Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131392e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131392e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          5gxJftU3Fj696ENg6ngWKoIrueaWFKfavlTUxRRy0GE=
Subject key identifier:   91:DB:AB:88:EF:E2:BA:E8:B4:9B:C5:EF:2C:1D:06:3D:C9:04:95:4C
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       5A26C29A796D45E66A7DE1E8CA2102DAC931E648
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131392e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:21:00 +0000
ROA not before:           Wed 08 May 2024 18:16:00 +0000
ROA not after:            Wed 07 May 2025 18:21:00 +0000
asID:                     52932
IP address blocks:        177.185.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 11:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:c2:9a:79:6d:45:e6:6a:7d:e1:e8:ca:21:02:da:c9:31:e6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:16:00 2024 GMT
            Not After : May  7 18:21:00 2025 GMT
        Subject: CN=91DBAB88EFE2BAE8B49BC5EF2C1D063DC904954C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:75:ae:26:1b:cc:66:7f:46:55:a2:fb:0d:
                    74:0b:ea:63:e1:c9:2d:92:4b:7e:1e:47:7d:56:c1:
                    84:ae:ed:28:6b:bd:2c:0c:ea:38:d1:51:fe:ae:0d:
                    e7:e2:8a:fb:58:78:b8:50:29:95:45:b5:a2:ef:db:
                    3c:da:a9:54:c4:8c:8b:09:9c:91:44:6e:41:f6:5c:
                    8a:32:8f:2e:18:5b:07:eb:9b:11:a1:19:56:b1:4b:
                    4b:89:5b:b8:18:75:26:5e:e8:b2:64:5e:93:aa:a7:
                    42:dd:2c:ef:d0:21:e5:02:0d:0c:a5:17:f5:50:d8:
                    61:4d:00:c9:5d:b8:6f:24:ae:dd:45:d0:d1:67:93:
                    19:4a:9a:d2:ef:89:8b:33:04:54:3f:ea:82:80:28:
                    39:ab:17:d9:3f:6a:23:6d:94:fe:67:74:c5:08:7e:
                    35:12:89:98:60:96:f1:13:66:09:66:4b:4c:d7:a5:
                    a2:f2:4b:76:b0:ab:c5:0e:f2:fc:73:78:5f:a5:29:
                    1c:07:54:6b:19:b4:be:6f:d6:6d:b6:0b:16:92:b7:
                    1c:ce:77:54:33:08:3d:e2:df:8b:ec:67:48:14:69:
                    30:fa:be:75:75:ff:58:b6:b7:33:43:db:62:77:44:
                    ce:a7:a5:91:86:a5:09:fb:9a:9c:22:ca:80:dd:53:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:AB:88:EF:E2:BA:E8:B4:9B:C5:EF:2C:1D:06:3D:C9:04:95:4C
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131392e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:d2:fa:4d:7b:23:12:74:dd:e0:68:ae:2d:2b:91:a2:83:
         f2:87:cd:ed:b5:b5:b6:81:de:c9:ca:46:ea:5b:c2:4e:b2:7d:
         86:62:08:e1:3d:09:92:a3:ef:da:ac:47:5b:b7:0c:33:3c:c9:
         a1:ee:ba:6f:ef:1f:9d:ab:b3:52:0f:c2:b8:42:d4:46:f6:a1:
         bd:d1:5a:95:18:18:d8:2e:d5:cf:01:2b:44:34:17:fb:6b:6d:
         63:b3:8f:8d:ca:79:df:33:c2:f0:36:2c:7a:66:47:6f:85:2a:
         00:8c:7e:8b:2c:58:07:11:e1:eb:20:fd:fc:61:f9:51:fb:be:
         f3:8d:99:6d:51:8b:61:f3:f0:e9:a4:79:e7:d5:60:ed:37:0c:
         1d:fe:88:86:14:e8:4a:86:aa:4b:5a:94:63:80:6a:b3:44:4e:
         f3:c7:89:42:26:e7:98:48:de:a7:90:e4:f5:18:7d:c1:6b:a8:
         86:a4:f9:aa:fc:1e:ec:55:7a:79:85:56:8d:5c:9c:89:a5:0b:
         9f:99:7a:c1:c6:6f:32:49:33:1f:1c:57:3e:97:94:59:7d:b5:
         74:2a:01:a1:36:42:d5:76:72:40:3f:6e:76:f8:5e:e0:16:43:
         a9:3b:af:89:c8:ec:fc:e7:5a:27:df:25:c1:c5:06:68:62:d7:
         56:8c:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:48 2024 by rpki-client on console-ams.rpki-client.org