Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          61Ay6VbuXkNBNHYztnnQiZMVXLXx6velBe/Fm4OpuXo=
Subject key identifier:   29:1F:FC:9C:BF:1A:8C:0A:C3:58:A4:6C:FE:9F:1B:9D:7D:0E:58:BB
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       10DC8847C846809C30CD667FBB8CCE40BB05B730
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        177.185.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dc:88:47:c8:46:80:9c:30:cd:66:7f:bb:8c:ce:40:bb:05:b7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=291FFC9CBF1A8C0AC358A46CFE9F1B9D7D0E58BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:64:56:da:93:c8:bb:3b:9f:53:40:ee:43:
                    85:98:26:fa:b8:e2:8c:b7:17:53:d9:87:99:94:18:
                    ca:dc:fc:34:6e:ec:ad:f7:62:c2:f9:ac:dd:6f:46:
                    5a:2c:1d:3a:ad:86:b8:39:2e:4e:e6:28:6e:99:2e:
                    26:f3:6e:e8:c1:4b:c5:ca:0e:be:3f:17:c1:24:e6:
                    98:19:6a:e2:fe:19:7f:b2:53:d3:25:7f:7e:4c:5f:
                    16:53:6b:33:72:80:90:10:5a:c9:9f:12:20:5e:ad:
                    f2:54:9f:e8:02:1f:03:4a:53:75:6b:c5:c9:06:be:
                    97:0e:c7:39:1a:54:bd:38:55:19:2f:f5:23:1f:f7:
                    ec:84:54:93:82:74:e6:1c:fa:d0:00:21:7a:23:48:
                    d9:cd:c5:ca:d6:06:f0:aa:f6:00:74:35:95:30:b8:
                    0b:04:f9:4e:df:52:d3:12:da:6f:f6:4a:fc:34:c0:
                    72:07:d2:6d:33:b9:01:9b:3e:d6:53:67:3a:05:70:
                    ac:68:5f:03:05:d2:a0:b7:41:c8:b1:e0:e2:c3:39:
                    ed:ad:ef:4f:4f:02:b5:40:29:2f:9f:25:8d:e6:df:
                    24:24:c1:81:df:b9:a8:c6:b7:96:3a:93:5a:4f:37:
                    5d:a0:17:46:1f:53:24:e9:b5:a4:d5:e8:f8:e6:33:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1F:FC:9C:BF:1A:8C:0A:C3:58:A4:6C:FE:9F:1B:9D:7D:0E:58:BB
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:54:e6:11:7c:b3:6e:63:94:81:ac:35:8a:a6:88:c8:df:06:
         20:7c:46:40:07:c6:d2:a6:a9:9e:f0:24:79:f7:00:e5:e0:46:
         26:32:67:9f:28:8e:ca:bc:fa:d5:b4:20:25:0b:a4:74:ff:a5:
         d0:d8:de:70:98:ea:1b:49:fa:8d:2f:86:42:75:97:ac:94:ee:
         7a:7f:77:d2:b1:32:45:cd:5c:e5:d5:59:ff:ae:22:25:64:8a:
         93:06:31:c0:c6:11:fe:c7:94:1b:dd:4e:42:97:b6:6c:8f:dc:
         5d:af:3c:a0:9a:cc:f0:2c:f9:7f:65:47:e9:8a:99:ca:d8:aa:
         91:b3:16:f1:7e:3e:8f:e4:23:0d:64:73:73:df:83:70:31:01:
         52:ec:64:92:33:a9:24:f9:30:f5:56:4b:c7:fd:b1:1c:9f:77:
         e2:3e:84:ff:30:d1:9a:28:6c:05:6e:4c:9a:5b:98:ec:61:d9:
         10:b5:30:85:20:fb:87:9c:04:1e:58:9e:84:21:1c:ea:33:97:
         fb:2f:1a:0a:61:c5:25:2c:a7:2b:53:aa:1b:6a:ec:da:a9:24:
         0e:08:b2:0c:01:1d:2a:04:1d:10:63:d1:64:c5:79:d1:77:87:
         12:c4:e9:eb:23:b4:be:8d:1a:ae:16:3a:9b:83:08:2c:96:57:
         61:7a:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org