Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa
File:                     3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa (raw, json)
Hash identifier:          Bfh4yLZdnkH5FsXoY1pw3Tx+mQIvLMYoYlAak9r+lL8=
Subject key identifier:   09:82:85:CD:AF:EC:04:17:5D:DB:1F:F0:70:0C:26:DA:D7:0E:64:ED
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       17C3BE1E8D8EA1BDDB5760BF787EB480500B0040
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa
Signing time:             Thu 25 Apr 2024 17:30:45 +0000
ROA not before:           Thu 25 Apr 2024 17:25:45 +0000
ROA not after:            Thu 24 Apr 2025 17:30:45 +0000
asID:                     262566
IP address blocks:        177.129.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c3:be:1e:8d:8e:a1:bd:db:57:60:bf:78:7e:b4:80:50:0b:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Apr 25 17:25:45 2024 GMT
            Not After : Apr 24 17:30:45 2025 GMT
        Subject: CN=098285CDAFEC04175DDB1FF0700C26DAD70E64ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:4c:80:75:1c:39:72:d5:e4:18:2f:d4:06:
                    88:88:c9:da:f9:f6:99:27:8d:15:f9:e8:7c:18:dc:
                    8b:c6:30:2a:9e:10:26:3e:ad:35:2c:c2:db:5d:bd:
                    5a:77:4d:ac:15:54:a1:bd:91:f8:bf:4c:ee:6d:47:
                    90:7a:07:b4:c6:fb:07:ba:4c:c3:71:8a:d0:f2:95:
                    39:89:9f:9a:1d:d3:da:d8:3c:e4:f5:fd:2f:1a:3b:
                    5a:26:2f:ee:41:ec:ca:c8:5d:e8:05:3b:ff:78:02:
                    e8:d0:35:0e:a2:b4:ac:f5:69:b1:78:89:ad:2f:90:
                    d4:73:1e:72:84:c4:a4:67:f0:70:a7:b2:f3:d5:d6:
                    da:6e:48:2d:e6:01:59:81:2b:c9:0e:97:d4:24:33:
                    38:d7:e8:91:a0:00:16:87:34:1e:78:e9:80:18:68:
                    1d:06:4a:cb:a2:fa:a1:e7:16:f0:17:11:f2:72:78:
                    38:db:99:20:ec:92:cd:32:9c:14:70:46:51:94:1c:
                    6c:db:37:07:15:5a:ca:70:0d:a6:c6:af:33:c6:63:
                    57:ba:37:14:04:68:fc:02:ac:a6:95:ce:99:8a:ee:
                    39:cf:78:b5:1c:af:52:98:5c:ac:43:4d:03:7b:04:
                    b5:64:b5:5d:6a:d2:fe:d4:cc:e1:7b:17:69:04:15:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:85:CD:AF:EC:04:17:5D:DB:1F:F0:70:0C:26:DA:D7:0E:64:ED
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138382e302f32342d3234203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:19:a6:3c:2a:7e:6e:5f:79:a2:9b:db:a4:35:a9:83:d5:
         f1:5a:f7:05:06:f6:4a:fb:58:49:86:65:d4:92:a9:59:b1:c8:
         bb:af:a7:6e:e3:56:0d:e0:3d:56:1a:14:d6:0b:9d:c0:5e:7d:
         2b:39:2c:6b:1f:be:95:c2:a9:20:71:60:a6:fc:33:b9:c5:a0:
         fc:82:4f:0d:37:d7:90:c0:2c:3f:46:e6:f6:d4:18:9b:a4:50:
         92:b4:84:f8:49:cd:d5:36:dd:b9:ad:44:23:94:d7:40:88:bb:
         e5:7d:04:15:79:1e:45:75:74:b6:90:37:4f:3d:96:61:3c:5e:
         7e:3e:d3:56:ee:c0:2f:21:be:71:2a:9d:39:31:dd:cd:50:72:
         7e:cd:45:bd:e6:54:93:98:71:d5:9e:21:b3:1d:47:97:6e:e4:
         75:dc:da:53:52:80:4b:2b:fb:a1:d4:10:d5:cc:44:0f:56:ee:
         38:01:e8:89:cf:4f:90:01:4d:3c:28:5b:c9:36:11:b9:40:92:
         61:0f:41:cc:ab:97:d0:c3:5b:6b:3c:78:17:a5:95:92:55:43:
         7d:dd:2a:c9:03:b0:67:67:6b:3a:9c:26:ef:4d:40:4f:0a:de:
         3e:56:27:5b:5f:18:69:bc:d6:3a:f6:e5:31:b5:cd:2b:fb:50:
         b6:51:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:22 2024 by rpki-client on console-ams.rpki-client.org