Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa
File:                     3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa (raw, json)
Hash identifier:          IZajfPwU9kw9w8NOnHj8HdfalQXw8lbLaL7fXkAOMTs=
Subject key identifier:   18:C7:7E:1D:3E:E5:49:A0:F2:05:C3:52:DF:90:AA:4B:77:1C:AB:22
Certificate issuer:       /CN=4482D8FF5C5B6DD8451236171EE8F4106025EC34
Certificate serial:       4AC265D2EC689C68E3C2E80E837145C2E11EF52E
Authority key identifier: 44:82:D8:FF:5C:5B:6D:D8:45:12:36:17:1E:E8:F4:10:60:25:EC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa
Signing time:             Fri 14 Jun 2024 13:39:09 +0000
ROA not before:           Fri 14 Jun 2024 13:34:09 +0000
ROA not after:            Fri 13 Jun 2025 13:39:09 +0000
asID:                     270888
IP address blocks:        177.129.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c2:65:d2:ec:68:9c:68:e3:c2:e8:0e:83:71:45:c2:e1:1e:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4482D8FF5C5B6DD8451236171EE8F4106025EC34
        Validity
            Not Before: Jun 14 13:34:09 2024 GMT
            Not After : Jun 13 13:39:09 2025 GMT
        Subject: CN=18C77E1D3EE549A0F205C352DF90AA4B771CAB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:b2:b4:3a:12:a6:8f:a7:07:2b:64:4a:f8:
                    3f:df:86:44:a6:f4:d8:58:f7:82:9a:62:0e:d8:0d:
                    b7:ae:c0:b0:06:73:62:4c:21:c1:40:32:3e:f0:d5:
                    2d:55:ac:f3:6c:11:c7:03:98:10:a6:fc:fc:13:86:
                    04:bd:a5:db:0e:f0:df:c3:b9:99:be:f0:3f:68:0a:
                    16:64:67:e6:54:65:f0:44:bc:44:42:9c:ac:9a:4d:
                    c9:b1:ba:2d:bd:c5:ab:44:56:e2:71:ed:3b:c5:31:
                    1d:55:f7:37:f7:5e:83:f7:39:89:f4:8c:06:ea:4c:
                    5f:e2:12:07:62:8f:c6:e3:a6:09:03:eb:65:2a:35:
                    f7:ee:41:b3:24:dc:34:19:80:56:b7:16:8c:54:f2:
                    38:7b:ae:6d:12:cf:bb:f3:41:fd:cc:33:05:ce:64:
                    4e:d3:1f:c3:95:3a:d7:e2:bb:9d:51:6e:a7:36:70:
                    cb:ad:50:38:f0:1f:24:99:d3:d2:40:07:6d:df:b6:
                    d9:9f:b8:a4:79:c8:14:9c:f8:8a:bf:c1:7c:2e:ff:
                    08:50:0b:e8:af:0b:0f:9e:f5:8b:9d:1a:37:a2:67:
                    45:59:93:01:73:71:8b:c0:38:d1:72:ac:e7:b6:dc:
                    03:6f:60:c6:8b:29:44:7e:01:d5:2b:27:a9:bc:fd:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:7E:1D:3E:E5:49:A0:F2:05:C3:52:DF:90:AA:4B:77:1C:AB:22
            X509v3 Authority Key Identifier:
                keyid:44:82:D8:FF:5C:5B:6D:D8:45:12:36:17:1E:E8:F4:10:60:25:EC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4482D8FF5C5B6DD8451236171EE8F4106025EC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:03:6f:5f:86:0c:ff:70:c6:46:e4:39:c6:d4:a9:bf:6b:
         2d:2d:e6:92:5d:12:37:40:59:57:b0:60:22:d2:9e:b1:27:3e:
         0b:5d:2b:d2:ff:f0:49:96:cc:a5:1e:5a:b4:26:ab:10:65:db:
         c2:9e:d8:9f:4e:cb:44:98:82:2a:36:7f:88:7b:3b:7b:94:00:
         37:79:e3:c1:d2:e5:ff:af:f3:51:a3:97:7e:30:c7:6e:bf:22:
         0d:8a:0c:52:83:ad:2f:04:28:eb:ce:58:e3:e6:9b:64:57:13:
         a9:2e:6d:1b:b7:06:6b:f9:f0:c0:1c:42:f7:53:6b:10:77:b8:
         df:4c:87:f6:30:e7:00:70:f3:99:ec:e8:e7:6e:cf:1d:93:0d:
         e3:e6:2d:34:be:bf:6a:c0:ea:08:52:04:aa:71:09:f0:47:2f:
         19:98:2d:b1:9b:b1:67:7f:22:01:57:8a:95:6a:9d:a3:ae:46:
         d3:08:af:22:5a:c0:2c:83:e5:4d:75:80:c4:30:b9:e6:16:4c:
         db:f3:89:1c:ff:1b:3e:5c:a7:f2:cf:c6:03:ed:9a:cf:21:a1:
         02:76:64:ec:d9:e4:41:f9:a6:90:06:32:dd:b3:72:66:8e:80:
         6e:c2:28:68:fd:5a:df:ce:8a:54:78:5f:71:6b:fe:8e:3c:38:
         62:4d:d1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org