Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131372e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131372e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          ls9VNiqfvFQUQ5KenTnFhdW3hMXwhWBxBEanFe6/m5E=
Subject key identifier:   62:18:17:94:72:86:9A:48:2F:C9:35:61:57:3B:4F:45:C7:80:AE:E8
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       52FD0A3D0FD8E59B324B801E462B2E745DDD5A0E
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131372e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:57 +0000
ROA not before:           Wed 08 May 2024 18:15:57 +0000
ROA not after:            Wed 07 May 2025 18:20:57 +0000
asID:                     52932
IP address blocks:        177.185.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 11:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:0a:3d:0f:d8:e5:9b:32:4b:80:1e:46:2b:2e:74:5d:dd:5a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:57 2024 GMT
            Not After : May  7 18:20:57 2025 GMT
        Subject: CN=6218179472869A482FC93561573B4F45C780AEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:d1:c9:1f:d7:b1:38:b4:9c:0c:0f:06:1d:
                    67:81:07:b5:99:c6:c0:57:63:1b:76:1c:60:43:7a:
                    f3:6f:38:36:bf:fd:91:0b:d4:48:34:b7:87:da:f1:
                    68:18:5f:66:ba:d9:7d:47:02:21:fa:f4:2c:2e:81:
                    6b:a8:57:0b:6f:83:8b:67:7a:a5:1b:ab:31:cf:d5:
                    85:5e:a5:68:03:2a:56:50:84:28:70:3c:ff:09:52:
                    af:f6:d2:c1:ab:a0:38:92:6a:c7:2a:f2:0e:ad:46:
                    c5:68:78:60:b8:46:4c:a9:b4:eb:01:2b:38:6f:ea:
                    79:11:d1:db:3d:3c:77:13:e1:7c:c1:c4:b5:e6:df:
                    e9:f1:e7:f7:b7:a5:fd:0e:e7:c2:0b:ef:14:49:d3:
                    22:0b:8f:b3:bb:9b:12:a5:7b:d9:c9:f7:82:29:df:
                    fb:6a:87:0a:a3:f2:cc:97:8b:8f:a4:b7:2b:b1:61:
                    4d:13:28:31:e4:7f:3c:a4:ce:32:3c:76:18:5c:27:
                    49:fc:1e:a6:27:3c:c7:4f:4d:0a:35:35:99:a6:d4:
                    75:49:14:61:18:bb:e6:68:7e:7f:36:8e:d5:4e:49:
                    ee:77:4f:d3:dd:77:01:17:25:ac:ea:75:e4:b4:27:
                    80:44:db:43:e1:a2:83:57:41:fd:17:46:4e:f5:45:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:18:17:94:72:86:9A:48:2F:C9:35:61:57:3B:4F:45:C7:80:AE:E8
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131372e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:f9:4e:15:52:10:0a:6c:73:80:8b:a4:5b:3b:7e:50:26:
         5e:8d:b4:2d:c0:c7:4f:a3:9b:42:2b:aa:ba:66:c1:a1:9f:82:
         52:66:47:cd:23:2b:76:82:12:f9:fa:67:0d:2e:78:d2:ad:98:
         84:ca:ea:45:28:7d:a5:ff:cc:0f:14:cc:c1:27:52:d8:e3:44:
         cc:38:3f:1b:64:74:b5:d0:86:dc:a7:63:52:7a:3f:41:8c:38:
         a7:23:54:ea:3b:2e:63:cd:ae:f6:46:ce:39:11:dd:45:39:08:
         2a:c3:ec:f7:6c:d3:10:65:bd:4c:cb:89:fd:eb:6a:cb:80:a6:
         1f:fa:8e:9b:ac:d3:92:cc:a3:a0:81:89:dd:39:1e:10:42:f5:
         40:ee:e8:9f:12:ee:63:88:86:ad:54:0c:9c:4b:e6:d1:85:80:
         76:bf:1e:ba:9c:f2:f3:5e:02:83:ac:3e:8d:57:58:0a:12:8c:
         a9:59:21:da:1a:d7:64:d4:7f:82:1d:11:06:7a:fe:1c:b6:54:
         24:2a:90:f5:7d:bd:3b:80:46:fe:a0:c7:8e:76:a3:ba:39:ad:
         ca:a7:95:8d:c4:f7:7c:20:56:f8:76:20:7e:ba:bb:8b:25:a3:
         bc:62:2a:81:b0:08:e6:8e:40:56:4e:fc:3b:04:d9:79:d9:38:
         53:7f:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:48 2024 by rpki-client on console-ams.rpki-client.org