Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231302e302f32342d3234203d3e20323633303837.roa
File:                     3137372e3133372e3231302e302f32342d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          El+kbuQ//B8WOWPtIhjWuQMz1J/KpE9JszbX+VnX+SI=
Subject key identifier:   CD:62:FC:50:66:53:55:6C:18:B2:3D:23:9E:DA:43:F5:F1:B3:29:BD
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       7118DA3C57D559012B858C0FC5C4D82D13F5F8D3
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231302e302f32342d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:34:54 +0000
ROA not before:           Wed 22 May 2024 17:29:54 +0000
ROA not after:            Wed 21 May 2025 17:34:54 +0000
asID:                     263087
IP address blocks:        177.137.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 21:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:da:3c:57:d5:59:01:2b:85:8c:0f:c5:c4:d8:2d:13:f5:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:29:54 2024 GMT
            Not After : May 21 17:34:54 2025 GMT
        Subject: CN=CD62FC506653556C18B23D239EDA43F5F1B329BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:89:f1:be:ee:4f:e7:31:ba:92:33:b4:c7:
                    a6:c5:ca:53:fd:19:73:c3:45:52:ba:50:66:2d:0e:
                    38:01:94:49:f2:95:1f:b2:9a:d4:e6:34:09:1e:c8:
                    ba:5c:5f:64:4e:45:e3:aa:89:eb:bd:0e:80:54:3e:
                    da:c4:0d:fa:8e:7c:39:0a:7d:70:66:f9:e0:5f:ab:
                    42:dc:7b:2d:0d:59:fd:ca:f1:bd:ad:b9:d5:4c:cd:
                    39:96:f1:a7:a0:36:94:1f:16:87:aa:d5:71:1b:27:
                    e0:e5:d3:19:aa:0a:2b:ec:af:31:b3:93:90:02:b4:
                    df:12:dc:dc:af:5f:7a:9c:77:aa:af:cb:0d:b9:5d:
                    34:f5:db:62:69:24:db:32:74:53:11:8b:89:80:79:
                    00:e1:9a:36:f7:78:fa:ab:b1:81:8b:c3:47:b8:1c:
                    38:3b:73:d0:fa:c4:99:ab:d3:80:71:3b:4f:8d:3c:
                    d9:95:a7:3f:b6:ea:e8:de:e9:58:c1:01:2a:06:00:
                    59:ff:2b:33:7d:05:ad:ff:5b:29:51:f8:7c:a1:b9:
                    1a:ac:ba:e7:c7:1a:d6:72:bf:02:a6:1d:53:e6:97:
                    5f:57:e8:df:2f:27:b4:cf:64:8a:14:f1:6c:f8:16:
                    67:61:50:56:96:8e:0f:d4:1d:b5:da:2d:73:8b:13:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:FC:50:66:53:55:6C:18:B2:3D:23:9E:DA:43:F5:F1:B3:29:BD
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231302e302f32342d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:09:f9:1e:48:69:0f:ef:ad:ad:8a:7f:67:87:56:13:e9:
         bd:0a:70:c1:9c:a6:cd:6c:13:8a:b2:93:9c:b1:57:96:85:9c:
         c9:b8:5e:de:ca:5b:44:5f:45:52:bb:35:b3:75:6f:6b:25:dc:
         46:ed:4a:7b:5d:bf:34:eb:22:9d:a0:b3:4a:ef:17:60:d8:cb:
         96:46:e8:5b:32:12:3e:94:f9:67:5a:71:61:24:2a:fe:70:55:
         01:cb:30:c5:b9:49:9e:b5:2b:f5:a1:53:51:2a:fe:34:bc:23:
         06:6f:71:64:cb:32:d1:ae:3a:f7:8d:73:2b:4b:ad:7c:0e:e0:
         d6:3e:d5:e1:29:5a:b0:ae:e5:3c:6a:d8:e8:56:91:8b:19:f4:
         9c:54:f8:ae:cf:a0:0d:6a:2e:2a:02:e0:16:ae:02:11:4c:d3:
         66:93:e4:1c:83:8a:71:21:8d:21:d0:d4:5f:b8:f9:d7:61:d5:
         82:a7:58:fd:9a:aa:b6:6e:a6:3f:f7:df:8c:24:5d:0c:0e:1b:
         a4:1d:b5:5a:ce:41:02:d2:66:c9:ac:32:65:69:23:61:4c:69:
         25:72:fd:b5:a9:92:b2:43:16:e2:44:34:04:23:a5:c1:cd:55:
         9d:b6:63:7b:2c:8c:24:c1:d7:66:cb:1a:f4:a5:89:a0:cb:7e:
         14:e0:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:13:40 2024 by rpki-client on console-ams.rpki-client.org