Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier:          E1q/f0MRDlxcehD755Imat5lecZXmWTzzSY5jZJ7QWo=
Subject key identifier:   FB:14:DE:83:05:20:F1:8F:70:59:C9:61:E6:7C:1D:9D:AE:2A:3B:BD
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       037C53DFFC40AA2F08DAFBA1CCA7C27B13B48371
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     262569
IP address blocks:        177.73.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:53:df:fc:40:aa:2f:08:da:fb:a1:cc:a7:c2:7b:13:b4:83:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=FB14DE830520F18F7059C961E67C1D9DAE2A3BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:e3:58:8f:7f:d9:77:47:86:c8:64:c2:6f:
                    e7:70:85:6a:c3:1b:5e:07:b5:ed:83:ea:a5:45:32:
                    e4:4b:aa:b9:0e:f3:31:ef:4b:a3:f0:9f:2b:54:45:
                    0d:ad:6d:c6:14:55:22:9c:a6:53:73:06:09:95:76:
                    c8:47:3b:f8:c6:e3:9e:a3:9e:ce:8b:b5:34:94:b1:
                    15:9f:36:df:b5:05:fd:7e:03:91:26:71:6f:72:8b:
                    87:ba:70:94:24:c7:ca:b4:27:c0:f1:1c:76:f9:2b:
                    11:39:ef:f5:d6:d8:ef:6c:39:15:0c:5c:3a:b7:56:
                    d2:91:84:1d:80:6f:f7:bb:e8:10:77:d7:16:3f:eb:
                    20:f3:d9:b2:93:a0:d7:0d:a1:2c:b6:5f:c2:9c:ba:
                    e6:10:21:de:1d:47:4b:45:44:d6:44:e3:27:d5:5f:
                    7a:17:4f:d6:12:c1:74:5a:71:0d:06:79:d6:1f:b7:
                    f4:94:a0:a1:cc:04:71:64:76:b1:0e:8b:59:fb:8e:
                    c9:e6:df:19:ef:5b:9e:30:fd:6a:bd:2b:e1:22:4b:
                    af:fd:4d:9a:05:24:35:18:b3:8d:bc:6b:66:09:b5:
                    c7:04:87:cf:c9:7a:16:6e:cd:e3:d1:48:e0:3b:a6:
                    34:21:91:b8:8e:e7:64:88:08:88:97:86:db:15:9b:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:14:DE:83:05:20:F1:8F:70:59:C9:61:E6:7C:1D:9D:AE:2A:3B:BD
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32322d3232203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:36:b8:7f:20:14:46:ec:0e:e9:26:9e:92:48:5d:f7:f0:
         98:fd:5e:e0:37:a2:ef:63:93:e1:77:05:62:be:7c:d2:77:02:
         33:7d:a1:80:0e:c5:ea:80:2a:6c:5b:40:1c:79:94:5f:57:9e:
         8f:9a:0f:73:e1:00:1f:26:71:7a:2b:c8:d8:fd:d3:63:26:b6:
         c9:87:56:e7:66:98:9d:1b:aa:cf:66:1c:5f:81:83:9e:a9:71:
         97:e6:bd:bc:83:c9:62:32:08:da:ff:3b:e2:95:03:1d:4e:51:
         51:16:b6:5e:32:f1:1a:78:7f:e2:6a:e0:03:7f:29:ff:e4:f6:
         72:5a:62:1d:8c:23:e8:a3:28:60:d4:52:9e:06:ea:f8:ea:1d:
         b6:a4:9a:7d:bb:d8:7e:af:6f:5f:65:1b:4e:2c:a9:b2:54:72:
         ad:fb:00:51:14:87:a1:53:a1:e0:a7:08:ef:5a:92:03:0b:69:
         9a:93:f3:ad:0a:76:b5:ed:b8:eb:11:4a:a8:a1:c5:7d:8c:f0:
         a8:6f:c9:0f:a6:26:ac:db:05:b2:1d:30:89:f7:c8:d9:bb:41:
         57:cd:53:86:03:08:72:d7:48:07:3a:2b:b3:85:7b:15:7e:c3:
         5e:93:50:b0:50:9f:a3:d8:ef:8f:68:2a:a4:f5:e3:c0:b3:c8:
         dd:59:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org