Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (raw, json)
Hash identifier:          6AN4jVMRDgjkwWnGJQe9X0hf2iwfu7k2E0h5KWnJI3s=
Subject key identifier:   1A:B2:55:88:67:C2:CD:09:1E:16:8C:A8:37:9C:8F:F2:8E:4A:3C:D5
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       488136B51B7A132BD10EEBA3ABB8432C955D9509
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
Signing time:             Wed 03 Apr 2024 20:55:33 +0000
ROA not before:           Wed 03 Apr 2024 20:50:33 +0000
ROA not after:            Wed 02 Apr 2025 20:55:33 +0000
asID:                     270594
IP address blocks:        177.37.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 21:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:36:b5:1b:7a:13:2b:d1:0e:eb:a3:ab:b8:43:2c:95:5d:95:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Apr  3 20:50:33 2024 GMT
            Not After : Apr  2 20:55:33 2025 GMT
        Subject: CN=1AB2558867C2CD091E168CA8379C8FF28E4A3CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:c1:63:df:23:c5:b0:9f:51:4e:ca:72:e3:
                    41:96:ad:9d:59:ec:a3:11:6a:91:20:f6:aa:02:ab:
                    87:87:96:05:e5:ef:18:88:6a:91:f7:94:b3:f2:fc:
                    22:6e:bf:ba:b8:d3:8f:a9:6f:bc:91:3f:1c:9d:68:
                    d3:d5:53:aa:0b:17:9c:50:55:81:b9:5e:71:c0:d0:
                    7b:8d:ee:4d:f4:0c:e6:a2:a0:4f:b4:ef:a9:16:46:
                    85:61:71:ed:c9:62:25:dc:6b:87:ac:43:3d:9a:12:
                    34:e7:7c:4b:97:a7:78:d7:64:68:e0:78:77:31:be:
                    0b:f0:02:18:bc:3c:4e:fb:de:f9:b5:9a:d6:70:cc:
                    53:4e:83:c2:e6:1c:4d:1f:a1:e1:63:69:17:44:06:
                    6e:3a:0d:53:d0:f7:bd:b5:1e:85:3f:ce:d6:67:e9:
                    02:a3:95:d0:5a:d3:03:d3:ea:f7:df:00:c2:d1:e9:
                    92:10:59:5b:7f:1f:7b:5d:c0:ff:f1:2f:7c:f2:e9:
                    57:8d:80:c3:89:7d:c5:1f:8d:9a:09:37:d2:13:69:
                    d6:c6:22:fc:e4:fd:75:0c:d7:1d:b6:92:c2:94:8d:
                    f1:8d:d9:cd:01:1d:76:9f:aa:30:6a:5f:9b:56:ea:
                    86:28:5e:82:47:6e:c1:0f:3c:68:c6:23:2f:da:6e:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:55:88:67:C2:CD:09:1E:16:8C:A8:37:9C:8F:F2:8E:4A:3C:D5
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:27:8f:66:17:0a:10:ee:94:0b:65:16:81:29:9d:df:b0:
         09:d7:e2:f4:d8:92:e2:49:cb:26:9b:63:fb:11:4f:5d:5a:a9:
         80:2b:11:19:58:31:7c:bb:a9:15:d5:01:d5:ae:1f:70:68:b3:
         08:b1:4a:b5:3e:0c:28:29:e5:7b:de:12:3a:7c:2d:12:6c:2c:
         4f:96:0d:bb:5f:fe:63:35:3a:ce:b9:00:cb:28:1e:81:fe:de:
         5f:be:69:92:3a:20:a0:51:b8:c6:8a:1c:a4:5f:48:08:b5:84:
         d4:76:f9:36:13:8e:26:42:27:a7:4d:e5:8e:cd:e5:0d:83:19:
         34:4f:3f:cf:49:28:ae:38:1d:f5:5a:59:0d:cb:7e:2e:be:26:
         af:21:df:78:28:75:9c:06:ea:d5:67:90:80:eb:2c:fb:af:e8:
         19:d3:36:4a:88:59:45:d7:61:ac:09:80:70:22:8d:ec:8b:4c:
         84:75:b5:4c:ac:ed:e8:96:96:a5:c6:8a:54:8f:57:f2:fc:a2:
         8f:11:11:83:f1:25:83:3c:0a:f2:ab:6b:68:1b:ff:fa:3e:c8:
         a0:80:cc:23:07:39:f3:f0:5a:a5:6b:72:ea:85:92:e9:73:3f:
         7c:3f:5e:af:66:3b:f8:da:ba:7d:8b:4f:05:ce:7b:df:d7:06:
         cf:62:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:41:58 2024 by rpki-client on console-fra.rpki-client.org