Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa
File:                     3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          lLaDAN5g4J09K4AJlKFDgMgXefEsklO+Q80pfOvAguE=
Subject key identifier:   4E:B7:C6:36:A9:76:12:42:7F:25:15:90:E8:72:E2:42:8D:9D:CA:12
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       304A6EB2532D1BDB4C59B6CCEA2FF987FC025F1A
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa
Signing time:             Fri 05 Apr 2024 01:17:19 +0000
ROA not before:           Fri 05 Apr 2024 01:12:19 +0000
ROA not after:            Fri 04 Apr 2025 01:17:19 +0000
asID:                     262441
IP address blocks:        177.44.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 07:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:6e:b2:53:2d:1b:db:4c:59:b6:cc:ea:2f:f9:87:fc:02:5f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Apr  5 01:12:19 2024 GMT
            Not After : Apr  4 01:17:19 2025 GMT
        Subject: CN=4EB7C636A97612427F251590E872E2428D9DCA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:f0:ba:5f:9e:24:50:31:88:31:39:41:af:
                    6d:c0:8e:92:d8:51:a7:49:2e:65:4a:61:99:00:83:
                    0f:7e:3b:8e:5b:d6:c7:c6:27:53:5b:c3:aa:fa:bd:
                    d7:b1:5e:5f:16:e4:30:c0:99:59:8e:cc:0b:70:62:
                    3b:d9:72:3f:e0:9a:de:6f:78:17:3c:50:e6:69:17:
                    5b:1e:a5:e9:14:40:3b:48:b4:fe:9c:7b:c0:f1:1b:
                    d4:e8:51:34:9b:95:7c:9a:17:92:a2:b1:e3:6f:84:
                    79:f8:70:da:d7:96:5e:8e:d8:11:de:1c:e4:0e:a6:
                    78:ec:0d:f6:52:b6:e3:b5:5d:ab:f2:bd:45:e6:09:
                    7a:7e:15:4a:04:9e:8a:85:c7:2d:bd:a3:42:d2:50:
                    bf:cc:52:12:c4:88:d1:3f:0e:e7:6a:4c:60:38:23:
                    1b:ca:e3:3b:8a:82:3b:18:de:3e:f8:f2:6d:a9:38:
                    99:c0:b7:6c:55:05:0d:f8:d8:94:9e:d1:10:3b:5c:
                    60:73:1e:9a:8b:88:f9:7b:46:fe:c6:52:ac:4d:5e:
                    e2:5a:9d:56:2e:bb:c4:48:9e:78:5a:f8:15:06:37:
                    e7:7d:8d:96:ed:71:21:13:e3:fe:b7:96:ec:d0:2d:
                    2e:c8:18:01:a9:47:30:bf:3d:81:eb:e2:99:31:f8:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:C6:36:A9:76:12:42:7F:25:15:90:E8:72:E2:42:8D:9D:CA:12
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:85:d6:28:52:dd:2b:61:94:10:bc:6d:a7:44:e6:22:13:ff:
         e5:6b:13:d2:b9:67:33:17:42:09:7d:c3:8b:34:78:45:73:e7:
         73:c7:0f:51:15:59:37:50:a6:29:56:ed:02:27:dc:19:f7:68:
         43:b7:e7:af:a6:e7:20:0c:f4:6d:2e:fd:5e:0f:af:67:2f:ea:
         bd:66:e8:68:55:50:7a:cc:80:28:4d:72:bd:3a:2c:38:a6:c1:
         21:26:c7:58:77:9b:1a:5d:eb:19:d9:89:31:a2:ea:53:78:f4:
         20:e6:ca:fd:ff:fb:af:69:4d:df:c6:f4:8a:d0:ad:5f:61:56:
         d5:81:89:eb:b6:24:69:34:9f:5a:25:b5:0e:e7:c4:98:4d:c9:
         00:8b:a8:21:26:27:59:60:0c:ad:57:ce:ef:73:72:fd:18:dc:
         b5:43:25:b0:df:4b:08:7a:e9:db:79:d6:7b:c0:dc:28:c8:f1:
         b8:c8:70:7b:44:53:61:a7:a6:75:88:04:b4:88:4f:b9:54:c1:
         4d:00:70:15:de:38:e6:ae:e6:f9:6c:47:03:9b:7c:7a:ce:c3:
         24:a6:57:78:83:9a:63:c2:67:bd:74:57:2c:85:62:d8:20:db:
         48:e1:6f:54:50:33:6d:03:bf:4e:97:9a:88:09:36:b9:1b:4f:
         c4:e8:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 10:20:13 2024 by rpki-client on console-ams.rpki-client.org