Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232302e302f32332d3233203d3e20323632363338.roa
File:                     3137372e3130342e3232302e302f32332d3233203d3e20323632363338.roa (raw, json)
Hash identifier:          Rcktj8TukHg1uDP0pyY+1CPpV4lvfo6O2TjNnE1wfFY=
Subject key identifier:   B9:D2:30:81:65:82:E2:AA:CF:FD:58:4F:93:49:24:59:F3:6F:26:30
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       28B35FAB3A77A6A1332CC8A97810BEF989DDBB6E
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232302e302f32332d3233203d3e20323632363338.roa
Signing time:             Thu 08 Aug 2024 18:51:30 +0000
ROA not before:           Thu 08 Aug 2024 18:46:30 +0000
ROA not after:            Thu 07 Aug 2025 18:51:30 +0000
asID:                     262638
IP address blocks:        177.104.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:5f:ab:3a:77:a6:a1:33:2c:c8:a9:78:10:be:f9:89:dd:bb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Aug  8 18:46:30 2024 GMT
            Not After : Aug  7 18:51:30 2025 GMT
        Subject: CN=B9D230816582E2AACFFD584F93492459F36F2630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:26:f8:85:62:30:2b:55:97:1a:5a:66:50:
                    a5:84:20:a7:9b:a9:66:c0:1d:69:83:a0:45:63:11:
                    c9:f5:00:46:03:af:e4:fd:8c:bd:6d:18:65:17:d3:
                    bb:b1:e7:46:19:68:11:4d:c8:2f:5e:f0:ca:d6:60:
                    89:f4:38:ec:c1:93:cf:46:ca:95:f9:e8:7e:c9:06:
                    2a:1a:81:10:64:b0:0f:af:6f:34:6d:94:14:e8:9e:
                    82:eb:a7:49:00:2c:1a:83:87:1f:f6:a7:3e:61:9a:
                    dd:0b:91:01:55:ea:9d:b8:d9:f6:ae:7e:08:b9:7b:
                    62:e0:0d:aa:d0:da:34:26:0f:2a:eb:38:5e:45:b4:
                    2f:c5:23:a2:d3:0d:32:f1:ef:c8:ec:d4:3e:bb:70:
                    68:27:1f:a8:df:6a:3c:0e:88:2a:6c:8b:4e:1d:35:
                    a5:25:dc:ae:e1:55:fe:fb:aa:eb:30:e0:e7:2d:52:
                    a7:69:80:2f:7c:bb:db:b2:86:c7:24:2c:bf:16:bf:
                    65:e9:1b:43:34:c8:ed:f9:b6:21:97:7c:df:54:c9:
                    aa:07:40:f8:b4:3f:48:ac:fb:39:c9:e5:57:cc:c4:
                    02:73:1e:e4:b3:22:09:e2:9a:ef:5a:2a:ab:ac:52:
                    8e:9e:44:b5:8e:a2:81:5d:77:6b:12:56:bf:5d:ce:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:30:81:65:82:E2:AA:CF:FD:58:4F:93:49:24:59:F3:6F:26:30
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232302e302f32332d3233203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:76:cb:29:40:6f:bf:6d:a0:97:e6:86:9c:a4:19:0d:5c:6c:
         70:94:25:78:60:a1:fc:fb:26:c8:e7:12:ac:82:9e:9e:09:b3:
         7e:ff:f2:a8:e1:60:3c:44:d6:00:43:fc:65:0c:9d:68:1b:4c:
         59:6c:2f:95:ea:78:e4:0d:00:f7:bd:cc:46:5b:24:87:21:56:
         48:12:14:f2:84:23:75:01:41:eb:a7:cd:d5:f6:62:b7:c8:57:
         04:88:4f:53:c0:84:cd:5c:e7:69:b7:d9:99:1f:94:61:27:bb:
         62:b1:7e:df:28:0a:ed:5d:7e:e4:9f:66:34:45:e2:d4:8e:7a:
         57:97:8e:27:cc:e2:1d:3a:1b:b3:07:f5:d9:9e:c6:b1:b0:26:
         d4:ea:94:fc:13:8e:8c:15:f8:19:1e:1e:3c:57:48:9f:f0:7f:
         47:26:39:34:ef:6b:23:46:02:8a:e4:90:91:e3:8d:b1:0b:01:
         f5:a7:e1:ac:a3:da:04:32:b6:aa:59:da:91:87:4b:cb:14:43:
         0a:29:09:54:82:34:a0:d9:99:4a:a2:03:fa:79:13:5b:20:0a:
         3b:31:bf:79:7b:62:a1:64:87:89:cd:46:c7:e3:e0:02:70:84:
         27:2c:97:2a:76:25:cf:dd:f6:37:3d:03:3f:a7:9c:02:0b:ed:
         13:f2:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:07 2024 by rpki-client on console-fra.rpki-client.org