Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (raw, json)
Hash identifier:          DtpfdXe1Jvd4Uz0mL5V4qMN5vq2v8uZILMZ1lsOaXI0=
Subject key identifier:   9B:26:5F:D6:F6:62:67:A9:87:2D:9A:DD:B5:2A:65:38:85:8A:E4:39
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       3C2017D6EC6DBCD00A6EA2A51F55C69D76A6A89F
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
Signing time:             Wed 03 Apr 2024 20:55:33 +0000
ROA not before:           Wed 03 Apr 2024 20:50:33 +0000
ROA not after:            Wed 02 Apr 2025 20:55:33 +0000
asID:                     270594
IP address blocks:        177.37.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:17:d6:ec:6d:bc:d0:0a:6e:a2:a5:1f:55:c6:9d:76:a6:a8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Apr  3 20:50:33 2024 GMT
            Not After : Apr  2 20:55:33 2025 GMT
        Subject: CN=9B265FD6F66267A9872D9ADDB52A6538858AE439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:e6:26:56:7c:97:b0:93:2b:36:62:e0:72:
                    60:7f:15:e8:2a:d9:42:b8:df:48:47:16:30:ed:3f:
                    65:f6:69:3a:9c:bb:6b:ec:45:38:37:cf:e1:35:b2:
                    81:e7:ab:fc:9c:32:5f:bc:8f:0d:40:70:8d:5a:ff:
                    a1:09:c8:dc:3a:7e:e8:f5:43:a8:21:35:25:89:ca:
                    e6:bd:fd:bf:51:61:84:f7:ca:3c:13:97:98:16:7a:
                    6c:63:e9:44:14:97:0f:bd:22:30:dc:d1:88:b6:4e:
                    7d:36:89:bb:f0:31:52:e4:88:bd:87:2b:cc:b6:42:
                    36:1d:89:10:9a:94:64:07:11:c2:af:c5:7d:4d:59:
                    ea:6c:ed:12:24:49:d7:bf:9a:07:06:c9:36:b1:a4:
                    73:89:9b:b7:1f:19:bf:37:38:7b:00:97:6e:6e:d0:
                    e1:07:72:48:37:22:34:eb:f2:ba:8a:4e:f6:f8:7a:
                    0a:49:42:eb:95:9f:1c:c6:1d:19:f1:c7:21:8d:fb:
                    64:34:72:9c:4d:3a:9a:7d:a4:ad:5a:69:5c:18:f2:
                    ef:e3:b7:3b:31:df:ec:ca:55:09:22:70:a9:2a:95:
                    61:71:ab:c4:f2:6c:73:3b:e6:29:a0:bf:66:af:98:
                    aa:60:29:89:48:ec:d2:03:7e:b3:6c:39:01:95:ef:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:5F:D6:F6:62:67:A9:87:2D:9A:DD:B5:2A:65:38:85:8A:E4:39
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:88:da:1b:5f:9e:4a:3f:63:35:23:20:39:81:db:0a:79:b0:
         3f:16:36:ab:ba:56:3c:7c:95:89:f5:ee:54:f5:55:f7:f7:51:
         e4:f7:6b:39:17:87:1a:ac:f9:e4:ed:2f:fb:a6:8a:41:54:0a:
         98:fd:27:77:92:91:26:16:ad:5e:ad:7e:0e:84:df:09:40:de:
         83:d0:94:8b:be:77:35:8b:4e:96:69:09:b5:0d:3b:36:20:54:
         4a:93:cf:a7:86:8b:91:7d:e6:91:b0:f6:3e:63:4f:30:34:c1:
         b9:0f:60:1f:99:41:6d:90:99:0e:03:44:3b:86:96:f3:c3:73:
         73:5e:66:c1:79:d9:19:fb:de:55:5e:d0:e0:74:69:4e:79:0e:
         98:55:d6:99:1b:ce:11:cd:7e:86:c1:f5:09:86:85:8e:e2:5f:
         73:ed:21:3c:09:9b:82:64:fb:92:fc:88:72:f8:c6:fa:ec:99:
         57:2e:39:d7:7c:41:98:77:a0:00:d4:12:ac:19:6f:17:8d:e4:
         79:11:6e:48:11:8f:5d:9b:25:9f:6c:3a:b0:21:29:f4:0f:5f:
         ce:fd:e2:43:06:e5:cb:e3:78:d6:18:f2:4f:d0:ad:24:56:a1:
         b6:fb:9d:4a:47:7c:7c:a9:9f:00:b7:92:4c:84:5c:72:cf:3d:
         18:0c:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org