Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa
File:                     3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (raw, json)
Hash identifier:          nMyBHpxj7Qr4kEKQlr7s5ehXcDc1dlsxaHH0sUym0fs=
Subject key identifier:   77:E7:D1:1C:C6:9D:0E:D8:46:74:23:58:50:4D:09:F7:3F:A3:56:47
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       641936E18A26022231AB00FC1B220CE2D91BD2B2
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa
Signing time:             Thu 04 Apr 2024 03:55:56 +0000
ROA not before:           Thu 04 Apr 2024 03:50:56 +0000
ROA not after:            Thu 03 Apr 2025 03:55:56 +0000
asID:                     270899
IP address blocks:        177.91.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:36:e1:8a:26:02:22:31:ab:00:fc:1b:22:0c:e2:d9:1b:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Apr  4 03:50:56 2024 GMT
            Not After : Apr  3 03:55:56 2025 GMT
        Subject: CN=77E7D11CC69D0ED846742358504D09F73FA35647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:94:42:d9:60:39:16:c5:4c:ce:96:cb:55:
                    24:c8:3d:f3:55:cf:98:0c:c5:41:56:0a:9e:47:00:
                    da:af:a8:13:d4:3e:08:15:f4:da:38:e5:6c:6b:b6:
                    88:e0:e9:be:ab:c5:23:12:45:a7:11:31:8c:6b:37:
                    ef:80:30:60:27:7f:90:4d:37:72:89:35:a9:03:71:
                    e2:7e:22:a1:b4:bf:bc:d8:04:33:90:bd:c3:2a:0e:
                    52:a7:3e:eb:47:b4:fe:df:6d:66:d3:03:da:fb:21:
                    70:c8:8f:8a:fc:cd:83:df:a4:3c:9e:f6:d0:9a:86:
                    2a:98:12:92:4c:c9:20:37:72:99:e9:78:de:a5:74:
                    33:3c:61:33:3f:72:d7:f7:78:55:de:6c:cd:b4:a0:
                    95:af:04:03:02:0f:6c:3f:0a:85:f9:72:5e:e4:5e:
                    3f:f3:a4:c4:fa:80:03:6d:97:f5:1e:cf:3b:f9:8a:
                    10:17:aa:fb:b3:f6:b4:02:3f:59:85:a7:ef:40:4c:
                    49:de:b6:75:34:d1:d7:63:23:dd:9d:ea:88:52:b1:
                    a3:8c:b0:22:0f:d3:28:d2:01:2a:81:61:b9:de:f7:
                    04:8c:1f:4f:b1:80:43:b0:a4:55:5c:44:cd:6d:5a:
                    6d:fc:70:07:0b:a6:43:71:aa:02:ed:cc:f0:db:af:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E7:D1:1C:C6:9D:0E:D8:46:74:23:58:50:4D:09:F7:3F:A3:56:47
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:83:26:9a:53:89:54:1e:bc:46:75:c6:79:0d:5a:d2:1e:
         46:88:de:be:03:76:b7:79:6f:f8:20:e6:45:eb:86:30:2a:f3:
         74:25:25:f7:30:d4:df:ce:1e:ea:79:6d:66:df:de:cd:54:41:
         ff:fa:e5:87:7b:55:c0:a1:4b:b1:5f:d4:02:bb:cf:a4:a3:e3:
         98:e9:17:6e:70:90:0f:ac:d2:16:47:4f:2c:fa:ce:19:37:db:
         56:4c:b7:21:48:06:67:63:56:7f:da:9a:ea:2c:23:56:12:2f:
         1d:e7:30:13:4b:a7:d4:25:c9:ac:f2:c4:45:84:c2:32:49:1c:
         be:9f:ae:24:7d:0d:24:52:32:39:3a:86:6e:98:c8:e6:4f:bd:
         70:bc:8c:c5:69:34:15:8e:95:5c:ed:ce:6a:6d:69:7c:5c:1f:
         1e:11:58:95:66:10:67:12:2b:2c:2a:81:b5:bf:1e:4a:04:d5:
         b8:80:ff:24:4b:9d:b8:a6:f3:58:50:39:65:4f:79:ae:5c:50:
         63:2d:77:c5:e6:0f:14:6d:9f:ab:4c:73:3c:10:9e:28:32:ea:
         02:f4:37:b2:c0:dc:28:43:09:8b:4f:3a:9c:6c:52:84:3f:f4:
         58:10:f8:40:fb:7e:09:4a:33:e6:c6:f3:a7:17:be:18:53:e4:
         5a:d5:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org