Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131382e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          55CX1Pz/JchRYeMhSo3xUNNuuShLbP6kR+Bs9ThHq4g=
Subject key identifier:   E7:39:42:40:51:C2:D5:AA:14:0E:C3:58:EA:98:09:D6:4C:5A:DB:3E
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       6D2D1E11EC47D9F6484D274C73106C50588EB2DF
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     262569
IP address blocks:        177.73.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:1e:11:ec:47:d9:f6:48:4d:27:4c:73:10:6c:50:58:8e:b2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=E739424051C2D5AA140EC358EA9809D64C5ADB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:4d:f5:54:97:52:a8:6c:d2:15:91:70:cf:
                    3b:e7:1a:ed:f2:dd:c2:32:b4:b9:d1:9b:92:4f:11:
                    5e:23:db:1a:19:df:a9:16:d0:3a:fc:f0:17:d0:66:
                    50:22:e1:4b:af:4a:f9:89:ac:46:55:54:e5:40:80:
                    1c:f3:e3:d5:12:8f:ef:df:42:87:f3:5e:02:6b:af:
                    05:33:34:59:08:2b:d0:3c:9c:a8:f1:2c:ff:13:c0:
                    ba:34:88:ba:ef:4f:14:be:9b:0d:f5:09:0c:67:fb:
                    93:67:99:23:af:d3:d5:39:99:f7:a3:e2:65:92:f8:
                    a6:b8:0a:85:fe:fa:4d:57:68:5f:43:22:8f:21:80:
                    31:22:2c:8f:83:24:c6:c6:b8:ae:ba:54:62:dc:09:
                    0f:53:ef:67:79:75:68:da:73:f7:23:e0:f7:78:41:
                    11:05:52:c1:97:ae:ee:17:dd:da:5b:b0:92:71:78:
                    f0:89:cf:c6:4e:f1:6f:60:af:cf:94:4e:40:de:7f:
                    4b:87:f6:c1:00:24:1c:96:3c:2a:5a:11:bc:c5:7e:
                    0e:32:a8:c0:43:93:43:f4:94:a4:98:d3:6b:51:76:
                    7c:95:90:f8:c8:b8:0e:1c:9d:81:d8:a6:dc:c2:4b:
                    b6:b2:13:be:5d:a6:cd:18:37:5d:a0:ba:4f:8d:e2:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:42:40:51:C2:D5:AA:14:0E:C3:58:EA:98:09:D6:4C:5A:DB:3E
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:a3:38:e8:d3:08:ed:5e:7a:e6:1e:c6:0d:eb:6e:9c:f0:
         c5:87:35:08:a0:d3:6f:68:dc:bf:49:e9:8e:91:4e:80:0d:72:
         43:07:be:04:f2:b7:01:1c:47:57:ba:4d:d3:dc:78:b6:31:b3:
         fa:0e:64:41:90:ff:fd:d5:8f:44:05:43:9f:cc:01:b2:7f:81:
         c5:23:84:6c:13:e7:89:ca:1a:87:f9:b1:59:80:4a:6b:0d:16:
         d4:c4:78:76:64:3b:96:0b:25:f2:a8:48:e7:20:51:54:23:7b:
         a0:ec:7b:9c:fc:56:f0:97:07:8f:81:e4:62:28:b4:59:3c:b7:
         6c:7e:99:ce:7d:75:7b:a5:3d:61:56:e4:49:93:35:20:83:5b:
         6a:ff:4c:ce:72:0f:f9:8e:12:c3:ff:26:30:f2:25:f9:fc:bd:
         58:82:a3:8c:64:86:77:79:d3:06:13:15:99:de:c0:66:0d:db:
         db:0e:98:0c:db:9a:af:26:95:f9:42:f4:94:d9:c8:a7:1e:9d:
         0b:e2:38:30:62:26:b6:49:ba:c8:d7:c4:27:82:5d:b5:74:78:
         f0:3a:b2:aa:a7:29:c1:de:fa:27:71:9c:63:c6:aa:e7:68:5e:
         cc:b3:0e:d1:5f:ea:ef:d9:35:b9:34:07:26:d9:dc:fb:e1:8b:
         46:39:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:59 2024 by rpki-client on console-fra.rpki-client.org