Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e31302e39322e302f32322d3234203d3e20323633343432.roa
File:                     3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (raw, json)
Hash identifier:          3UeqMVwwe5B1c8hsD1N/KmaOsgaw0XKlJl/guX6WfWk=
Subject key identifier:   5F:B8:F8:9D:ED:09:3E:9C:69:F7:64:A6:F2:A3:E7:8E:A5:3E:19:52
Certificate issuer:       /CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
Certificate serial:       070EF61CA8CF0D4D9113C0988AFC28C5959D0624
Authority key identifier: FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e31302e39322e302f32322d3234203d3e20323633343432.roa
Signing time:             Fri 02 Aug 2024 18:03:53 +0000
ROA not before:           Fri 02 Aug 2024 17:58:53 +0000
ROA not after:            Fri 01 Aug 2025 18:03:53 +0000
asID:                     263442
IP address blocks:        177.10.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0e:f6:1c:a8:cf:0d:4d:91:13:c0:98:8a:fc:28:c5:95:9d:06:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
        Validity
            Not Before: Aug  2 17:58:53 2024 GMT
            Not After : Aug  1 18:03:53 2025 GMT
        Subject: CN=5FB8F89DED093E9C69F764A6F2A3E78EA53E1952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:e2:12:8b:43:a1:ff:3e:8d:48:e7:a9:eb:
                    ab:e9:38:98:5c:e7:f1:a1:7b:91:c4:5a:8d:21:81:
                    d7:dc:3e:bb:4a:82:a3:37:f6:42:2e:df:4f:67:41:
                    4f:fb:fd:65:f9:94:6a:70:a5:85:4b:07:f9:ee:b5:
                    9d:81:86:ce:95:c4:63:68:72:d4:50:42:2e:6f:93:
                    6a:24:cb:f8:92:51:5b:00:fa:09:98:b1:4c:35:1b:
                    eb:51:96:ee:cb:68:f4:5a:fe:5d:b2:62:37:9a:28:
                    99:1e:dc:59:71:d0:7a:f3:a6:8d:f9:19:2e:e7:6e:
                    cc:0f:fd:dc:7b:ec:8c:cd:21:08:9a:5b:d6:c3:08:
                    95:12:b3:8b:5c:2c:99:94:9e:15:cc:b6:d6:10:01:
                    76:b3:ae:63:80:1e:cf:a8:57:a9:bc:4e:d9:da:22:
                    28:e7:68:1c:c9:13:e8:fa:69:06:51:bb:c1:22:a6:
                    06:24:b9:cc:88:1a:da:09:6c:65:e6:59:cf:c8:56:
                    91:50:dc:ba:34:72:80:36:3e:a1:f1:ef:84:27:d7:
                    33:a5:f4:e0:22:ad:b0:eb:e3:4d:aa:98:1d:ef:d1:
                    81:86:82:55:39:36:5b:eb:5d:7f:e1:e3:1b:76:44:
                    ed:8a:76:14:a1:9e:0f:a8:dd:f0:96:13:d7:42:a9:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B8:F8:9D:ED:09:3E:9C:69:F7:64:A6:F2:A3:E7:8E:A5:3E:19:52
            X509v3 Authority Key Identifier:
                keyid:FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e31302e39322e302f32322d3234203d3e20323633343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:c5:bf:f5:7a:1f:9e:d7:45:4f:15:c4:b4:77:0d:2a:5b:10:
         ba:84:0a:85:2a:72:84:99:3f:4a:f1:0a:9f:0a:b0:fc:32:e7:
         d1:8d:5b:15:1c:2a:c7:e4:4c:94:8e:18:0f:ae:0f:c0:94:aa:
         8b:3a:11:9f:48:b9:fe:ef:1a:88:b7:bb:33:e9:69:2a:36:d6:
         8b:8e:64:4e:62:85:60:b4:72:f8:37:dc:12:4d:4a:30:c2:59:
         1a:7e:1e:1a:db:1e:e7:d8:ad:cd:e7:91:35:79:6b:df:7a:62:
         cc:d5:48:33:a4:bf:a4:a0:0f:a0:a7:e6:26:ca:1a:06:59:b4:
         fd:23:5d:3b:c7:0e:57:dc:95:39:68:76:f9:76:ef:e3:2d:30:
         96:9a:de:ff:c5:d4:ed:a9:da:99:5f:87:ac:7b:db:8e:ca:e8:
         ef:ec:2f:f6:b4:02:81:d0:1f:a2:7a:80:89:12:49:6d:b2:a0:
         30:62:4f:c5:76:98:07:96:79:70:b9:fc:5f:f5:c3:14:81:f8:
         c3:2c:6f:62:96:a5:cb:83:d0:76:f3:31:d1:b9:9c:7b:86:06:
         ab:fd:6d:cc:ad:e9:29:2f:32:6d:ac:c7:61:60:9f:6f:dd:ea:
         e2:39:67:c0:9f:6b:ba:f7:28:ad:d0:60:2b:c9:48:a6:0a:29:
         94:96:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org