Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa
File:                     3137372e33362e302e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          MUeGi4a33bKwoIB/+2/TXsxVqyTmm99MrdGqF1K0txo=
Subject key identifier:   C7:7B:32:D7:0C:A5:F3:F0:82:55:21:BF:B8:05:CE:F7:F3:67:30:6F
Certificate issuer:       /CN=B1FAF030A01493504761E684192B146956A636E6
Certificate serial:       652A341A1B82B4504E07C23D8B04E9BF7E4354E6
Authority key identifier: B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa
Signing time:             Fri 30 Aug 2024 17:19:35 +0000
ROA not before:           Fri 30 Aug 2024 17:14:35 +0000
ROA not after:            Fri 29 Aug 2025 17:19:35 +0000
asID:                     52965
IP address blocks:        177.36.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2a:34:1a:1b:82:b4:50:4e:07:c2:3d:8b:04:e9:bf:7e:43:54:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FAF030A01493504761E684192B146956A636E6
        Validity
            Not Before: Aug 30 17:14:35 2024 GMT
            Not After : Aug 29 17:19:35 2025 GMT
        Subject: CN=C77B32D70CA5F3F0825521BFB805CEF7F367306F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:a8:ae:09:6c:0a:3c:ee:66:7d:14:a7:36:
                    9b:6d:ac:6d:09:ce:7f:33:03:b7:00:20:7a:2f:d8:
                    d2:4f:39:ee:ba:4e:3b:8c:57:34:82:51:b4:15:d6:
                    7c:08:27:fe:f0:38:b3:34:c4:42:25:a5:6a:a4:0b:
                    69:70:ed:d9:f0:d8:b5:83:1a:c2:68:29:77:db:2b:
                    c4:3d:8d:6e:c8:7a:08:4e:48:38:76:e1:ee:63:4e:
                    01:15:33:4e:c9:9e:28:7d:77:71:2a:ad:ed:bd:b5:
                    82:fc:5d:7d:b9:2e:b4:90:d5:39:e7:1e:35:93:56:
                    ff:b3:e8:44:94:49:b0:a3:95:3a:ee:53:17:6f:13:
                    02:91:6e:2e:d3:66:46:33:d4:18:8c:8c:f4:61:29:
                    dc:01:c8:0d:f1:a8:19:96:45:a8:01:09:a7:17:aa:
                    53:28:88:70:33:59:d9:25:1b:94:8b:18:57:22:70:
                    b2:75:19:87:a8:92:ac:47:10:06:0c:5f:fb:a3:9f:
                    f0:cf:f6:b7:f4:61:02:2a:ec:34:a6:9a:17:76:5b:
                    b8:0e:f8:79:a9:7a:fe:11:c8:b7:12:22:80:d0:a9:
                    c5:dd:9a:06:f6:2f:0f:a4:b3:3f:a3:40:09:fb:c9:
                    b7:bf:bd:f4:f2:0d:ea:8b:ee:55:d5:8d:d9:92:f2:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:32:D7:0C:A5:F3:F0:82:55:21:BF:B8:05:CE:F7:F3:67:30:6F
            X509v3 Authority Key Identifier:
                keyid:B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:39:6d:9f:e4:49:f5:57:f2:b1:37:24:8f:03:e5:c1:f2:27:
         3e:ff:f3:ff:ca:0e:67:6c:cb:cd:26:18:26:2b:fa:a4:54:9e:
         6e:9d:3b:b8:01:28:13:03:b1:8a:27:68:79:be:3e:7e:3b:60:
         d4:9d:93:12:d5:1c:67:67:a9:2b:82:b1:c6:a7:f7:18:08:47:
         ba:b5:89:90:2c:1a:a2:80:dc:b6:bc:ec:d5:51:ed:6a:c2:f4:
         6f:8d:97:4d:79:80:b3:69:6d:26:35:f9:d6:8e:b0:e4:1b:40:
         63:f8:d0:58:c1:88:79:fe:bf:a1:31:75:50:09:90:69:0a:04:
         16:7a:ce:c0:11:5d:35:82:84:17:d6:9b:26:23:e2:0e:e7:33:
         52:1d:d6:e4:05:87:d4:9e:3f:2c:52:75:cc:29:8b:c2:25:2c:
         61:ac:43:b6:89:07:b5:6e:06:63:db:06:1d:2b:24:5d:c8:3b:
         d2:a7:cb:77:fc:77:1c:4f:ac:26:9d:d8:8a:6f:de:e9:55:62:
         02:46:4d:7f:84:0f:1f:0d:50:65:24:48:4c:c3:25:c7:ce:fa:
         51:07:15:88:e7:54:3c:5c:b8:8c:d8:20:40:c8:6e:e9:98:87:
         30:86:cd:75:86:90:d4:d8:d7:1d:7d:fb:76:2f:da:53:35:6b:
         ae:ab:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:00 2024 by rpki-client on console-ams.rpki-client.org