Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          KQaG6Ue+wavMlinEVwA3STQ9yArWjUweYcRUhxUPZjI=
Subject key identifier:   6A:5E:07:DF:C3:B8:7B:1A:B5:4D:9A:AC:53:E6:54:FE:BB:87:49:5A
Certificate issuer:       /CN=33F621EAC77637AE81992A914287B98250733D51
Certificate serial:       4F952385912CCC4F13BF11B5F8660E7391918726
Authority key identifier: 33:F6:21:EA:C7:76:37:AE:81:99:2A:91:42:87:B9:82:50:73:3D:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F621EAC77637AE81992A914287B98250733D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa
Signing time:             Thu 04 Apr 2024 09:33:42 +0000
ROA not before:           Thu 04 Apr 2024 09:28:42 +0000
ROA not after:            Thu 03 Apr 2025 09:33:42 +0000
asID:                     263584
IP address blocks:        177.129.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/33F621EAC77637AE81992A914287B98250733D51.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/33F621EAC77637AE81992A914287B98250733D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F621EAC77637AE81992A914287B98250733D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:95:23:85:91:2c:cc:4f:13:bf:11:b5:f8:66:0e:73:91:91:87:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F621EAC77637AE81992A914287B98250733D51
        Validity
            Not Before: Apr  4 09:28:42 2024 GMT
            Not After : Apr  3 09:33:42 2025 GMT
        Subject: CN=6A5E07DFC3B87B1AB54D9AAC53E654FEBB87495A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:b4:18:59:80:68:db:af:88:fa:e3:ec:ab:
                    1f:dc:8d:60:06:c5:23:5b:9c:f3:4d:69:05:c9:e8:
                    b4:44:5c:2a:13:da:e2:18:74:e8:c0:0e:9c:5b:54:
                    d1:a3:ce:42:47:69:08:22:2a:65:77:64:d6:68:c7:
                    3a:4a:90:f9:dc:01:67:d0:ce:2e:4b:6b:45:1d:da:
                    fa:1b:be:3a:d4:cc:02:cd:f9:18:b4:0c:06:55:10:
                    50:10:ed:9e:d2:a1:12:d7:d7:57:aa:8b:e6:49:6f:
                    6e:89:98:62:54:d9:cd:93:02:6d:00:83:64:19:96:
                    da:bc:77:e5:73:0b:5d:ff:9b:eb:fd:55:e5:4b:28:
                    7c:83:d1:c6:57:1b:fd:52:9a:c8:93:83:e6:26:a2:
                    6c:7a:87:e2:34:0e:b4:70:a8:40:75:52:49:fb:25:
                    8f:02:71:f9:f9:e1:e3:c6:b3:41:49:94:23:57:07:
                    e7:15:82:86:da:2f:d9:70:7a:1f:75:be:8a:c1:08:
                    40:1a:9f:15:73:2c:8d:c4:f1:c8:7c:3a:79:0e:b1:
                    8f:4f:ae:6f:d6:c6:02:87:f8:32:2c:b3:b1:ca:2f:
                    10:b3:e1:7b:e2:51:6c:ea:e7:79:ec:77:ce:08:3e:
                    d7:f6:0b:22:75:6f:18:05:a0:d8:f5:13:77:75:e3:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5E:07:DF:C3:B8:7B:1A:B5:4D:9A:AC:53:E6:54:FE:BB:87:49:5A
            X509v3 Authority Key Identifier:
                keyid:33:F6:21:EA:C7:76:37:AE:81:99:2A:91:42:87:B9:82:50:73:3D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/33F621EAC77637AE81992A914287B98250733D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F621EAC77637AE81992A914287B98250733D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:b4:fd:e0:fd:ad:22:c3:f1:fe:b6:d2:e3:43:e6:29:16:
         08:96:a1:d5:e5:82:6e:70:ad:96:e6:d6:80:23:30:bf:8a:29:
         0f:36:30:cf:5b:95:58:15:0e:27:e5:96:61:cf:0a:b4:93:3d:
         83:40:47:c3:d6:d9:a2:48:80:17:c6:87:5b:aa:34:57:27:b3:
         17:c0:dc:20:4b:7a:67:72:0d:6c:b3:85:23:d0:fd:66:8e:b7:
         27:ae:04:6d:7c:de:71:2a:2c:2b:52:a3:71:1d:43:4e:96:5b:
         65:95:79:a5:c9:79:4e:50:ae:48:11:9d:5c:9b:6d:2d:01:24:
         e1:9a:b1:fd:39:43:8f:02:b5:cf:a2:27:ab:b7:28:23:d1:d1:
         a9:42:1e:a7:21:7d:fa:7b:88:27:37:d2:e1:c9:db:be:e0:47:
         dc:f3:2b:6a:cc:5e:c2:ac:b9:7f:15:f2:7f:0a:36:e9:32:3c:
         2b:83:e2:e1:45:90:e1:61:e4:1c:78:ac:a7:94:7d:d8:39:16:
         8c:93:95:fa:ea:4e:ff:ed:13:e3:c4:eb:64:bd:23:26:e3:1b:
         77:a4:6e:dd:ce:b3:c8:04:3f:5a:b0:ab:a2:a7:ea:92:08:51:
         56:b4:63:30:3b:8b:e4:87:2c:2e:c8:58:87:36:1f:b4:af:64:
         29:6d:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:11 2024 by rpki-client on console-fra.rpki-client.org