Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131362e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          da7o/sCjnmivCwWubdbNTX+9IabSQyBIjGOjZ3DhJTM=
Subject key identifier:   EF:45:AA:51:76:6E:E0:A0:7F:FE:51:05:83:76:44:39:42:02:89:3B
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       4DD8BA30E25A22E0D62C551010D7D15966C16F46
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:57 +0000
ROA not before:           Wed 08 May 2024 18:15:57 +0000
ROA not after:            Wed 07 May 2025 18:20:57 +0000
asID:                     52932
IP address blocks:        177.185.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d8:ba:30:e2:5a:22:e0:d6:2c:55:10:10:d7:d1:59:66:c1:6f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:57 2024 GMT
            Not After : May  7 18:20:57 2025 GMT
        Subject: CN=EF45AA51766EE0A07FFE5105837644394202893B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e2:50:6e:40:ce:fe:65:24:b2:c9:13:8c:64:
                    6a:c3:03:8c:a3:b2:4d:f7:3f:cd:8f:03:2e:05:4e:
                    b6:a6:06:eb:f4:37:a9:92:c3:61:d5:0f:ea:32:5e:
                    36:82:f5:2b:9b:57:e5:f0:47:69:ba:81:7f:ad:93:
                    7d:ce:5f:5a:a2:71:70:67:34:b5:b8:c1:63:aa:41:
                    46:65:ff:db:31:66:4c:dd:a6:a7:22:c2:43:14:d5:
                    61:dc:c8:1f:7c:76:97:54:ba:4a:01:a3:1e:7d:76:
                    7f:cd:8c:77:26:b2:d9:80:70:52:ef:bc:c8:5c:ac:
                    b9:4d:a5:7d:14:d7:1a:71:2f:14:55:80:9d:f5:62:
                    f9:9a:74:f7:24:73:c3:63:b8:97:61:5b:55:56:43:
                    ab:f0:b8:d8:b1:6e:45:73:a0:91:07:73:8e:a5:33:
                    ab:0d:f3:f8:e1:d2:37:5b:54:a9:e3:52:f0:52:39:
                    9b:c9:33:8e:e0:b4:20:4e:ca:0a:30:10:17:01:cd:
                    95:29:bc:30:19:72:25:1b:26:bf:d1:1c:0e:31:b8:
                    c1:dc:ce:d7:07:df:c5:0a:53:e8:d9:99:32:c7:d5:
                    0d:4c:34:60:96:a1:a7:ab:20:70:fc:9c:1b:b5:c2:
                    ac:cb:b4:2f:bc:02:6a:43:ea:d5:94:5c:cb:4f:fe:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:AA:51:76:6E:E0:A0:7F:FE:51:05:83:76:44:39:42:02:89:3B
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:8b:5f:b1:fb:15:78:f4:ec:db:0e:74:72:ba:b8:6d:f2:87:
         29:84:91:d9:46:51:a5:42:a1:3f:ee:35:8e:4c:ee:43:f5:a8:
         25:bb:3f:d7:5d:dc:14:30:9b:13:20:37:82:af:69:dd:1e:37:
         33:e2:22:78:74:c2:1e:22:01:2c:ec:75:d0:2a:e2:60:4d:bb:
         e0:43:1f:9b:dd:36:a8:68:3b:87:95:ae:07:9d:f8:ea:fa:c2:
         4d:c3:e6:36:02:30:23:de:bf:fa:e9:5e:e8:c6:bb:90:8d:b5:
         bb:d3:0e:33:6c:c9:ec:f2:6a:0b:a8:7e:e0:19:2b:9c:f0:5b:
         5a:f2:91:ef:25:5b:37:05:13:54:21:4b:ff:d1:ef:d7:c2:b7:
         6e:6e:c8:d4:68:86:60:52:92:54:e5:50:06:2d:d1:a0:5d:7f:
         2d:ac:ab:3e:7d:dd:e6:54:58:1d:3b:c0:b6:73:1e:b8:9b:6e:
         8b:d8:5c:e8:e8:ae:54:b3:9f:92:f1:36:6a:44:a1:bf:84:0a:
         14:17:f5:45:06:15:18:7b:5a:19:8c:0e:57:ba:dc:43:aa:eb:
         c5:b8:95:7b:10:6a:ff:3d:a2:8b:c2:6d:dd:5e:36:7a:f8:9d:
         b2:12:00:03:6d:c5:3b:44:d4:42:b7:10:75:44:2e:bc:a6:82:
         1f:0a:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org