Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32332d3233203d3e203532393332.roa
File:                     3137372e3138352e3131382e302f32332d3233203d3e203532393332.roa (raw, json)
Hash identifier:          /+WMk16SOd6E787HhLcsJJex3ibp58pzry79GojUJgg=
Subject key identifier:   59:7A:93:47:C2:49:B6:5C:3A:A2:28:C1:50:23:83:AB:3E:B7:8C:37
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       52F06B4AD7E53A87B2E9C32D9F681DC0AC0AA126
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32332d3233203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:21:00 +0000
ROA not before:           Wed 08 May 2024 18:16:00 +0000
ROA not after:            Wed 07 May 2025 18:21:00 +0000
asID:                     52932
IP address blocks:        177.185.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f0:6b:4a:d7:e5:3a:87:b2:e9:c3:2d:9f:68:1d:c0:ac:0a:a1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:16:00 2024 GMT
            Not After : May  7 18:21:00 2025 GMT
        Subject: CN=597A9347C249B65C3AA228C1502383AB3EB78C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:82:d1:9f:6b:43:46:76:48:df:61:2f:b7:
                    32:6a:ba:ce:bc:81:40:d8:68:5e:10:cd:0e:b3:6f:
                    82:20:85:76:cb:f9:fd:64:c7:16:41:ca:da:e6:57:
                    bd:94:20:f8:d8:a4:df:82:0f:92:38:48:54:25:8d:
                    72:56:ab:c7:f3:87:36:bc:3c:2c:8f:24:60:a5:37:
                    7c:7b:29:31:1c:ef:f8:77:3b:e0:37:46:9c:3e:31:
                    f8:94:67:5d:1b:c3:43:b1:7c:c7:c1:9e:da:dc:b8:
                    f1:30:0d:8f:9f:08:43:69:be:7e:55:36:84:38:17:
                    5c:b9:b8:6a:ea:08:cc:fd:f2:a9:26:b7:64:3c:a7:
                    ee:08:90:11:3a:90:79:fb:01:c8:41:4a:9b:20:74:
                    35:68:c6:e6:f4:89:86:9d:04:8e:b6:1b:ff:41:aa:
                    5d:d4:5c:34:1a:b7:35:fb:47:86:0c:a2:49:a2:e5:
                    34:34:95:25:d2:fa:d0:5b:cb:eb:f6:5d:f4:fc:4a:
                    c1:da:9a:05:54:91:6d:dc:aa:06:eb:86:8b:14:a8:
                    76:7b:bc:eb:ff:ba:92:a0:ac:2a:49:e8:a1:4c:e5:
                    38:00:19:67:04:67:8f:a1:21:77:17:b7:46:68:8a:
                    96:57:0b:c8:b2:2b:7d:95:e9:94:1a:a5:06:d9:cc:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7A:93:47:C2:49:B6:5C:3A:A2:28:C1:50:23:83:AB:3E:B7:8C:37
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32332d3233203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:1e:c9:22:ed:70:a7:71:c0:6a:da:a9:8a:e0:0d:d6:c2:
         d8:f9:f2:f6:1f:23:c6:d7:f4:5f:3e:ed:06:d0:52:7e:1a:2e:
         77:e2:8c:15:b3:19:23:e7:42:d7:e9:9c:be:ee:99:06:a5:7a:
         1a:57:6d:d2:a6:ef:1a:8f:b8:67:8c:50:46:8f:c1:af:3f:f3:
         6f:2f:a3:5a:09:11:6d:1b:90:0b:fe:21:47:e5:e5:06:6c:2c:
         0c:e6:c4:47:b0:be:a7:ab:50:dd:17:dc:04:a8:f3:bb:f7:56:
         df:3d:be:ef:1c:7d:e6:f3:d6:7c:61:c4:c7:8f:79:fc:bc:d3:
         a9:23:a4:42:e1:63:31:14:45:5f:5e:fa:22:69:4b:a4:a3:b1:
         3c:e6:9d:d7:8c:59:d0:f0:26:a9:a3:95:13:f4:73:b5:4a:71:
         1e:17:61:15:40:84:cb:87:0e:1a:1b:b1:31:14:13:3b:59:49:
         eb:a5:2e:89:f0:b8:6f:3c:4f:5f:99:53:af:24:45:28:4f:84:
         23:ef:48:73:df:a9:dc:f5:17:e1:7f:3d:ed:4c:06:a2:e3:46:
         07:60:1a:a7:8f:d7:eb:97:99:9b:0f:8c:eb:ba:ba:ab:38:09:
         bc:7e:0a:ea:4c:f6:98:3d:e4:9b:00:76:23:18:e0:cb:ad:c0:
         50:91:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org