Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131332e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131332e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          VX8tw4/tgebMqbI4LEwo7z6KgZFJlgUafuocnE3fbLE=
Subject key identifier:   DB:C9:D1:B3:2B:53:5B:E4:2E:AD:A3:D1:C9:E2:72:B1:5A:CC:17:36
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       63E7973C8B4651ADACBE0931BE838029723C95E7
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131332e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:21:00 +0000
ROA not before:           Wed 08 May 2024 18:16:00 +0000
ROA not after:            Wed 07 May 2025 18:21:00 +0000
asID:                     52932
IP address blocks:        177.185.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e7:97:3c:8b:46:51:ad:ac:be:09:31:be:83:80:29:72:3c:95:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:16:00 2024 GMT
            Not After : May  7 18:21:00 2025 GMT
        Subject: CN=DBC9D1B32B535BE42EADA3D1C9E272B15ACC1736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:1f:88:53:70:17:63:d2:1e:a7:9c:76:a9:
                    31:4b:e1:cd:00:b0:6e:bb:95:0c:f3:e1:f9:41:a7:
                    94:92:a0:18:f7:37:54:66:ce:46:7c:6c:e4:a8:2e:
                    76:87:15:99:c5:34:3d:a3:82:86:ff:c4:2f:fe:1f:
                    24:3e:cf:84:cd:29:60:a5:76:80:4a:84:e7:70:2c:
                    ce:e7:2f:f1:39:e9:f6:03:75:56:f3:95:ac:17:0d:
                    15:7d:bc:b7:36:aa:fd:c6:53:f6:e7:94:fc:d3:3a:
                    0d:a1:a3:ef:b6:76:49:fa:c0:5c:77:ee:f0:30:db:
                    1e:82:c6:46:5f:59:86:29:78:1e:16:03:29:bb:e2:
                    8c:65:e9:8e:fb:71:76:bb:58:f2:61:46:5b:75:e0:
                    17:01:c4:58:48:6f:4e:10:f5:66:d8:8a:b8:4d:29:
                    49:86:24:7a:34:13:96:c4:62:83:08:71:47:0e:74:
                    6a:b5:bb:c7:4e:57:e5:44:df:f2:9c:f4:10:d6:c7:
                    bb:0c:be:b1:14:90:42:1e:19:90:89:92:59:0b:b1:
                    e3:af:de:36:6e:33:2f:0a:58:d2:a5:38:a3:1a:45:
                    d3:dc:fa:6b:80:6f:e6:df:fd:87:41:7e:67:70:91:
                    55:97:13:51:7a:73:2e:c0:af:94:47:37:19:6c:a6:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:D1:B3:2B:53:5B:E4:2E:AD:A3:D1:C9:E2:72:B1:5A:CC:17:36
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131332e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:91:a7:f0:9e:43:a1:60:03:66:8e:e5:a1:a4:12:ef:84:c3:
         3d:df:47:b8:65:23:4c:0d:48:03:3d:ff:bc:32:ec:e5:16:66:
         23:c3:5a:e1:00:44:97:0b:26:a1:3b:c7:0d:f6:07:de:b5:27:
         9c:76:3e:7b:20:ee:e4:f0:49:ca:43:b0:69:cc:89:9c:a6:17:
         a7:b8:5c:f3:d5:cd:ec:7c:53:72:4d:f1:96:ff:97:d2:c5:3b:
         f5:a5:6d:41:a6:50:eb:5a:bb:a9:4d:b2:f3:e0:03:2d:ea:ac:
         17:76:29:c9:40:b0:e7:8e:11:ec:7f:e7:c1:e0:17:2e:8f:1c:
         4f:f4:eb:11:f9:ad:34:ac:eb:78:ba:33:0b:84:1b:cf:99:39:
         f1:e5:71:b6:79:57:6b:ca:19:d5:3d:13:f4:2d:6b:e8:2b:2a:
         52:85:71:2a:bf:1d:07:c8:0a:b3:bb:08:c1:15:70:39:0f:ac:
         3f:f5:9e:27:79:d1:1d:84:ae:ec:16:36:bf:50:4a:8d:b1:78:
         a5:c4:5d:8e:ac:ae:ae:3b:fc:30:e5:31:19:f9:10:a0:17:05:
         f7:73:4e:6d:52:39:1f:78:89:28:7e:24:9f:3a:3f:9b:74:b3:
         68:f6:fd:9a:e0:25:3b:1b:c1:55:04:3d:05:81:56:d0:48:40:
         fa:eb:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org