Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32332d3233203d3e20323632363533.roa
File:                     3137372e3130352e3232322e302f32332d3233203d3e20323632363533.roa (raw, json)
Hash identifier:          S6a8Ik2O/CYL1z2KzHJOCzjaeKSYBFTEcAT1Tu2pv6U=
Subject key identifier:   EC:2E:14:E8:98:A1:A4:67:59:BB:04:64:DD:D1:31:43:91:18:E4:B9
Certificate issuer:       /CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
Certificate serial:       34757B8F3CC1C4BA099169A442C664433434077A
Authority key identifier: 0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32332d3233203d3e20323632363533.roa
Signing time:             Tue 19 Nov 2024 10:58:45 +0000
ROA not before:           Tue 19 Nov 2024 10:53:45 +0000
ROA not after:            Tue 18 Nov 2025 10:58:45 +0000
asID:                     262653
IP address blocks:        177.105.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:75:7b:8f:3c:c1:c4:ba:09:91:69:a4:42:c6:64:43:34:34:07:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
        Validity
            Not Before: Nov 19 10:53:45 2024 GMT
            Not After : Nov 18 10:58:45 2025 GMT
        Subject: CN=EC2E14E898A1A46759BB0464DDD131439118E4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:97:48:44:a2:ee:e1:27:80:e2:28:e1:7e:84:
                    ed:b0:f0:31:e2:02:20:4d:69:18:09:c7:01:fe:48:
                    d7:cc:62:ba:10:72:4a:61:04:6b:13:0d:d2:cd:ea:
                    38:03:08:25:5c:a0:5f:00:d0:e2:88:3c:6e:4e:3d:
                    b0:e7:87:eb:61:45:45:9e:d4:ae:45:b0:15:37:2a:
                    9f:c4:4a:23:88:6d:95:10:4c:a1:f5:73:b5:61:6e:
                    9b:74:ae:d8:e9:dc:9f:a1:94:5f:82:90:f4:97:1e:
                    51:48:29:6d:88:da:ee:7b:f8:ae:2f:97:43:da:8d:
                    00:19:0b:6b:fc:17:05:77:72:43:63:2a:4f:d6:37:
                    58:0e:6a:a3:ad:23:64:30:f5:af:ca:be:c3:32:d4:
                    7b:e1:d4:9d:b1:fa:a8:6f:3a:a3:18:e2:30:93:42:
                    f5:90:17:ef:db:ee:d2:1b:2c:b8:5f:9e:0f:a2:5c:
                    b2:dd:b2:25:5b:c1:3a:23:5d:aa:d9:65:6e:0b:8d:
                    8f:14:88:16:7b:4b:db:87:2a:d1:b0:e4:95:ca:64:
                    d0:64:4b:20:9b:26:b6:e3:a6:07:1b:4e:8f:c0:11:
                    cc:0f:84:58:31:33:47:f6:66:52:44:b2:96:d3:c3:
                    ae:82:80:c1:fd:9b:82:c9:16:e6:dc:87:ae:e0:3d:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:14:E8:98:A1:A4:67:59:BB:04:64:DD:D1:31:43:91:18:E4:B9
            X509v3 Authority Key Identifier:
                keyid:0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32332d3233203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:a3:02:59:11:eb:83:92:ec:46:70:5b:ce:b6:77:28:79:58:
         1c:db:9c:2f:e1:29:97:0f:13:30:34:38:84:27:50:cb:02:ec:
         d0:9c:67:01:e3:fb:56:0c:8b:30:a4:97:1a:34:79:fc:89:4c:
         ba:36:bc:df:fd:50:a1:b0:20:c4:f7:cd:b1:34:98:2a:45:4e:
         14:14:e2:7a:79:a1:c9:2b:bf:25:04:ef:27:d4:8d:e1:04:6e:
         9f:9f:5a:a4:99:0e:b9:93:fa:10:e3:40:0d:5e:1c:d4:ed:e4:
         96:57:cc:6b:b6:e4:24:c9:46:b9:ff:a2:fc:fe:3b:7d:e4:55:
         c1:d3:2e:74:8d:24:fd:d1:18:e2:fa:5b:e5:e5:a2:91:31:86:
         8d:7f:45:38:50:ab:9b:4c:8c:38:f1:0b:98:5c:bb:84:cb:03:
         3f:45:a6:97:ca:ae:e6:e1:ae:e2:c4:21:a4:10:d5:d6:ce:19:
         7a:09:07:ff:e3:c4:00:09:48:e3:5b:13:4e:dd:d7:45:3d:ff:
         2b:b1:84:b6:ed:fd:5d:d0:ad:29:cf:f8:cd:72:df:0e:7d:b9:
         37:7f:5b:a3:bd:42:71:a0:76:8b:7d:bd:16:ce:07:41:ca:2d:
         34:f6:bc:c0:f2:99:c3:91:4b:13:5d:04:b8:20:e1:8d:5d:e2:
         81:0d:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:23 2024 by rpki-client on console-ams.rpki-client.org