Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          P2nyAWDQsrB2SU7XRomLB9eyi2l0/2wQBghxO9OkYCM=
Subject key identifier:   CB:24:92:8C:14:62:B6:60:F9:06:99:54:BD:3F:E6:85:A5:DD:9E:79
Certificate issuer:       /CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
Certificate serial:       100D1AE550AF5F5F1DE736A98415C62A6C087BDC
Authority key identifier: 0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa
Signing time:             Tue 19 Nov 2024 10:58:38 +0000
ROA not before:           Tue 19 Nov 2024 10:53:38 +0000
ROA not after:            Tue 18 Nov 2025 10:58:38 +0000
asID:                     262653
IP address blocks:        177.105.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:1a:e5:50:af:5f:5f:1d:e7:36:a9:84:15:c6:2a:6c:08:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
        Validity
            Not Before: Nov 19 10:53:38 2024 GMT
            Not After : Nov 18 10:58:38 2025 GMT
        Subject: CN=CB24928C1462B660F9069954BD3FE685A5DD9E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:6e:fe:b7:ea:d5:e8:57:6e:01:51:16:42:
                    11:ba:58:89:a7:be:ca:80:28:e2:ec:00:2a:85:0f:
                    1b:cb:e8:85:29:5a:3b:6e:68:cb:99:d7:06:64:20:
                    7e:27:b7:b1:1b:a1:27:81:13:e1:42:dc:00:19:75:
                    f0:c3:dc:1f:06:68:21:4c:e8:49:53:ec:98:20:74:
                    33:ce:a6:37:3a:3a:cf:e8:5a:62:32:1a:8a:17:7f:
                    20:83:38:16:cb:d0:b8:2d:93:57:f3:2d:76:87:11:
                    a1:c9:c6:f2:ea:c3:ae:97:ca:0f:46:31:eb:a9:95:
                    9d:da:86:8b:6b:b1:dc:bc:37:b2:02:6f:9e:5f:69:
                    ad:bd:70:ed:b6:8c:99:80:0a:72:31:4f:d3:6c:6a:
                    8c:b7:63:47:5d:b5:d7:39:29:f9:db:fc:c6:33:7d:
                    4b:27:bd:97:85:43:90:95:5d:fc:bd:b7:50:7a:25:
                    7b:a2:a1:24:2d:3a:e8:43:bf:b4:71:4c:cf:47:be:
                    37:48:f6:99:90:b2:1f:19:15:2d:a4:f0:25:b7:a9:
                    d7:6e:32:42:8d:a7:80:77:37:b6:ad:3b:ec:0d:0f:
                    40:ef:0e:1e:4b:9a:b6:5f:8e:df:8a:ba:59:fd:4d:
                    3b:1a:8f:17:9d:44:c3:31:71:70:78:44:a6:ac:8c:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:24:92:8C:14:62:B6:60:F9:06:99:54:BD:3F:E6:85:A5:DD:9E:79
            X509v3 Authority Key Identifier:
                keyid:0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:b7:64:02:03:66:f5:0a:31:8d:1e:97:14:fd:6f:49:a6:
         5a:69:0b:e6:b7:8e:1a:e5:48:ab:ae:ce:12:b8:5d:79:a5:c8:
         fd:e2:1f:05:73:6a:a3:ec:8e:2f:90:c6:92:56:c5:ea:7a:61:
         5f:80:c6:6f:74:5d:b8:6b:64:85:04:82:51:45:1a:c1:42:87:
         70:2c:d5:5f:20:9c:a7:ad:f1:f1:55:c3:38:54:12:35:0c:98:
         ac:91:1d:2a:9a:5a:79:ba:dc:7d:7f:72:58:a0:1f:77:d0:df:
         6b:fe:1d:31:98:cc:bf:a2:2b:f2:53:e9:87:34:c6:e7:7a:25:
         3f:28:e6:81:e7:e5:d3:b9:67:7c:f2:29:06:6d:b2:16:ee:68:
         82:a5:e1:ce:64:30:a7:f8:c5:5e:bb:96:94:0f:4c:f2:ea:a7:
         3b:1d:14:da:a5:87:26:1f:34:e1:97:44:f6:53:bd:54:4d:39:
         99:17:b6:4f:01:a1:b2:df:0c:c6:2c:a7:17:5f:14:5a:de:29:
         b7:54:ed:ce:90:b6:29:7b:fe:b7:27:00:bc:06:7a:b3:04:62:
         db:6e:9e:6e:9c:c2:0e:9f:97:ba:6d:b8:77:2d:b9:7f:0c:85:
         91:8b:4b:50:bb:b5:42:d4:31:24:02:09:94:b2:53:ba:c5:e5:
         0e:d1:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org