:30:2b:78:
                    b9:60:15:16:14:74:67:33:f2:14:e8:66:f3:5c:53:
                    e3:e7:fa:15:9a:61:68:d5:36:c1:be:bc:fa:9f:6d:
                    fd:42:0b:96:73:50:6f:22:2f:77:52:a8:19:21:75:
                    87:56:c8:f5:ea:47:6b:19:9e:e1:26:cb:06:b4:af:
                    89:ad:e5:c7:87:83:9b:55:e6:42:e8:74:3f:8d:8e:
                    56:6c:59:4e:90:30:5b:e2:35:ef:93:bd:bb:0e:f5:
                    e5:09:13:88:bc:b2:a1:54:5c:7f:f1:40:69:be:31:
                    f9:c4:08:d7:67:b9:43:5c:ed:d9:3b:e2:d4:3e:c6:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:13:BB:11:EB:0C:74:A1:12:E4:B6:A0:5B:0D:9D:25:94:E1:8C:10
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:a7:19:0a:e2:a1:97:94:9d:ff:da:b0:3f:f6:29:6f:91:
         45:5b:77:04:f7:45:08:88:e1:c1:cb:fd:70:60:77:05:67:1c:
         87:1e:ad:39:7c:b4:1d:81:c3:ca:a3:12:99:4d:cd:b1:87:2d:
         3a:4e:66:9b:9a:5f:a5:2d:ac:14:bf:24:a6:80:d7:65:ed:55:
         9f:35:df:16:1b:e5:a9:b3:67:0d:a3:84:40:b5:aa:b0:4f:6e:
         9e:a2:06:8e:86:85:6e:53:cd:4f:59:83:ac:d2:36:ed:44:1c:
         8d:7b:eb:bc:05:a6:b7:58:fb:bb:bc:43:bf:f0:75:3b:92:7a:
         3e:e7:7c:c9:82:8f:76:41:91:29:49:dd:4d:ca:c5:03:bd:a3:
         9e:9a:65:f8:29:df:2b:27:11:47:17:b5:09:c9:0f:a3:c3:1a:
         47:a5:fd:5a:cd:06:9f:5c:4a:1f:72:05:53:51:8c:f6:9d:d1:
         1a:2c:67:bd:96:1b:ec:70:b8:c6:17:8e:f6:0d:a3:cd:f0:99:
         53:71:1d:78:d8:19:c1:05:d0:97:55:22:6f:8e:0c:aa:10:2b:
         d2:de:03:fb:92:36:ed:09:04:33:ca:b2:e4:3f:ff:3d:8e:6a:
         30:05:d8:24:26:17:de:0c:ce:b8:e1:a6:23:e4:0b:e8:50:50:
         43:8b:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:02 2025 by rpki-client