Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3133372e38382e302f32312d3332203d3e20323632373733.roa
File:                     3137372e3133372e38382e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          66C3txBqwWzu95aiONacUWHps/ON0JUuLs4Qkew52OE=
Subject key identifier:   25:E2:40:35:66:57:E4:04:F9:25:1E:2B:26:37:26:4F:E6:0E:5E:E8
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4AD4614FA927F053B82527E31181FC56BE1AB347
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3133372e38382e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 15:07:11 +0000
ROA not before:           Mon 09 Sep 2024 15:02:11 +0000
ROA not after:            Mon 08 Sep 2025 15:07:11 +0000
asID:                     262773
IP address blocks:        177.137.88.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:61:4f:a9:27:f0:53:b8:25:27:e3:11:81:fc:56:be:1a:b3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 15:02:11 2024 GMT
            Not After : Sep  8 15:07:11 2025 GMT
        Subject: CN=25E240356657E404F9251E2B2637264FE60E5EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:f5:2e:36:65:2e:b2:bc:b0:22:c8:8e:e6:
                    4a:24:d6:bd:cd:a6:83:bc:eb:f3:0f:88:a2:98:fd:
                    56:32:ce:e7:b8:6d:3d:96:cc:d6:b2:20:85:05:11:
                    0f:f7:22:0d:55:8d:02:e4:a1:34:ba:41:6e:a4:50:
                    50:98:19:b7:8d:2b:38:d4:c5:6e:9f:0f:1d:7a:5d:
                    50:7b:48:ff:d8:3c:14:bb:58:71:7d:0f:06:4b:63:
                    da:6d:1e:fb:d3:9f:71:9c:c8:2d:2d:3a:49:9c:e6:
                    88:c9:b5:21:b5:5d:4a:b6:42:ab:8c:cb:1c:0e:f2:
                    16:b3:49:54:16:ec:f4:47:e5:2a:da:92:ce:28:46:
                    14:fe:fb:45:4f:70:85:9a:19:49:20:b9:86:b7:d6:
                    48:f5:5c:38:63:65:c5:b5:e8:a2:b0:ab:2e:69:fd:
                    80:a0:25:60:c2:81:38:0f:1c:af:d6:95:30:08:3c:
                    5a:6d:47:7b:de:a5:1c:fa:5c:a6:df:8e:96:c6:ad:
                    b4:71:06:43:e5:df:e4:12:68:8b:15:60:03:bb:4d:
                    d6:49:17:b0:55:d8:32:25:33:ff:a7:26:52:8e:cd:
                    bd:43:95:bc:ac:a1:39:d9:0f:78:37:9d:44:de:0e:
                    52:dc:77:28:7b:33:03:27:e1:f2:e7:ed:57:a7:3c:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:40:35:66:57:E4:04:F9:25:1E:2B:26:37:26:4F:E6:0E:5E:E8
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3133372e38382e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:9a:12:29:68:cb:64:ae:96:d1:c3:b4:42:df:2a:20:d3:
         26:50:31:97:6e:89:ba:09:32:dd:80:96:f8:f7:6f:02:73:19:
         e3:e3:ca:ff:7e:00:38:0b:bf:fb:34:7a:c5:76:32:e1:26:a5:
         73:8b:f9:05:95:0a:85:5d:80:3e:a7:86:31:8e:4b:96:81:2e:
         a8:e9:c5:2e:b2:25:98:39:f4:47:7e:aa:52:9b:e6:8f:5c:d5:
         23:b2:ac:ec:52:1f:c8:73:7e:f4:d2:cb:95:37:6f:93:f8:c7:
         6f:02:fa:f6:c0:0c:3d:93:31:56:d6:75:64:29:ce:72:c0:b7:
         c5:dc:67:c4:1e:cf:7e:c4:1f:ea:9c:5f:ab:88:fe:e4:16:dc:
         72:15:6a:46:90:83:41:75:57:17:4c:ad:09:e6:f2:dc:08:be:
         c9:b9:c3:04:f9:cc:18:24:e7:b3:38:5d:c9:2c:51:6c:b3:af:
         0f:e0:ec:33:d7:96:20:cd:1a:40:2f:99:be:5e:7f:82:05:9b:
         9e:48:0f:e7:be:ea:80:8f:be:b8:87:5c:35:68:fe:79:a2:86:
         4c:f9:9f:3e:7b:ad:67:10:b4:97:c7:20:2e:65:69:fa:f7:69:
         39:48:93:c8:96:b4:e8:b5:b1:24:14:40:9e:f0:03:f2:78:67:
         89:ef:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org