Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa
File:                     3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          79mf/I63cT+Swhps3duaqAWda00UFaZqEveL0WxCOns=
Subject key identifier:   34:33:80:F9:94:2E:F9:2B:5A:2E:EF:C6:D4:52:5C:90:06:62:29:99
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       3A9CE4A8344F054574831773090305F13F7663D2
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:30 +0000
ROA not before:           Fri 26 Jul 2024 19:11:30 +0000
ROA not after:            Fri 25 Jul 2025 19:16:30 +0000
asID:                     263656
IP address blocks:        177.66.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9c:e4:a8:34:4f:05:45:74:83:17:73:09:03:05:f1:3f:76:63:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:30 2024 GMT
            Not After : Jul 25 19:16:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:89:6a:76:00:44:43:7e:64:04:14:8f:d0:
                    9a:f0:3f:95:6c:13:31:d3:71:1a:30:39:16:9f:7b:
                    ec:e9:9b:75:39:76:c7:26:4d:ea:48:46:13:41:fd:
                    4b:6e:56:41:5c:7f:9c:de:91:0a:f1:7b:09:a5:98:
                    51:f9:50:96:c6:da:81:e3:87:93:29:a3:f0:7b:5a:
                    0b:f3:5c:df:3f:d3:86:87:e2:08:aa:56:bd:3a:3d:
                    8c:97:ca:34:2a:97:41:7c:fc:7f:27:09:39:3f:af:
                    b7:a2:b6:94:a1:9e:6c:1f:ca:9c:78:79:5b:e8:0d:
                    97:9a:e8:f9:ab:90:9a:ea:7d:19:f4:bc:57:e4:9a:
                    e7:ae:a9:67:11:bf:92:4e:24:26:da:4d:ee:da:01:
                    b2:5a:04:0b:8b:0e:f2:4f:12:3e:6d:fb:05:c0:df:
                    88:47:51:21:9b:c7:3f:82:1b:0f:54:44:08:99:b9:
                    0f:de:bb:1c:a6:90:2c:54:25:17:f9:3b:72:66:2d:
                    f4:e0:79:c5:b2:fd:83:de:10:44:0f:ca:95:3e:e6:
                    36:5c:f6:b1:c0:75:2d:68:21:15:b5:18:22:11:e8:
                    0d:c4:67:a9:eb:63:18:c4:32:66:85:e3:cf:5e:26:
                    8e:fa:3b:46:9a:c5:5a:a4:c5:bc:32:5d:23:03:36:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:80:F9:94:2E:F9:2B:5A:2E:EF:C6:D4:52:5C:90:06:62:29:99
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:20:0d:8c:62:f6:a5:12:27:0c:74:95:09:d6:44:8b:1d:2e:
         ab:fc:4a:e9:53:85:d8:92:59:d8:d1:00:16:c4:fd:d3:6e:18:
         56:50:dc:da:32:01:4d:bc:03:1f:c9:9c:d0:4d:d0:ca:2e:b8:
         a7:60:bb:90:66:31:c7:2b:56:7a:53:af:8f:23:d9:c0:73:b0:
         88:9b:a5:b6:32:d6:e5:48:9f:b7:13:27:5a:54:62:20:18:86:
         02:3e:0d:a7:80:10:32:b1:26:e1:82:de:e0:65:4c:fe:b7:66:
         f2:3b:5e:51:71:30:a7:53:35:91:67:bf:54:55:bf:51:f1:08:
         16:16:44:85:27:4d:8c:42:7c:0c:9f:24:b5:bd:4d:5a:41:ce:
         70:3c:73:ae:6c:a6:c4:d2:7e:a4:06:99:f5:b9:24:48:2f:d8:
         6a:99:d5:e5:e7:25:93:8b:5c:d5:5c:e5:50:27:48:bd:13:88:
         26:69:fa:77:27:60:47:b5:ed:35:fd:4d:e7:49:71:d2:ed:cc:
         75:7d:3a:36:27:06:d2:9e:ed:10:c6:b4:8c:4c:45:bc:78:f0:
         1b:b1:70:cd:71:39:f6:7d:c9:f3:da:64:10:10:bc:8d:5c:d3:
         65:58:97:cc:32:e9:2e:33:51:88:44:0b:c5:7a:d2:ec:19:f7:
         10:15:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org