Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e36342e302f32322d3332203d3e20323632373733.roa
File:                     3137372e33382e36342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          ZKguHVfRmoBDvoLQ3lTn0eM9JKjW+lrmoj0qEDLtSYY=
Subject key identifier:   20:44:A0:5C:D5:D6:B5:70:50:32:20:3F:27:C4:5F:C6:0A:8D:A8:D6
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       28CB14276CBAAAA7B3AEEE82199FBE530693DDBE
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e36342e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:52:03 +0000
ROA not before:           Mon 09 Sep 2024 14:47:03 +0000
ROA not after:            Mon 08 Sep 2025 14:52:03 +0000
asID:                     262773
IP address blocks:        177.38.64.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cb:14:27:6c:ba:aa:a7:b3:ae:ee:82:19:9f:be:53:06:93:dd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:47:03 2024 GMT
            Not After : Sep  8 14:52:03 2025 GMT
        Subject: CN=2044A05CD5D6B5705032203F27C45FC60A8DA8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:dc:b5:9d:4a:a7:89:8e:b8:a2:ea:4f:02:
                    d8:fd:8c:ed:d4:63:4e:5a:53:69:e9:0a:94:8d:c5:
                    24:b2:cc:96:d0:7f:c5:76:0f:27:97:28:cb:7d:51:
                    c7:90:b2:d8:66:e9:40:b3:c1:bd:3c:75:e8:97:24:
                    39:4f:31:b9:9b:59:01:89:ff:f9:da:e6:8c:b4:83:
                    10:2f:bf:86:c6:86:8b:51:e8:8b:3f:8a:98:e5:b3:
                    de:af:c8:67:ce:37:81:08:0d:5c:1c:ba:88:c0:56:
                    c4:c2:a6:f2:e5:7b:ab:81:4f:56:27:9d:ff:32:f2:
                    5b:37:71:ed:6c:f4:d0:51:0e:c6:e4:94:78:e1:e1:
                    67:47:96:0e:e2:99:fc:5f:29:d7:49:d1:c2:5d:9b:
                    f0:c2:fa:b7:79:03:b0:dd:d5:70:e4:f8:e9:e9:93:
                    91:16:5e:32:f3:dc:e0:bf:5f:0b:78:a6:cd:5b:27:
                    b1:b1:58:7b:6c:22:e6:d8:61:f6:31:3b:76:59:08:
                    3d:bd:2c:6c:46:4c:e1:75:44:99:e3:b1:13:0c:8d:
                    25:a0:71:d9:c8:9b:72:a4:83:46:99:46:03:47:e1:
                    15:04:e1:7c:ee:99:93:d7:9f:89:9e:ea:22:bb:29:
                    45:52:6a:fd:79:7a:50:3a:89:4d:25:f1:6a:45:92:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:A0:5C:D5:D6:B5:70:50:32:20:3F:27:C4:5F:C6:0A:8D:A8:D6
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e36342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:43:f5:74:1f:ed:e8:97:bf:8a:b9:c0:7a:68:62:1b:12:86:
         b9:fb:9b:15:af:1a:a8:6b:26:e9:77:ed:4d:78:63:3b:03:59:
         f5:c0:dd:f8:a9:a1:92:8c:ca:cd:9d:80:ae:c1:94:34:eb:1c:
         32:c6:0c:37:23:7b:7d:08:de:ff:c5:c5:b0:4f:9d:8b:89:11:
         8f:b6:c0:33:25:39:cd:cd:0e:fd:dd:b3:6e:01:8f:3c:92:66:
         ff:ca:0b:11:32:b9:42:c1:41:6b:85:ea:82:79:48:05:74:9d:
         47:1b:6d:95:06:6d:9e:a0:85:74:e3:65:f3:c1:b5:ac:1f:70:
         ae:16:e5:cc:b7:7f:91:4f:ce:87:c5:4f:a1:59:fa:39:73:ab:
         9e:5f:51:ad:6b:bb:24:b8:37:64:82:fc:f8:d8:d4:46:44:20:
         d1:3d:fa:1d:26:6b:ac:e5:9d:26:2a:09:ec:21:25:70:39:a7:
         58:ac:eb:fb:d4:56:1f:e6:0e:8b:4d:5f:7b:4c:cd:21:04:22:
         0d:99:14:82:9b:e0:41:35:63:22:33:32:ce:dc:f0:12:1e:b8:
         a4:54:d8:ad:9d:9b:98:6d:78:95:79:a7:21:fb:08:e8:bd:15:
         f5:a5:a1:95:65:1b:47:69:23:e9:66:82:79:29:45:7e:26:a8:
         80:0e:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org