Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32322d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          hjsfkYOrnimOTlzZssbbkaGX9FXBvCpTAKmyppL1HZU=
Subject key identifier:   5D:C3:0A:97:6D:E4:A7:CD:A7:97:7B:DD:D9:D3:E8:AD:79:87:44:52
Certificate issuer:       /CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
Certificate serial:       34E9374C4B40DF49AD1A74FFAC639DF01F23B443
Authority key identifier: 7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
Signing time:             Tue 04 Jun 2024 13:28:10 +0000
ROA not before:           Tue 04 Jun 2024 13:23:10 +0000
ROA not after:            Tue 03 Jun 2025 13:28:10 +0000
asID:                     271042
IP address blocks:        177.36.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 12:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:37:4c:4b:40:df:49:ad:1a:74:ff:ac:63:9d:f0:1f:23:b4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
        Validity
            Not Before: Jun  4 13:23:10 2024 GMT
            Not After : Jun  3 13:28:10 2025 GMT
        Subject: CN=5DC30A976DE4A7CDA7977BDDD9D3E8AD79874452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:20:27:74:53:ed:6b:2c:7c:af:db:26:a1:
                    44:b5:49:37:15:1e:ba:cd:35:50:44:e6:de:3b:3e:
                    09:83:87:1a:b2:c3:bb:61:4c:55:40:86:fc:fa:91:
                    6d:d8:8e:30:32:16:61:7f:16:c3:47:a6:15:d5:7f:
                    e0:9c:7c:17:ab:1c:7c:4c:95:cc:6d:2a:c7:99:83:
                    9f:1e:eb:d1:5a:51:d8:d4:95:ce:b3:9f:e8:36:07:
                    ee:e8:83:61:45:0e:44:67:51:52:32:36:73:92:db:
                    ed:20:b5:5c:96:a7:68:0a:29:9e:41:fd:81:0b:fa:
                    48:5a:87:5c:3d:d6:05:87:4e:41:d4:3e:54:48:be:
                    ab:a7:49:84:78:d1:55:27:d8:63:1b:d0:21:7d:61:
                    ff:44:80:c8:78:8d:d1:d1:89:f2:94:b3:6c:27:35:
                    cf:bd:b5:1e:73:cd:9c:60:c0:10:17:01:4e:d5:b1:
                    b0:53:95:ad:4b:96:bc:a2:af:9e:6b:64:3e:fe:43:
                    d9:60:fa:a6:c4:db:e9:fb:2c:34:2d:f1:6b:92:69:
                    40:37:e0:81:76:cb:bc:b7:27:0b:29:fb:78:d1:d9:
                    14:bc:3e:1b:a8:42:58:95:ee:2c:0e:f8:8c:28:6e:
                    7a:3e:1b:60:85:78:8c:80:df:42:7a:d0:c6:e3:03:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:0A:97:6D:E4:A7:CD:A7:97:7B:DD:D9:D3:E8:AD:79:87:44:52
            X509v3 Authority Key Identifier:
                keyid:7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:5e:6c:21:0f:28:f0:fb:7c:b9:82:dd:d2:9c:33:d9:d7:
         dc:2d:b9:c0:16:7b:d4:4a:14:77:d1:01:b0:bf:86:08:b5:f0:
         f1:9b:10:b1:0c:59:96:32:0c:ba:17:3b:29:d5:fa:3c:e1:b5:
         97:db:23:42:b6:f4:81:6e:da:8a:49:b0:47:fc:c7:13:3e:cf:
         1d:4c:8f:df:37:52:7f:1e:43:65:98:02:e3:e0:7a:17:5f:44:
         20:3e:28:9e:13:67:4e:42:31:16:62:8a:84:5b:02:f9:45:13:
         01:bd:14:bb:20:c3:bd:61:a8:b0:8a:9c:10:f7:56:3d:2b:d3:
         a9:17:8c:44:af:6e:ee:5d:a0:82:6c:f8:3d:00:31:dc:fa:e3:
         82:88:63:51:4d:42:cd:63:2d:77:f3:f1:e1:26:87:fe:41:65:
         97:c9:54:c7:d5:15:71:bd:48:29:86:6f:b8:c1:8a:4f:1d:72:
         f4:88:3d:1c:9d:58:50:87:2c:9c:82:15:00:b8:5c:09:98:05:
         62:18:73:33:e4:2d:c5:eb:f8:83:4b:64:06:42:79:ad:be:58:
         7e:a7:59:f5:90:23:d3:17:23:f0:81:f0:e2:85:81:06:6e:e9:
         4c:f0:1a:a5:9b:f8:a8:a0:86:6b:72:c9:c8:7b:3b:0c:d7:86:
         13:70:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 10:45:06 2024 by rpki-client on console-fra.rpki-client.org