Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa
File:                     3137372e31302e302e302f32302d3234203d3e203533323330.roa (raw, json)
Hash identifier:          vX8WqI212cFZBYJw/8Vha2T0YADP/LSzaoQ2jV4VLkE=
Subject key identifier:   D5:D9:16:89:E5:F8:18:04:14:88:8F:2E:4E:31:51:BB:AC:D0:32:C6
Certificate issuer:       /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial:       39A3AD2DB71CCD264F1C2D2BEAA6677DD4B38B9E
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa
Signing time:             Thu 04 Apr 2024 07:22:23 +0000
ROA not before:           Thu 04 Apr 2024 07:17:23 +0000
ROA not after:            Thu 03 Apr 2025 07:22:23 +0000
asID:                     53230
IP address blocks:        177.10.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
                          rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:ad:2d:b7:1c:cd:26:4f:1c:2d:2b:ea:a6:67:7d:d4:b3:8b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
        Validity
            Not Before: Apr  4 07:17:23 2024 GMT
            Not After : Apr  3 07:22:23 2025 GMT
        Subject: CN=D5D91689E5F8180414888F2E4E3151BBACD032C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:e6:69:c3:85:1d:7e:b4:13:e9:01:6e:8a:
                    c3:2e:56:9f:af:a4:82:43:25:28:30:9a:d0:ca:9c:
                    8c:4d:3a:a7:c9:c0:b2:2e:6b:79:bb:91:c6:09:44:
                    d0:66:06:fb:9c:26:f9:68:de:45:90:9e:19:27:2e:
                    38:d4:e3:b9:85:af:24:2c:64:0b:66:69:d1:fc:66:
                    42:bc:5d:b8:3e:7c:f6:b1:27:45:2e:e0:bc:e5:cd:
                    09:31:20:d1:e0:be:a4:1a:4c:d1:c0:03:f0:16:f9:
                    70:ec:98:47:9a:70:25:65:07:6b:34:1e:29:22:3b:
                    b0:b0:54:64:d9:22:83:d4:76:71:18:e2:de:81:66:
                    9b:98:f9:e4:24:e2:bf:a1:19:ff:9b:8f:86:9b:26:
                    cc:ef:60:24:71:30:70:6f:87:73:2f:bf:4a:65:72:
                    92:3c:39:84:6f:e9:3d:1b:0f:f7:26:ac:42:5e:54:
                    bf:00:3f:8c:bb:7a:d5:32:68:28:cd:e0:3f:6a:b6:
                    9b:40:70:46:6b:12:7e:45:46:58:2f:68:28:d7:51:
                    6c:01:b1:ef:c4:02:c6:ae:ca:00:98:a9:b1:29:6a:
                    db:22:b7:1b:3c:e9:ef:b1:07:49:a0:30:ef:82:79:
                    21:05:f5:08:3b:29:12:f6:cf:a7:55:02:fe:2a:d7:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:16:89:E5:F8:18:04:14:88:8F:2E:4E:31:51:BB:AC:D0:32:C6
            X509v3 Authority Key Identifier:
                keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:27:a7:e7:36:08:62:8d:9e:5a:ee:08:26:66:42:4e:ab:aa:
         52:8c:e3:5e:93:18:b4:61:8e:95:3f:b3:a8:7a:2d:f3:9a:e6:
         44:db:72:71:0b:f5:ac:1a:45:3c:05:da:ff:39:29:34:72:8a:
         8f:15:3f:a9:cb:b5:24:48:31:db:fd:81:a3:3b:1b:86:2f:d4:
         89:e1:1b:c3:bc:97:a0:19:7a:9e:91:30:f6:18:19:f3:9b:27:
         6a:1d:9c:aa:b9:4c:ee:68:20:b9:07:5c:84:fe:1d:55:2b:0a:
         63:5b:53:26:f7:81:30:6c:1f:db:84:49:fd:43:96:8f:b4:00:
         40:e9:9a:ab:3d:d0:39:41:c0:b8:13:8b:30:e3:7c:fb:b0:1d:
         ff:c2:df:22:0d:d2:ae:60:e8:68:14:d0:1a:7b:3d:d1:c7:10:
         c9:7d:55:d8:08:d8:dc:36:cd:3b:a4:80:35:c4:01:8a:f4:b3:
         66:d7:64:47:67:10:aa:5f:2e:f7:b9:ce:54:cd:52:72:80:f8:
         ed:de:f1:1c:a4:7f:a6:05:a1:31:5f:7d:88:1b:38:7d:ed:18:
         4a:11:79:39:24:66:dd:6a:d2:82:43:27:f4:d3:fb:b6:4f:e8:
         92:be:82:f0:12:8a:b3:45:60:6f:da:6e:c7:21:77:b1:a9:80:
         5b:ae:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org