Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          jgmjDkDyPUUEUWJzOKxE5LcVweJ9M78NPPtZs4uQPbE=
Subject key identifier:   0D:6A:83:DE:15:4C:D2:2F:24:AF:1E:82:4D:05:3C:9D:DA:64:DA:24
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       75BA7856E2B27DD8C3F1BAC8260576AAEAC968FE
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     262569
IP address blocks:        177.73.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ba:78:56:e2:b2:7d:d8:c3:f1:ba:c8:26:05:76:aa:ea:c9:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=0D6A83DE154CD22F24AF1E824D053C9DDA64DA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:77:80:06:11:9d:88:25:3b:23:ab:c1:05:
                    1b:df:c7:79:68:e4:31:b5:a6:51:f3:1c:5f:94:53:
                    f0:1a:f5:2e:9a:1d:19:24:24:51:d7:eb:86:ad:4b:
                    a0:3c:74:33:a4:14:78:6e:9a:91:96:9c:c1:6b:79:
                    75:c6:66:08:80:ac:e1:07:ed:f3:c7:ef:c6:f0:f9:
                    52:de:5e:12:1d:51:d6:3f:6e:b3:d6:6e:72:af:3e:
                    56:d5:60:5f:b4:8b:d4:00:2b:72:94:d1:0b:83:b6:
                    2a:81:21:06:8f:f9:a9:41:f3:19:5d:96:42:c4:94:
                    d0:5a:d7:24:5f:13:7a:10:19:0f:0a:39:04:96:6c:
                    ac:f0:c4:49:fa:25:b9:85:92:16:3b:22:c8:8e:93:
                    cb:af:82:2d:76:7d:08:84:23:74:63:5a:1c:4c:f7:
                    85:d2:8c:92:ca:a5:b6:0f:80:03:5d:49:36:b9:50:
                    d1:56:8b:f1:f0:23:54:20:45:07:b0:e3:42:ac:1a:
                    c9:6c:c1:b1:dd:03:dd:81:a6:83:30:7e:01:49:36:
                    6f:6e:59:f8:19:d0:bf:34:b4:99:04:cd:e6:67:3d:
                    b3:05:06:2d:0d:73:f2:ba:4d:42:92:63:2f:bf:81:
                    a0:b2:04:2e:ec:64:fe:1a:45:df:98:cd:b3:71:26:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:83:DE:15:4C:D2:2F:24:AF:1E:82:4D:05:3C:9D:DA:64:DA:24
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131342e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:be:5b:8a:4c:7c:04:2a:99:e3:d8:06:3d:a3:23:87:28:
         47:dd:e7:05:9e:05:ef:38:d1:e0:ab:b9:c9:62:46:51:f8:aa:
         9b:37:41:ec:44:0e:75:e1:a3:e5:c6:72:84:51:99:2a:bd:b2:
         2c:ee:51:e1:20:b9:4e:91:eb:c5:27:f0:d0:a7:6a:5d:f7:2d:
         76:30:83:7e:06:14:ad:49:7e:61:2e:68:45:7d:99:54:c9:92:
         cd:9a:b2:47:f0:24:82:ab:1c:e7:94:7c:2f:24:02:b8:37:f4:
         6a:49:d2:67:f7:26:da:0a:b9:be:19:df:ed:86:69:da:af:d1:
         3f:09:96:66:d0:17:a9:e6:14:f9:1d:e6:b9:27:c8:ca:fa:9c:
         7d:e6:ca:a6:27:5f:ad:54:d4:8f:f2:2d:a4:b0:7e:b4:ab:7b:
         6f:6f:12:9e:68:cb:59:76:7c:3c:30:d8:ac:28:9f:d9:da:5e:
         21:24:85:3d:fe:92:e4:8b:c0:3b:e3:69:0a:2e:74:7f:e7:50:
         39:85:da:ef:92:09:d8:24:0e:a3:c4:5b:91:4b:3e:80:f0:b5:
         03:4b:5d:9c:c2:bc:b9:c7:07:3b:95:bb:83:70:9b:6d:8b:42:
         48:00:3b:8a:eb:d0:2b:a4:c8:e7:2f:ff:60:ba:13:7b:e0:6a:
         8d:dc:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org