Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          torlNix5rAHyWQmXx6ony4RkqccedV528oicxa/zohY=
Subject key identifier:   83:E5:73:D6:A3:6B:F4:AF:87:5F:09:D3:C4:8E:CB:E3:EE:A2:00:10
Certificate issuer:       /CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Certificate serial:       0D2D015AD7B9404EAD529D1B4FB9C3F02DA90AAC
Authority key identifier: A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa
Signing time:             Mon 07 Oct 2024 18:00:38 +0000
ROA not before:           Mon 07 Oct 2024 17:55:38 +0000
ROA not after:            Mon 06 Oct 2025 18:00:38 +0000
asID:                     263584
IP address blocks:        177.129.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:01:5a:d7:b9:40:4e:ad:52:9d:1b:4f:b9:c3:f0:2d:a9:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
        Validity
            Not Before: Oct  7 17:55:38 2024 GMT
            Not After : Oct  6 18:00:38 2025 GMT
        Subject: CN=83E573D6A36BF4AF875F09D3C48ECBE3EEA20010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:46:a6:d5:9a:d3:c0:b7:08:ad:e7:23:f5:
                    6f:ff:86:b4:22:fc:74:42:3b:ba:a6:d0:ad:24:bd:
                    45:64:01:fa:07:54:f1:dc:70:b4:80:0e:e0:ef:87:
                    c5:56:24:97:71:71:8f:22:60:cc:e9:57:00:41:cc:
                    99:13:ae:50:b5:f9:5b:a3:8a:1f:26:c7:6b:05:83:
                    22:96:0a:fc:34:b5:9e:d6:3f:46:6c:d0:c2:34:39:
                    85:6f:24:43:af:cf:1f:96:0a:13:ed:e4:a9:80:f9:
                    e2:b9:4c:a8:67:21:4e:21:8f:fc:36:07:9a:d8:3d:
                    9b:f0:00:68:96:57:5d:f2:50:21:f2:8f:a9:66:51:
                    c7:22:43:92:78:24:17:18:cb:dc:ba:be:b6:1b:73:
                    97:ce:4e:a0:a4:6c:dc:c6:87:bb:39:7c:f4:9f:8b:
                    8a:ce:02:83:e1:8b:be:44:e7:f1:6a:e1:e9:71:ab:
                    88:64:62:9e:8b:86:d3:b9:b9:23:4c:f0:10:6b:db:
                    3b:3b:c8:94:54:90:81:82:59:87:a9:ed:c8:81:58:
                    71:b2:0d:41:71:74:80:d7:69:2e:6c:ce:08:da:0f:
                    31:dc:49:93:d7:58:27:c4:f6:bd:55:01:23:cd:de:
                    c5:71:cf:4b:53:0d:b4:38:bd:81:d9:5c:0f:46:49:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E5:73:D6:A3:6B:F4:AF:87:5F:09:D3:C4:8E:CB:E3:EE:A2:00:10
            X509v3 Authority Key Identifier:
                keyid:A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:7e:88:31:d1:da:e1:e4:dc:df:d5:79:aa:83:e2:ac:4e:e6:
         32:f6:34:ae:08:2b:dd:e9:f4:42:68:54:aa:63:2d:63:62:c2:
         ac:ce:63:2a:b5:ab:44:69:c6:5d:08:d8:3a:96:d5:a8:a3:9a:
         1c:dc:a8:bf:68:4e:4d:5b:8c:b0:02:a2:ca:d0:b4:1b:75:2b:
         1d:86:8f:1a:5c:fe:20:00:5d:06:6c:29:11:99:50:93:1d:d8:
         51:09:8d:66:de:d8:ca:a3:a5:eb:a5:05:6d:5d:97:bc:5b:51:
         ef:53:2e:58:96:db:18:f9:36:2f:37:88:9d:aa:54:00:3f:9b:
         6a:20:56:16:58:1b:61:5a:da:f9:8b:0d:ef:a9:9f:02:22:01:
         d4:b8:28:53:fd:46:23:33:b7:10:47:41:71:50:71:ba:75:2b:
         2b:62:5a:3a:03:2e:30:31:f1:f8:4c:82:18:fe:11:0c:bb:11:
         c8:2f:b7:df:69:a1:e1:4a:ce:60:f7:75:1e:94:bd:da:1f:b5:
         ee:95:3f:e4:69:38:73:79:b4:15:cd:e1:98:27:a4:0b:d0:3b:
         d3:b6:f9:02:d2:91:5a:ec:3f:30:08:76:08:dc:55:ac:a7:c3:
         27:4e:24:8b:fa:7a:e9:55:1f:4b:60:fd:22:58:11:fd:6a:24:
         c3:9f:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:47 2024 by rpki-client on console-fra.rpki-client.org