Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa
File:                     3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          cYUDQcdZeQEMofRAFnaFfnssnLgM8qR5q1TNmp4mubc=
Subject key identifier:   2E:35:D6:DA:DB:9B:08:21:6D:62:1F:70:EA:64:89:D3:AF:1F:48:25
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       6DE92E35AAC52293E766FD1B51682353EA4081A8
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 17 May 2024 13:50:30 +0000
ROA not before:           Fri 17 May 2024 13:45:30 +0000
ROA not after:            Fri 16 May 2025 13:50:30 +0000
asID:                     22356
IP address blocks:        177.190.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e9:2e:35:aa:c5:22:93:e7:66:fd:1b:51:68:23:53:ea:40:81:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: May 17 13:45:30 2024 GMT
            Not After : May 16 13:50:30 2025 GMT
        Subject: CN=2E35D6DADB9B08216D621F70EA6489D3AF1F4825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:62:59:9a:08:f2:78:44:06:e7:fb:a3:56:
                    a0:17:33:ea:96:69:01:f3:7c:1a:2b:f3:94:80:b8:
                    3c:ae:19:90:9a:73:2c:64:d0:60:c7:89:e8:01:bc:
                    28:0c:e4:93:23:78:13:9b:ee:90:06:ac:c1:31:ed:
                    bf:6c:53:4f:ce:42:8f:99:f9:10:6b:77:77:cd:f9:
                    03:43:6d:ed:bd:0d:ac:b4:9f:82:dc:8c:bf:c7:c2:
                    ca:9e:27:dd:d6:cc:95:86:c4:82:d0:ac:2b:cf:d4:
                    b1:78:4b:f8:6e:87:b6:ac:a3:2a:59:85:97:57:c9:
                    ae:cb:63:54:46:94:9f:87:d0:88:12:a4:05:3b:e9:
                    e9:59:0b:b9:1b:a1:ab:3c:f4:4c:c7:3c:72:19:e9:
                    66:24:f0:57:2c:d8:6b:19:80:d9:be:94:8a:c3:2a:
                    a1:31:1b:60:fc:73:d2:75:5f:27:ed:f3:b7:2b:96:
                    6d:78:9c:c3:95:e1:5c:21:96:5b:da:92:8e:c0:90:
                    a4:44:90:41:2a:81:06:0d:a7:3a:90:8d:7e:15:79:
                    94:b3:0e:c0:0a:6b:f9:1a:16:ac:16:18:e9:e7:db:
                    ef:1f:e1:c6:e5:d8:d9:8d:fa:b1:ac:c6:84:b5:ec:
                    cc:27:a3:df:04:cc:1d:a2:08:04:d7:6e:cc:d1:31:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:D6:DA:DB:9B:08:21:6D:62:1F:70:EA:64:89:D3:AF:1F:48:25
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:1e:af:a5:ff:8f:90:9c:70:23:0a:d7:0e:33:d5:fe:9e:
         a8:93:87:ea:18:26:17:0b:e4:13:ac:90:7f:55:5c:e1:cb:5d:
         26:99:a9:31:6c:ad:fe:51:75:35:39:ec:d7:63:d2:a8:bd:19:
         e9:28:b2:6f:7c:09:f9:1e:b8:25:86:e5:a9:de:ee:4b:9e:49:
         72:5b:9f:6e:c3:46:df:3d:86:5b:09:e2:90:d8:05:dd:43:db:
         b8:a8:2b:d0:35:06:c8:60:54:7b:a6:d1:62:c8:16:f2:64:40:
         df:b7:ce:d0:fd:a2:e5:e0:18:0e:8d:5b:93:d0:fc:6c:19:73:
         c7:5d:99:a9:68:2a:35:14:39:f5:da:e0:6d:42:c0:dc:10:84:
         bd:b2:66:d6:51:7b:cd:5d:bb:4b:36:9c:86:96:56:ad:c7:68:
         69:dd:f5:96:2f:0b:f5:c0:7a:66:dc:1f:6a:0b:8d:4b:83:5a:
         4b:8c:42:ee:3d:2a:de:10:f7:bc:9c:8a:43:4e:83:f6:31:ba:
         31:34:fd:5d:13:cc:5f:a7:6e:5d:f8:9c:dc:50:82:7a:38:b0:
         9f:7f:36:60:79:2a:95:3c:06:1f:7d:8b:c7:0f:af:f5:cd:15:
         25:ea:a0:68:b9:e1:8b:dd:04:3b:b9:43:39:e7:b9:0e:9d:6a:
         71:71:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:33 2025 by rpki-client