Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          zTbHNRRabV3aTKh/vQPEuIoSYJAtdlaXI1LW5MjjMK4=
Subject key identifier:   D5:6D:69:00:89:3C:DE:5F:CA:EE:B6:8D:D8:70:E9:35:8D:44:62:E6
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       2E176908FEE0936936053D260517283B5D722B40
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 01 Jul 2024 18:03:32 +0000
ROA not before:           Mon 01 Jul 2024 17:58:32 +0000
ROA not after:            Mon 30 Jun 2025 18:03:32 +0000
asID:                     28587
IP address blocks:        177.128.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl
                          rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jul 2024 00:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:17:69:08:fe:e0:93:69:36:05:3d:26:05:17:28:3b:5d:72:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul  1 17:58:32 2024 GMT
            Not After : Jun 30 18:03:32 2025 GMT
        Subject: CN=D56D6900893CDE5FCAEEB68DD870E9358D4462E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:f5:5d:46:93:e0:0c:d2:86:fb:b0:8a:bd:
                    52:19:58:2b:a8:2b:06:0a:d6:86:f3:fa:b4:ff:20:
                    63:3a:2c:39:75:63:d2:e6:eb:ca:06:f2:bf:24:c5:
                    a0:bf:ab:4c:56:b7:59:82:a9:98:f2:6f:98:f5:dc:
                    2f:f3:d6:86:29:10:3a:51:22:c9:13:ac:28:1c:5a:
                    5f:09:28:2c:26:42:ed:89:d3:0d:22:25:e9:32:e3:
                    ea:63:11:9e:5e:6e:47:e8:c0:31:c4:b5:8d:af:1c:
                    d7:90:8b:43:2c:7f:0f:a5:6a:1c:0e:1e:b1:c2:2f:
                    ac:ae:bd:02:c0:49:89:57:6a:32:56:d8:f4:eb:29:
                    cb:5b:30:2b:0e:4a:4e:46:fc:26:2c:62:d9:0b:6f:
                    18:22:c0:67:0b:9a:31:1b:41:55:96:ff:4b:1c:94:
                    ea:bf:3f:7a:1b:74:47:5a:f9:15:f7:3c:06:e6:10:
                    71:8f:b4:72:3a:c7:ed:f7:f9:63:7a:4d:af:3d:99:
                    4f:50:a6:7e:0c:b3:cc:57:a6:b3:c5:9f:d0:97:eb:
                    d9:ca:54:23:f7:7f:dd:aa:49:81:d4:46:3d:44:a1:
                    3d:25:2f:7d:8c:a2:ee:31:2e:85:4a:b2:91:f1:9f:
                    0f:a3:6f:66:4f:0b:43:24:22:98:be:5b:22:96:28:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:69:00:89:3C:DE:5F:CA:EE:B6:8D:D8:70:E9:35:8D:44:62:E6
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:c0:dc:f4:55:ce:f4:2a:bf:65:20:c1:0e:2d:72:98:56:
         e2:e2:91:5b:df:df:fd:78:d7:b9:02:b3:ed:16:a0:cc:a4:b6:
         f2:44:79:da:b7:9e:2d:37:03:2e:6a:1f:41:0a:a5:65:15:93:
         1d:ff:81:db:e1:5b:00:1e:71:79:d5:ee:78:27:2b:74:b7:cd:
         22:d8:fd:4d:45:13:51:9a:87:6e:8a:5a:b7:e2:9d:75:8b:a9:
         24:de:25:b6:3c:39:07:e9:65:c5:9d:e9:f6:2b:3d:c1:b1:15:
         a3:fb:3b:34:d8:1d:06:5e:ec:59:9f:d3:32:18:99:9a:89:a4:
         13:dc:27:62:55:cd:cd:89:1b:87:ea:38:43:6c:fa:52:bb:97:
         94:4c:f9:79:00:bf:7a:1b:06:7f:43:99:ef:b2:34:dc:d4:a3:
         db:83:13:b0:5f:42:21:20:65:b7:fe:71:11:17:3b:4f:61:42:
         e6:61:f9:b6:0f:f2:e9:e0:85:00:dd:ad:4f:1a:be:ee:ec:98:
         60:fc:57:7a:3d:9b:8e:a5:26:86:a1:82:e0:e9:1d:81:11:5c:
         cf:b4:4e:e7:8b:d2:5a:04:d8:b0:9a:60:79:5e:78:f9:42:83:
         1b:fc:70:63:4e:30:12:30:0b:85:ff:56:b2:70:d7:30:14:7d:
         97:23:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 07:52:07 2024 by rpki-client on console.sobornost.net