Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa
File:                     3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (raw, json)
Hash identifier:          8aGXxEZHQGo9dItWktEZbVx58+rNX+k+MEI5V/jlG/0=
Subject key identifier:   8A:67:16:05:A4:47:E8:76:3C:ED:87:25:B2:60:CC:A8:8E:99:23:3B
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       374B4F346E2CB6341E2AAE8DA5056D599988EF1C
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa
Signing time:             Wed 03 Apr 2024 18:32:25 +0000
ROA not before:           Wed 03 Apr 2024 18:27:25 +0000
ROA not after:            Wed 02 Apr 2025 18:32:25 +0000
asID:                     270678
IP address blocks:        177.221.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4b:4f:34:6e:2c:b6:34:1e:2a:ae:8d:a5:05:6d:59:99:88:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Apr  3 18:27:25 2024 GMT
            Not After : Apr  2 18:32:25 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:f2:d6:e3:dd:59:71:cd:54:28:f3:63:f5:
                    6d:67:79:d0:88:89:3b:71:e8:38:1b:58:dc:4e:0c:
                    c8:fe:e2:97:bf:62:37:7a:00:6c:6d:66:5a:20:9d:
                    93:14:49:d3:2c:08:af:eb:81:8d:69:67:6a:48:51:
                    6f:33:d3:43:4e:1e:c1:fa:64:0a:bb:d9:1a:c6:05:
                    b4:52:38:63:43:b3:28:a1:30:c3:41:3c:8d:b2:35:
                    b2:96:68:0b:20:1d:05:42:a6:a0:a6:12:87:71:d0:
                    ef:bf:71:2e:37:9d:6d:2a:ef:f1:f5:61:d3:29:24:
                    9a:cb:d5:02:41:da:d1:e0:6e:21:5d:4a:86:1a:fa:
                    ee:31:f7:3b:ef:f0:66:03:6f:9f:8e:a5:5a:84:40:
                    79:65:fe:b9:bc:55:9f:43:5b:a7:4b:82:01:de:b9:
                    8c:c8:24:02:8c:ec:27:26:13:58:4c:90:b2:23:54:
                    ef:43:1f:19:e7:ac:38:da:c6:99:5f:4a:69:1f:2a:
                    e4:a0:6d:46:91:2f:ad:61:95:97:61:d5:4e:2b:dd:
                    7d:6b:60:da:bd:f8:d0:02:b1:f6:2d:63:e1:f2:96:
                    ca:3e:2b:24:83:ff:35:14:83:20:46:95:cf:62:74:
                    6f:a0:3c:ee:46:9d:1e:87:31:c1:e9:99:16:2d:39:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:16:05:A4:47:E8:76:3C:ED:87:25:B2:60:CC:A8:8E:99:23:3B
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:cf:fd:56:ab:f3:26:2a:7b:14:f8:3b:5e:56:97:43:0f:
         3f:b6:e5:96:ea:e3:e8:3b:80:70:2d:8d:94:f8:93:4c:a0:df:
         aa:14:d2:8b:e6:69:64:87:ad:d0:4a:87:96:3b:ff:56:c6:f2:
         bd:1c:41:78:72:13:48:46:2f:dd:f7:5f:58:70:c6:12:b4:17:
         20:f5:09:78:a4:c4:2b:e8:a5:61:07:47:2b:ae:7c:ed:09:15:
         4f:da:c5:c7:4a:a0:00:92:68:c3:13:45:76:2d:bc:9d:10:e5:
         be:6c:c1:f9:2f:42:ec:47:97:54:fb:db:8c:60:0c:a8:49:27:
         c5:3e:07:bf:07:ad:2f:05:37:a5:e9:f0:04:51:50:32:89:4c:
         de:45:93:64:58:f9:22:7d:3a:1d:87:af:29:fc:5a:3c:bc:cc:
         57:78:c7:5b:b8:3f:4e:8d:9f:9a:3f:28:0d:a3:13:c1:27:2b:
         4b:bb:61:be:5a:06:99:57:70:17:2f:0e:c0:17:a6:0c:ec:b6:
         21:d9:a8:4c:53:e6:24:8c:4c:35:f1:b3:1a:9d:ce:23:43:65:
         4d:e7:47:db:be:15:eb:3c:41:f0:f5:bd:aa:5d:7d:25:d4:ea:
         c1:34:75:47:6d:6d:aa:4a:f2:ea:24:c0:41:eb:c2:5a:41:c1:
         1c:05:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org