Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3137372e37332e33362e302f32322d3233203d3e203532363934.roa
File:                     3137372e37332e33362e302f32322d3233203d3e203532363934.roa (raw, json)
Hash identifier:          v5/3PQlRYMIQ7/jBBchwKfbSDu0y7zMb3JDXpfIsqWg=
Subject key identifier:   97:BB:2E:1F:28:6D:92:DA:AD:86:93:24:A8:00:4D:7E:8E:89:EE:F0
Certificate issuer:       /CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
Certificate serial:       592FD9DE29E259DB9C1D29A55F68BD4DAE05C792
Authority key identifier: 83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3137372e37332e33362e302f32322d3233203d3e203532363934.roa
Signing time:             Wed 03 Apr 2024 23:47:21 +0000
ROA not before:           Wed 03 Apr 2024 23:42:21 +0000
ROA not after:            Wed 02 Apr 2025 23:47:21 +0000
asID:                     52694
IP address blocks:        177.73.36.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl
                          rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 23:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2f:d9:de:29:e2:59:db:9c:1d:29:a5:5f:68:bd:4d:ae:05:c7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
        Validity
            Not Before: Apr  3 23:42:21 2024 GMT
            Not After : Apr  2 23:47:21 2025 GMT
        Subject: CN=97BB2E1F286D92DAAD869324A8004D7E8E89EEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:df:b4:94:a3:60:4b:c5:ac:05:d7:3a:9c:
                    f6:89:cd:cb:e8:42:d4:7b:19:85:70:b3:71:9b:06:
                    27:41:74:76:e3:0d:de:4d:82:3a:ea:95:a1:55:00:
                    83:88:4a:c3:b9:62:00:22:91:1b:d8:05:7e:b3:5d:
                    38:bd:36:34:de:eb:8f:c2:f4:c7:73:9d:88:30:10:
                    e6:38:5c:47:e0:fe:4f:a0:ff:0a:5b:82:6f:26:fd:
                    34:62:ea:3b:79:f8:07:8e:b1:ec:52:b4:e8:33:f7:
                    02:c6:e6:8e:42:b1:82:78:20:24:1e:de:98:43:f9:
                    05:09:d4:3f:2e:53:f7:a1:3c:79:a2:87:fd:39:71:
                    2d:0d:43:de:3e:1e:15:bb:fa:e2:7d:ab:c3:cc:41:
                    ff:70:e1:e0:6c:10:04:84:8f:12:b4:7a:aa:60:51:
                    a2:7b:a5:c0:70:1e:d3:44:0b:92:bb:a2:d1:56:cd:
                    fc:9f:ed:ed:19:db:e0:ad:82:ac:32:03:bf:eb:42:
                    4d:d6:ed:0d:5b:64:54:0a:05:23:1a:fe:e8:3e:29:
                    9c:b7:d4:f1:2b:5f:a0:56:7c:f2:97:ed:f4:64:b8:
                    52:37:b1:dc:d2:b0:07:11:e7:cd:a4:f2:a0:64:20:
                    65:99:11:24:a9:83:1c:64:fd:c7:9c:fe:69:a6:7b:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BB:2E:1F:28:6D:92:DA:AD:86:93:24:A8:00:4D:7E:8E:89:EE:F0
            X509v3 Authority Key Identifier:
                keyid:83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3137372e37332e33362e302f32322d3233203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:99:ff:3d:d6:01:70:f6:96:fd:31:db:13:ba:40:5a:f0:
         9b:80:3b:1f:85:5e:81:9a:67:63:c2:1e:10:fc:49:ae:f1:91:
         e9:93:30:11:05:83:70:a8:6c:b5:34:08:0c:a0:f6:fb:2c:04:
         ea:e3:a3:e3:5e:a7:c5:6f:12:a9:f8:d4:a5:c1:81:74:22:06:
         ef:16:13:71:69:8c:c0:4e:4e:09:cb:9f:7f:b0:4a:69:5d:59:
         14:53:1b:e1:51:54:bc:c6:52:e3:eb:90:19:e8:02:1e:68:d6:
         fc:53:27:b3:53:ee:39:2a:ee:06:2d:6f:17:76:bc:d2:33:f9:
         40:b8:6b:78:33:ea:94:0d:bb:be:12:6c:b0:68:df:af:bc:c7:
         70:97:48:56:ff:41:e2:19:b9:7a:52:eb:f2:ae:0e:87:dc:70:
         9e:b6:f6:ed:59:54:24:1b:36:78:03:33:2e:20:9b:2b:d1:34:
         c9:53:83:84:b5:4c:29:6d:8d:10:84:e6:bb:65:11:65:9f:8f:
         80:c6:f8:50:9a:81:7f:31:b5:3a:9a:e5:e0:fe:3d:2f:2f:ad:
         62:8f:34:e4:d3:2c:cd:13:95:3d:f2:69:64:6e:5f:0f:14:37:
         f5:f9:91:36:f8:a5:71:2a:80:fe:c4:13:09:33:5b:d1:cf:08:
         c4:0b:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:03:18 2024 by rpki-client on console-fra.rpki-client.org