Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          hD2F1QGKPt1B9tNIrk2KgRbIZKazoPPRMU9e8mS+FpQ=
Subject key identifier:   1A:FD:F9:F7:4D:72:5C:7D:83:7A:8E:72:EB:4E:59:10:3A:33:BA:8E
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       1316C1F4D3907A3C6FCACEB26C07FB9240CB76E3
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 01 Jul 2024 18:03:38 +0000
ROA not before:           Mon 01 Jul 2024 17:58:38 +0000
ROA not after:            Mon 30 Jun 2025 18:03:38 +0000
asID:                     28587
IP address blocks:        177.128.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl
                          rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jul 2024 00:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:c1:f4:d3:90:7a:3c:6f:ca:ce:b2:6c:07:fb:92:40:cb:76:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul  1 17:58:38 2024 GMT
            Not After : Jun 30 18:03:38 2025 GMT
        Subject: CN=1AFDF9F74D725C7D837A8E72EB4E59103A33BA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:96:de:09:75:7a:5b:7b:5a:6a:24:bc:2e:
                    10:cc:ac:22:36:37:6a:9a:1a:e3:38:b3:c5:72:82:
                    19:22:f3:d2:59:12:26:1a:93:2b:68:a9:62:74:df:
                    8c:bb:75:ae:b8:72:70:d6:76:bd:b4:93:cc:48:7a:
                    39:1e:0d:5a:6d:70:8a:10:2e:53:63:d4:fc:cb:38:
                    81:56:a4:16:a7:e6:06:16:89:1d:58:bc:b9:1e:ab:
                    1e:82:a2:e3:32:8f:f7:c1:16:cd:8d:d0:f7:76:12:
                    9d:ff:14:19:c6:9f:de:21:6d:ed:9c:76:fa:81:3c:
                    b7:1f:7f:85:25:1b:0b:92:8c:4f:f3:e1:97:0e:69:
                    70:d1:29:75:58:e7:8f:69:79:1a:50:09:40:be:a0:
                    57:f4:f7:9d:50:38:dc:ca:ae:20:43:ea:12:9a:b1:
                    da:2e:de:a4:37:5c:ae:e9:31:e3:ad:31:74:8d:a7:
                    60:92:5b:e2:d6:07:7b:32:49:28:c3:01:53:aa:69:
                    01:fe:9e:44:a9:3d:44:63:cd:93:02:7c:3c:16:60:
                    2e:1f:34:56:f4:07:0e:f3:95:31:7b:4a:6d:8b:6b:
                    fd:8e:df:66:59:c3:2b:e1:20:a1:61:47:dc:46:cf:
                    69:11:08:5e:3c:37:60:aa:ab:7b:4c:b6:75:0b:02:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:F9:F7:4D:72:5C:7D:83:7A:8E:72:EB:4E:59:10:3A:33:BA:8E
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:75:da:ca:ce:69:f4:bb:7a:53:32:4d:6b:91:d8:7b:0b:a0:
         4f:f2:47:00:27:49:c6:aa:f1:2d:d5:33:b1:cf:b2:76:44:b2:
         05:83:93:fd:e2:9d:88:83:f2:da:ab:ad:c0:e5:a7:52:06:00:
         f5:67:b7:dd:7f:21:fc:e0:88:37:cd:a7:b3:1e:95:81:85:0a:
         d5:11:77:cb:bd:f1:14:e6:f1:e3:55:df:3f:ca:35:02:1c:2a:
         c3:28:ca:e7:6c:72:68:e2:8f:51:76:bb:bc:76:bc:ba:95:d9:
         9f:83:46:d7:42:69:24:0f:24:40:82:94:1c:d4:74:cc:7d:32:
         21:a7:83:e8:5b:b6:29:15:07:d5:d2:0f:55:69:e9:95:a5:bd:
         11:aa:9f:44:31:58:75:a6:e9:99:ae:b7:da:dd:5a:7e:a1:dd:
         66:81:8a:0f:24:81:6b:d4:2e:0b:19:21:fe:0e:fc:f7:dc:1f:
         a7:4f:21:e1:2e:f6:7b:61:3e:a5:a2:41:1a:eb:c5:75:56:3c:
         52:bd:c7:43:dc:f8:50:c2:df:82:72:55:23:73:86:0f:73:61:
         65:75:e7:f0:cd:bb:6d:e4:c2:23:00:5e:f9:da:04:73:25:4a:
         bc:51:61:91:54:23:21:ac:38:a7:b0:f9:a8:c4:c9:4f:d7:50:
         46:10:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 07:52:07 2024 by rpki-client on console.sobornost.net