Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3230203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32302d3230203d3e20323632363533.roa (raw, json)
Hash identifier:          ItvQ4370QtaAHjKXF20Ysm7CoaX3ASSZxFjXmb9TmQU=
Subject key identifier:   BE:D0:DD:DE:B7:98:8A:F6:B6:49:76:03:5D:FE:BF:07:63:09:B8:DF
Certificate issuer:       /CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
Certificate serial:       514AF9CD45DB944CDC01AAF9D2CE2B555A02A3D0
Authority key identifier: 0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3230203d3e20323632363533.roa
Signing time:             Tue 19 Nov 2024 10:57:42 +0000
ROA not before:           Tue 19 Nov 2024 10:52:42 +0000
ROA not after:            Tue 18 Nov 2025 10:57:42 +0000
asID:                     262653
IP address blocks:        177.105.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4a:f9:cd:45:db:94:4c:dc:01:aa:f9:d2:ce:2b:55:5a:02:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
        Validity
            Not Before: Nov 19 10:52:42 2024 GMT
            Not After : Nov 18 10:57:42 2025 GMT
        Subject: CN=BED0DDDEB7988AF6B64976035DFEBF076309B8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:23:36:3c:6b:90:88:2f:43:64:d8:08:4c:
                    03:15:ce:85:d1:ad:48:fd:62:bd:e8:df:d1:2d:16:
                    be:6f:e5:d2:f6:6d:6b:45:52:ff:a4:4f:f4:fe:7d:
                    40:e9:52:5a:fd:be:3d:a7:f1:4e:97:9e:24:5c:ea:
                    06:05:2d:7a:c7:7d:e2:c4:58:c6:73:5b:38:da:8a:
                    1c:71:91:62:43:90:e6:57:93:93:52:3a:76:18:48:
                    41:50:b0:9e:50:a9:0f:e0:4a:93:6b:5a:39:5c:0e:
                    ce:08:aa:8d:b7:60:92:56:54:15:0a:49:35:42:7f:
                    06:ff:6b:b0:35:b6:6e:6c:e0:d3:bb:d1:84:f7:c4:
                    24:be:d0:f6:41:4f:c3:a2:f5:2a:25:66:22:c4:4b:
                    10:51:62:8f:c5:19:76:2a:1c:93:71:7b:ec:3b:19:
                    39:87:4a:42:11:d3:65:73:c9:49:42:ee:31:75:b4:
                    5a:c7:06:16:86:01:b5:a7:e2:c4:5b:9d:f7:d4:18:
                    b9:b0:0a:b9:cc:ed:b2:77:54:db:e6:06:82:7f:7a:
                    96:d2:e5:2d:5a:18:f1:dc:7d:9d:6b:60:ce:0e:6c:
                    6a:e0:57:07:94:3c:a7:73:df:84:24:d2:9f:1b:db:
                    41:8e:8c:20:42:8e:e2:88:8b:b5:50:2c:de:b6:e4:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:DD:DE:B7:98:8A:F6:B6:49:76:03:5D:FE:BF:07:63:09:B8:DF
            X509v3 Authority Key Identifier:
                keyid:0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3230203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:63:6d:82:1d:6e:7b:6a:4f:8b:28:9d:b2:12:24:c0:1c:c5:
         d3:e1:c6:7f:cd:8f:6b:b0:2d:9b:d9:bd:3f:c3:26:9e:50:83:
         b4:4d:37:bc:00:a4:5f:02:f7:43:bd:2c:7e:ff:8f:53:7f:e9:
         b3:0a:2e:97:80:16:29:74:41:bf:c0:c6:da:41:b7:60:29:b9:
         55:ee:1f:ce:d9:74:4a:5d:34:5c:82:58:61:41:66:59:78:94:
         5e:7c:83:73:10:59:ee:41:b4:9b:f4:53:6e:20:59:94:99:13:
         3e:c8:00:01:28:42:66:6b:12:5b:43:e4:d5:08:f9:b2:91:48:
         7c:7b:c6:3f:bc:1f:6a:08:13:dd:9a:81:2f:69:2e:a1:51:e4:
         45:e3:99:9e:ba:79:e9:c7:16:0c:c8:7a:9b:07:d8:07:b8:ff:
         56:6f:5b:78:44:bf:7e:2e:f7:fc:c5:0b:2d:6f:05:49:14:9e:
         0f:5c:80:1a:57:59:82:7e:11:06:bf:23:3d:d4:f4:1d:78:17:
         83:73:31:68:14:1a:a8:aa:af:95:3c:61:5c:1d:9a:bc:96:b4:
         ed:64:51:e3:3d:53:fe:d9:00:ee:84:11:40:ef:cc:3e:49:53:
         24:22:40:f8:bd:ae:28:d3:32:0b:ac:80:48:6f:c4:8b:5e:35:
         3c:61:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org