Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa
File:                     3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (raw, json)
Hash identifier:          8wGQioZ4VkiBVy2sVEw0B72HqGAP/bi3uDXUT5sNLEo=
Subject key identifier:   9D:95:7E:25:FC:82:7A:1F:FA:82:C2:78:57:91:A8:35:6F:8B:D2:92
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       7161EE4F262CD38CEE0D73A95308D7E877791B01
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa
Signing time:             Thu 04 Apr 2024 03:55:54 +0000
ROA not before:           Thu 04 Apr 2024 03:50:54 +0000
ROA not after:            Thu 03 Apr 2025 03:55:54 +0000
asID:                     270899
IP address blocks:        177.91.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:ee:4f:26:2c:d3:8c:ee:0d:73:a9:53:08:d7:e8:77:79:1b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Apr  4 03:50:54 2024 GMT
            Not After : Apr  3 03:55:54 2025 GMT
        Subject: CN=9D957E25FC827A1FFA82C2785791A8356F8BD292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:57:69:86:a7:5d:c4:3a:01:03:d2:77:ac:
                    6e:b3:57:8a:70:5c:68:c8:01:4f:1e:5f:d6:84:a9:
                    b6:e5:55:c7:08:f6:c5:3e:b9:eb:7a:54:30:30:72:
                    6c:df:6b:41:95:78:ee:18:a5:35:56:ed:6a:03:63:
                    66:a1:9a:7e:06:a6:40:a4:ed:ca:c7:cc:80:8b:67:
                    55:98:11:a2:7c:55:0c:4f:3a:b1:8b:12:03:9f:6c:
                    86:ee:df:c2:75:19:fc:a8:0a:a2:55:2e:04:cb:e4:
                    a1:ad:20:45:29:7e:5e:32:ea:4f:7d:08:48:7d:5e:
                    dc:e4:f7:53:a0:1d:a8:bd:e7:b8:8f:4a:a0:a4:ab:
                    14:f1:59:fa:33:0c:65:ff:32:40:d2:6a:7e:89:5e:
                    93:1a:5d:10:09:be:88:36:2b:6d:98:1d:6b:0f:8a:
                    95:8b:66:68:51:69:75:7d:52:f0:01:6c:ea:a6:70:
                    8d:f4:ab:8d:2f:ce:07:33:7f:11:7a:16:0a:23:b6:
                    eb:2e:33:49:40:46:a6:3f:7a:b3:91:98:9d:cc:20:
                    3f:69:f5:30:25:74:60:90:8e:00:b9:8c:39:bd:7e:
                    9a:04:3e:66:6a:0f:6c:c6:f5:a8:49:c0:67:e5:eb:
                    4e:a2:d2:9b:97:71:c2:6a:62:17:9c:53:1a:a3:da:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:7E:25:FC:82:7A:1F:FA:82:C2:78:57:91:A8:35:6F:8B:D2:92
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:cc:d9:ce:f2:6d:b0:d9:cd:82:78:52:0a:53:78:9e:61:
         d0:3c:6d:e1:a4:5e:51:da:9f:ea:ea:2e:bc:96:33:85:12:65:
         cd:9f:6f:69:a7:43:33:6a:16:a9:bf:44:88:c1:d3:f3:a3:ae:
         16:90:0c:a9:cf:11:c5:f3:b5:6d:44:62:1e:90:22:0d:94:32:
         9a:16:bb:78:61:8f:aa:7c:df:4e:f7:6c:46:68:ed:8f:66:51:
         2b:1c:8f:b5:4d:d9:18:5a:4f:b8:63:e4:88:ee:4d:f8:a7:7f:
         b3:f2:40:12:a6:47:a5:c3:69:a4:4b:00:73:f6:71:b4:ce:09:
         26:f9:5b:c1:a0:92:43:15:bb:f8:c1:61:fd:6a:b2:16:09:cc:
         fc:d0:27:ff:70:f8:38:cc:8e:5c:9e:96:4a:c6:a7:9c:e6:c5:
         1d:76:12:72:c6:db:ea:63:26:74:da:91:c0:6c:fb:cb:4e:d2:
         88:58:01:7d:09:b2:ee:8f:4c:7e:1e:6d:bc:49:08:12:71:c6:
         09:88:ab:d3:e5:7f:94:8b:e9:0a:f0:9f:ab:1b:30:41:3e:2b:
         1f:73:6a:61:7c:ac:47:f6:a7:65:13:b3:51:03:ce:33:71:b3:
         01:34:b5:dd:4a:44:05:66:11:02:a5:cf:8f:33:fb:97:33:87:
         a9:9a:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:44:14 2024 by rpki-client on console-ams.rpki-client.org