Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa
File:                     3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa (raw, json)
Hash identifier:          ejpi2LOjHJzZfGUMFtWz2xW5564PMZwbHxIVh1inMos=
Subject key identifier:   2A:04:20:31:B5:05:94:72:D0:46:4B:E9:C6:5E:94:5F:A6:C7:87:9C
Certificate issuer:       /CN=4482D8FF5C5B6DD8451236171EE8F4106025EC34
Certificate serial:       2AC7B3AD85A0841CDAF32D3CAFD825C9AED6CFDB
Authority key identifier: 44:82:D8:FF:5C:5B:6D:D8:45:12:36:17:1E:E8:F4:10:60:25:EC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa
Signing time:             Fri 14 Jun 2024 13:36:26 +0000
ROA not before:           Fri 14 Jun 2024 13:31:26 +0000
ROA not after:            Fri 13 Jun 2025 13:36:26 +0000
asID:                     270888
IP address blocks:        177.129.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c7:b3:ad:85:a0:84:1c:da:f3:2d:3c:af:d8:25:c9:ae:d6:cf:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4482D8FF5C5B6DD8451236171EE8F4106025EC34
        Validity
            Not Before: Jun 14 13:31:26 2024 GMT
            Not After : Jun 13 13:36:26 2025 GMT
        Subject: CN=2A042031B5059472D0464BE9C65E945FA6C7879C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:a2:67:28:bd:38:c6:39:0f:f5:af:95:92:
                    64:06:73:ad:09:67:21:26:92:c0:e2:35:7c:f8:c5:
                    20:5a:e2:e2:37:f1:0b:41:d2:28:0f:22:6a:a4:47:
                    e2:75:9d:87:b3:30:a8:ec:1a:c3:65:75:09:bc:75:
                    1c:88:58:5b:ec:c2:e8:01:85:5a:73:51:3c:30:d5:
                    5c:b9:ce:7d:ee:c9:47:4b:26:5a:ba:53:a1:d0:94:
                    35:8a:79:27:68:ed:5c:a6:7f:87:5d:ce:6d:85:ca:
                    9d:aa:8a:a4:b7:4d:7f:ce:f9:9e:2d:02:eb:e5:36:
                    3b:85:5c:fd:72:8c:5f:8b:c3:0f:23:45:06:51:5d:
                    f9:4b:7a:57:c5:4c:8a:46:1c:04:e9:7a:ee:e0:fd:
                    03:6d:3e:1c:31:bc:65:05:84:96:cb:0c:20:3d:21:
                    21:e4:d6:3e:3d:2c:77:69:69:44:ab:7d:55:70:63:
                    6d:95:47:0d:15:e1:60:83:82:3f:1c:c1:7f:0e:b5:
                    1e:b2:8c:4d:f3:40:57:47:63:ab:b7:f3:7d:3a:90:
                    55:3f:2f:7b:e7:0f:7e:08:38:cd:3b:f8:a8:ca:d2:
                    3f:90:d3:b6:93:76:07:47:fe:bc:4d:56:c6:21:40:
                    21:69:3c:82:f6:b2:c3:e6:7d:b3:62:13:82:0c:87:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:04:20:31:B5:05:94:72:D0:46:4B:E9:C6:5E:94:5F:A6:C7:87:9C
            X509v3 Authority Key Identifier:
                keyid:44:82:D8:FF:5C:5B:6D:D8:45:12:36:17:1E:E8:F4:10:60:25:EC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:96:3d:e3:ba:02:58:c6:c3:c4:a3:59:4b:e3:9a:92:2a:7f:
         99:81:d3:25:88:e7:e3:4a:83:d9:17:2b:b4:a0:79:dc:56:a8:
         88:5a:ad:14:48:1f:c0:f9:cc:37:d2:4d:a9:7b:72:b2:02:d6:
         12:e8:da:dd:cd:46:0a:bd:9e:fc:32:35:73:50:44:01:7e:49:
         1f:f1:6f:31:41:ee:38:22:1e:1f:e2:2f:d1:62:6e:7c:68:52:
         9d:62:cf:2e:1f:67:77:b8:25:af:d5:5b:60:74:0d:0d:d7:02:
         81:ab:9a:87:8a:58:6b:2c:57:6f:62:7e:cd:12:05:9b:4b:32:
         53:e2:e7:52:ae:e0:9a:80:73:a9:f6:01:0e:02:a1:fc:da:79:
         df:80:65:b1:55:a9:06:28:be:23:39:a6:42:33:1e:ef:90:62:
         71:bb:bd:e7:eb:e8:6e:2b:32:10:36:26:e9:a3:a8:80:3b:ac:
         4e:03:5d:7a:ee:7a:f8:d1:a1:f6:77:e8:ac:56:0f:64:8a:05:
         8c:34:b3:cb:84:ed:1c:41:d3:40:06:d5:f9:d8:4b:01:07:37:
         03:e4:75:78:30:1b:ab:3e:83:6a:18:69:16:07:d6:3b:7d:15:
         87:a7:8b:18:00:b8:b9:2a:18:b4:52:1a:f0:f6:8e:ee:49:06:
         5c:51:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org