Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa
File:                     3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa (raw, json)
Hash identifier:          fvzk0VGQWxmXjpG/sP/u9YqVu5PogLgO6FeX702TQSs=
Subject key identifier:   EF:C9:9E:CA:E4:6C:D3:75:0A:5E:43:20:4F:E9:84:53:4A:84:70:B3
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       29F1F7F65A6D364582F948F021B4024F51C0760B
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa
Signing time:             Wed 03 Apr 2024 20:19:38 +0000
ROA not before:           Wed 03 Apr 2024 20:14:38 +0000
ROA not after:            Wed 02 Apr 2025 20:19:38 +0000
asID:                     262428
IP address blocks:        177.44.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl
                          rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f1:f7:f6:5a:6d:36:45:82:f9:48:f0:21:b4:02:4f:51:c0:76:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Apr  3 20:14:38 2024 GMT
            Not After : Apr  2 20:19:38 2025 GMT
        Subject: CN=EFC99ECAE46CD3750A5E43204FE984534A8470B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:77:24:cc:1e:6f:43:0c:1f:bb:9a:40:21:
                    90:d3:40:98:b0:41:40:43:2c:fc:3c:63:c9:c4:ca:
                    e0:4b:c4:68:2b:1c:d6:bd:93:71:a9:c0:aa:48:c4:
                    fc:28:b0:55:15:50:ae:3c:23:db:96:83:e1:11:7a:
                    ee:4a:22:1a:ad:b4:5e:db:c8:b2:5b:cb:47:de:c1:
                    2e:29:ce:1b:a3:d3:5f:67:0a:12:d2:a0:c9:d7:af:
                    27:df:8a:2d:31:f8:18:80:6b:9a:94:ba:ab:73:90:
                    25:3c:dc:bf:32:08:6f:bd:cd:9c:ef:d9:80:1f:6f:
                    22:96:9c:98:99:fa:fb:ba:6b:01:22:59:dd:eb:4e:
                    10:2b:d9:e9:ee:7f:a5:8d:87:67:75:f0:e9:5f:f1:
                    6f:ab:98:c1:97:98:1d:1e:e9:0f:51:41:25:43:ce:
                    d2:fd:a2:b1:65:99:c6:54:38:41:bd:ce:b8:52:67:
                    a8:34:c5:bd:32:cf:b3:7d:9e:72:91:6d:17:d9:51:
                    88:a4:d8:31:87:22:92:6b:ac:15:98:53:f6:25:ec:
                    aa:6b:76:af:4b:2c:ec:de:64:09:3b:87:9c:38:fa:
                    bf:da:63:db:f6:d7:50:56:bc:50:84:a8:07:fb:a0:
                    a2:3b:6a:94:ec:6d:94:07:05:0c:ec:08:bd:b7:c8:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:9E:CA:E4:6C:D3:75:0A:5E:43:20:4F:E9:84:53:4A:84:70:B3
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:67:3e:bc:dd:db:e4:cf:22:d6:7b:71:5a:cc:6b:87:4c:
         e1:4f:12:55:04:a0:b5:1c:83:29:32:af:9c:96:e7:33:49:49:
         d3:3a:86:11:a7:d1:96:9b:10:5c:8e:d9:3f:89:ad:a1:e0:24:
         13:01:e5:61:d1:26:af:40:26:6e:a9:0c:47:f2:87:bf:6b:a2:
         56:88:d6:b9:aa:c6:f6:3f:c9:6a:48:0c:7c:75:38:1d:3b:48:
         73:38:d4:72:27:cf:2d:6f:ae:11:93:cd:16:7c:df:d0:25:b0:
         a0:63:5d:b5:7c:66:37:03:56:b6:d8:40:b7:a2:d6:dd:6e:28:
         79:dc:e1:16:6e:49:c5:5f:1f:8d:4a:83:1e:b8:ec:aa:b4:41:
         0b:fb:4f:c2:58:38:4c:3b:8e:be:a8:de:27:1c:06:21:a2:61:
         52:43:bd:d4:39:4e:4f:7d:96:24:3a:72:14:e0:46:24:86:66:
         70:37:56:a8:0b:5e:4e:73:54:dd:68:12:04:3a:28:c8:fb:85:
         9d:fe:5d:22:df:a7:2c:3b:f4:cb:f7:26:01:1b:c6:30:3a:47:
         a0:a1:2f:8e:e5:9f:6e:72:62:40:09:8e:b7:19:cb:fe:33:d1:
         12:89:f5:0d:8b:bf:c5:09:6b:8e:08:81:b0:8d:d0:6b:2a:9e:
         be:17:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org