Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131382e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          y8viJeKn1+PMbFNNZG68dnBXim/XIIUcWSRpI9Z9Urw=
Subject key identifier:   4F:49:A4:6E:F8:D7:67:A4:FE:BE:4C:EA:24:FF:A0:DF:82:91:A3:50
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       2BA81F4ADB75A6C6591B1BD92CEF2A6BAFECC82E
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        177.185.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:1f:4a:db:75:a6:c6:59:1b:1b:d9:2c:ef:2a:6b:af:ec:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=4F49A46EF8D767A4FEBE4CEA24FFA0DF8291A350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:96:e8:76:a1:97:a7:32:b1:c9:ab:fe:89:
                    a0:e1:19:de:fc:15:d7:bd:67:eb:c2:c8:74:99:6d:
                    21:bb:41:d7:15:d2:7f:6c:3b:83:b5:14:48:ab:8d:
                    de:24:8e:86:1b:1c:67:0d:30:c2:d9:5d:f7:e3:07:
                    53:5d:59:23:c9:58:cc:94:c8:b2:50:ab:c2:33:9a:
                    1f:52:7c:f4:30:01:c3:ad:62:50:9c:95:67:32:29:
                    48:87:9c:9d:58:7d:d8:89:bf:b6:af:a7:73:2d:1c:
                    a3:91:cc:3a:12:68:34:b9:7c:7c:41:fd:f9:ce:20:
                    12:33:06:97:5f:db:23:51:88:70:a0:9d:04:41:c5:
                    8d:27:70:ad:60:21:f7:dd:be:2b:bf:97:36:b2:ba:
                    ab:fe:b7:b1:03:2d:48:91:9c:15:9b:67:ed:4d:d9:
                    5f:58:8b:b1:13:61:04:41:6e:dc:60:e2:87:f6:0f:
                    19:1d:69:0e:c5:1e:bc:60:14:b4:af:20:0d:dd:b0:
                    d3:2d:ef:95:42:54:71:c7:00:1b:a5:07:0d:24:55:
                    a9:b6:1d:72:c7:bb:84:f0:1b:14:00:db:97:d8:d4:
                    61:c5:75:6a:a0:88:33:d6:9e:55:1d:4b:a8:9b:88:
                    0f:4b:64:b1:bd:ac:da:f2:75:aa:a4:54:f5:bb:2b:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:A4:6E:F8:D7:67:A4:FE:BE:4C:EA:24:FF:A0:DF:82:91:A3:50
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131382e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:04:90:d4:b4:e1:b7:93:71:2e:c2:89:37:e3:5c:9c:be:
         66:4b:ec:73:01:82:2d:8f:a6:c1:ee:88:c9:d8:2f:d3:6a:16:
         30:77:8b:93:bd:e6:88:e5:54:b9:64:11:a8:39:71:1d:ef:28:
         5a:15:01:44:02:65:4c:3c:1f:84:75:ad:8f:7b:5f:12:46:db:
         07:9e:a0:4c:30:07:e5:5c:5e:54:a3:3b:75:4b:d5:69:16:ee:
         40:59:20:bc:63:94:e5:7b:a4:b8:cc:5a:c6:1c:b7:78:48:59:
         13:4c:3a:8c:d5:7e:b5:a7:5f:1f:a5:a9:a1:f2:31:87:27:d5:
         46:7f:a0:0e:c6:33:e3:db:b9:6d:a9:d1:5b:00:09:28:a2:98:
         0a:6f:04:e8:33:8b:e9:c5:11:0b:40:4a:0c:f0:61:31:3c:17:
         df:ff:43:60:eb:e9:b8:02:c2:48:30:7d:76:dd:41:b5:84:34:
         4b:da:ee:c2:a4:b8:ca:b5:51:af:71:3c:de:a7:6f:82:a2:5c:
         33:64:a6:80:51:34:4a:b0:73:2b:22:89:d2:b2:b7:37:ef:10:
         d4:55:b1:b7:56:e5:cb:80:ce:f3:54:23:d8:30:bb:e6:83:ce:
         a8:51:b5:b6:c9:a8:7d:b8:61:e7:f9:4f:e2:bb:08:fe:dc:d0:
         2d:8f:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org