Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
File:                     3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          9NhLJP32BryLXgNcKlmJLbksJDfmNOCyXB5Dl0rBYOQ=
Subject key identifier:   1C:E5:D5:2F:09:E6:78:05:F3:A5:1C:58:26:B6:78:2C:4A:E2:29:71
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       26D95B34A44549735A330C7464AE748876A5A4CA
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
Signing time:             Thu 04 Apr 2024 23:37:57 +0000
ROA not before:           Thu 04 Apr 2024 23:32:57 +0000
ROA not after:            Thu 03 Apr 2025 23:37:57 +0000
asID:                     28279
IP address blocks:        177.92.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d9:5b:34:a4:45:49:73:5a:33:0c:74:64:ae:74:88:76:a5:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Apr  4 23:32:57 2024 GMT
            Not After : Apr  3 23:37:57 2025 GMT
        Subject: CN=1CE5D52F09E67805F3A51C5826B6782C4AE22971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:19:9c:f3:55:90:04:5a:5e:75:6e:e2:07:
                    7f:34:88:00:8c:ec:39:bb:93:8b:23:b9:8f:ef:61:
                    97:c5:4f:c9:6e:81:56:ac:5c:75:a7:f6:98:f9:b3:
                    ef:ad:31:47:d4:fe:ec:f2:5e:3f:a5:4f:41:47:59:
                    ee:30:7d:b8:4f:c5:db:79:3b:bd:a0:44:8d:bb:2f:
                    09:4e:ee:5f:63:85:ff:63:c1:be:11:cd:b3:ed:df:
                    23:f4:72:35:9a:c3:b0:4a:85:4b:e4:27:72:63:ee:
                    64:c1:d2:22:9b:3b:da:37:94:c5:e1:3b:43:72:0b:
                    65:fc:a7:d7:bf:c1:3a:b0:71:96:c6:25:85:11:7d:
                    65:e1:25:f4:30:c0:ae:b8:fc:b8:54:24:38:38:d0:
                    e4:fe:d2:1b:c6:cb:77:64:9d:a2:8d:14:0a:4c:0d:
                    69:27:5e:3e:32:b8:35:9e:65:22:b6:f5:51:c5:78:
                    7d:de:39:95:2e:b2:c1:42:83:69:ee:ed:2e:44:f6:
                    99:ab:42:a0:fd:76:94:77:89:6f:c6:f0:f1:10:f1:
                    3e:89:64:97:aa:96:a9:3e:31:58:5f:92:6b:37:2c:
                    5d:35:e1:52:11:c1:cb:9f:1e:3e:e8:2d:b4:2c:ce:
                    92:d6:f8:95:19:92:b6:86:93:e5:79:5d:66:4f:fd:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E5:D5:2F:09:E6:78:05:F3:A5:1C:58:26:B6:78:2C:4A:E2:29:71
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:41:29:1e:87:a6:11:91:b6:a3:39:ab:b3:70:55:c6:63:21:
         99:84:0b:7f:94:fc:59:87:9f:7b:68:24:e7:0d:53:8e:3d:1f:
         92:af:92:23:65:fd:43:e5:7d:4f:d8:04:7f:84:da:35:97:4c:
         da:b0:d8:d2:36:17:22:f4:9d:4b:0b:2d:e9:47:e5:99:7d:2d:
         c6:32:b2:94:30:55:ee:f4:3e:a8:22:23:18:84:ea:58:d1:5d:
         82:1b:e1:87:a4:d1:7e:12:4c:9f:3f:ce:72:0e:1b:09:9a:a1:
         3f:72:ff:ff:8f:1f:66:29:41:4f:e4:01:c4:bc:d3:c5:20:7d:
         34:37:78:e9:89:e2:30:f8:e1:de:2b:04:c0:17:c4:4f:3c:23:
         40:8c:31:e2:a2:d0:43:c6:39:ec:ea:20:7e:16:e2:80:48:7c:
         eb:cb:61:fa:7e:7d:b6:82:bc:fb:82:a3:f6:15:6c:1a:fe:e8:
         6d:23:47:ba:d9:83:73:1e:35:20:67:d0:0d:39:d9:93:5a:77:
         41:67:e2:54:11:a7:e7:f8:4e:a5:ee:ad:d8:fd:04:81:00:af:
         04:01:c0:49:b2:5f:01:33:53:b6:6c:80:c9:83:3b:ec:33:4d:
         e9:c3:93:ed:51:cf:71:52:1e:6e:af:07:eb:1b:18:c5:2e:08:
         a4:58:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org