Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3138362e3233332e31362e302f32312d3332203d3e20323632373737.roa
File:                     3138362e3233332e31362e302f32312d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          tD/GK5wFb/TLhw3jTK1dYSgyE9uuhhWngjMhjLwuAgE=
Subject key identifier:   24:A4:4B:9E:FA:15:B4:08:D4:31:DE:AB:17:22:24:3F:53:39:29:07
Certificate issuer:       /CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Certificate serial:       64DDB4A8A8A85F689EF1FE0B116332E2D408AD47
Authority key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3138362e3233332e31362e302f32312d3332203d3e20323632373737.roa
Signing time:             Thu 04 Apr 2024 05:45:36 +0000
ROA not before:           Thu 04 Apr 2024 05:40:36 +0000
ROA not after:            Thu 03 Apr 2025 05:45:36 +0000
asID:                     262777
IP address blocks:        186.233.16.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dd:b4:a8:a8:a8:5f:68:9e:f1:fe:0b:11:63:32:e2:d4:08:ad:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
        Validity
            Not Before: Apr  4 05:40:36 2024 GMT
            Not After : Apr  3 05:45:36 2025 GMT
        Subject: CN=24A44B9EFA15B408D431DEAB1722243F53392907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:a6:3a:b0:c3:96:f9:93:77:77:4b:17:fd:
                    15:10:de:ab:67:78:80:b1:d6:06:45:31:eb:b7:41:
                    3d:d5:75:30:cb:fc:64:b6:a3:d0:d7:56:92:3d:2b:
                    8a:6b:a2:9e:1b:a3:ba:d6:15:71:d3:c3:fa:a4:72:
                    07:b0:ad:8a:b8:e1:7c:4e:45:e3:5d:ef:ff:cd:64:
                    a9:a9:1f:ad:85:79:07:cb:58:a7:be:23:da:c8:a7:
                    dc:47:1a:39:83:6e:04:db:95:1a:80:08:f8:74:12:
                    b0:fa:84:1d:c2:80:ff:e1:cc:05:33:93:98:8e:c4:
                    3d:2e:e7:ab:2b:2f:e2:fd:2f:f8:12:40:53:3b:62:
                    13:0e:52:5c:b0:dd:70:ec:60:ec:d4:c2:b5:9c:08:
                    f3:25:e9:4f:f6:14:ad:c3:be:ee:bb:9b:df:a0:5b:
                    29:36:0e:ef:7b:d1:eb:54:e5:24:0c:6c:fd:6d:7f:
                    04:3c:dc:49:36:07:26:d5:2a:f7:cf:cb:c6:ed:ea:
                    64:53:01:d2:c9:58:ea:3e:0c:4e:65:33:cb:4e:95:
                    ba:3f:59:eb:fc:2b:8a:e5:ca:ed:b4:45:49:c2:cc:
                    3b:1e:e1:08:6e:fb:87:15:ec:71:ef:db:ce:cd:c3:
                    a3:2d:ec:3a:6e:69:19:a7:7c:0b:62:69:2d:c6:3e:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:4B:9E:FA:15:B4:08:D4:31:DE:AB:17:22:24:3F:53:39:29:07
            X509v3 Authority Key Identifier:
                keyid:47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3138362e3233332e31362e302f32312d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:23:06:2c:e8:5b:36:3e:e1:75:b7:0f:bd:bd:77:3b:e3:
         34:81:b9:f3:b2:36:f9:75:fb:10:fc:be:36:81:c9:6a:ab:6b:
         8e:c4:c9:51:6b:1c:87:67:7e:e6:47:01:ab:cc:45:91:16:f8:
         14:c4:dc:06:91:8d:50:45:b2:7c:80:5d:23:c3:a1:20:30:fc:
         03:6d:4a:ee:71:8f:f5:84:8e:8e:14:b3:8a:77:cb:6f:40:e9:
         ea:2b:a4:ed:35:85:87:13:7f:40:ee:9b:c6:16:a8:a4:c3:ec:
         0c:46:ca:51:40:c7:d2:13:df:7e:77:36:a8:db:07:29:4b:4b:
         ea:b6:ca:93:4b:95:91:0e:40:85:42:0a:77:e1:e8:fa:a8:a1:
         b7:e7:7f:e0:9b:6c:dc:84:42:1c:3b:be:d4:2a:70:4b:c8:3a:
         6d:1f:c1:40:59:e5:04:91:6d:44:fe:b9:97:ef:ef:aa:07:ba:
         94:1b:6f:ce:eb:82:60:6f:67:eb:48:e2:e6:66:65:11:56:bf:
         df:18:0c:03:cd:23:50:84:4b:81:88:bb:2c:3c:ff:69:67:c5:
         fb:68:1d:53:77:87:3c:f0:da:b9:6b:fa:08:47:bf:0e:0b:27:
         07:75:c6:8c:33:11:b1:80:82:4d:b0:a9:1e:1e:aa:d2:b0:c3:
         48:5c:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org