Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
File:                     3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          LPF4/2XMeC5nQAlTYqEN0cKjzny7pVjiK4J9MZruCfo=
Subject key identifier:   0D:D6:C0:FA:B4:7A:8D:74:33:7A:1C:AB:6A:E2:25:E2:6A:DA:A6:7B
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       055D9E05E99BA0DEC77791B83348DB9310D1FF95
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:51:52 +0000
ROA not before:           Mon 09 Sep 2024 14:46:52 +0000
ROA not after:            Mon 08 Sep 2025 14:51:52 +0000
asID:                     262773
IP address blocks:        177.22.248.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5d:9e:05:e9:9b:a0:de:c7:77:91:b8:33:48:db:93:10:d1:ff:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:46:52 2024 GMT
            Not After : Sep  8 14:51:52 2025 GMT
        Subject: CN=0DD6C0FAB47A8D74337A1CAB6AE225E26ADAA67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:ed:df:87:3a:48:04:c6:1e:8a:9a:c9:a7:
                    97:50:35:ff:3c:39:b0:14:62:23:31:15:21:c8:3a:
                    ce:f6:03:3a:3d:10:7e:9e:8d:9c:aa:c9:e3:e9:03:
                    cb:58:db:ca:3b:65:10:5f:82:05:f7:0f:8a:d2:02:
                    d3:a9:7b:d5:24:57:81:ed:5b:80:33:df:e7:db:bd:
                    d1:0f:4b:83:02:6b:c6:2f:ab:59:9a:c3:2e:51:0d:
                    2b:15:a9:ed:07:21:43:c0:51:1d:b4:9f:82:ce:a7:
                    5d:d0:d8:c4:57:b1:f1:57:10:95:e6:e5:d8:7e:b4:
                    70:ec:7b:85:e7:e4:a2:44:53:11:dd:7c:45:96:a7:
                    5a:38:03:b2:e9:aa:92:41:ee:70:e9:f3:c4:b5:a2:
                    3f:73:e2:1c:42:35:1a:77:f4:c0:bb:76:d4:d3:0e:
                    ab:08:31:0d:a1:6f:0d:01:ad:f4:7c:f3:47:53:e6:
                    9f:60:a8:96:a2:80:72:c9:f9:c1:56:c3:98:f2:71:
                    15:c7:00:91:39:17:e1:0a:ba:6d:53:a9:d7:59:7e:
                    4c:1d:41:0e:ea:d1:fc:0f:a9:27:55:16:7b:ab:f6:
                    96:0c:61:fe:ba:07:38:af:16:c7:ad:ca:ff:8f:7e:
                    cf:a4:16:71:b5:0a:85:54:26:cf:46:5a:c3:31:0a:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:C0:FA:B4:7A:8D:74:33:7A:1C:AB:6A:E2:25:E2:6A:DA:A6:7B
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:62:9c:a6:cf:be:76:2e:0e:a9:8a:6b:e7:79:84:9a:fd:7f:
         a9:95:b2:b6:f5:aa:8b:9f:e2:ce:a6:a4:59:7a:69:cd:b3:a5:
         5f:f7:22:fd:51:c1:f8:09:bc:50:71:5c:99:42:ae:05:a0:bd:
         c5:92:23:b9:e5:c7:6d:81:7a:e3:c4:76:be:b3:c0:68:2f:28:
         ec:aa:82:17:42:11:cb:f8:bd:36:d7:02:06:d4:35:ec:68:5e:
         ae:02:9e:1d:51:08:c9:6e:cc:ed:52:af:a3:00:d9:e3:00:45:
         b0:6f:d2:54:10:a5:d7:38:bc:fd:9e:57:4d:2c:bc:4b:f7:5e:
         bd:12:62:37:ea:7b:a0:db:4c:e0:f1:db:38:e6:7e:88:89:eb:
         9c:b6:72:72:a3:e4:25:c1:f0:8b:a2:09:b4:45:e8:43:fd:b0:
         54:cd:16:c5:c5:74:73:90:22:2f:b6:47:5e:43:f9:ba:b8:f0:
         29:83:64:27:b4:a4:26:28:b7:2d:79:ce:92:1e:0b:5b:ac:c4:
         79:f7:41:30:d5:e2:4c:72:3a:7e:6f:31:d1:db:21:1b:ec:eb:
         ac:f2:00:fd:a7:c3:b5:9d:b1:bb:df:a5:58:f6:91:02:bc:48:
         12:a6:b8:72:a8:93:e7:1d:72:db:0b:0a:50:c6:bf:db:4e:e6:
         35:87:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org