Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa
File:                     3137372e3135352e37302e302f32332d3234203d3e203532373438.roa (raw, json)
Hash identifier:          ELchuM6W/vs/SetyIibs1wSjiNErXzjL+E36XHFLkx4=
Subject key identifier:   C6:E0:F1:3B:3E:CE:18:63:DC:1E:4C:9D:10:54:3C:B1:96:7A:C5:13
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       519B8044A39C3014882956E67008B7F55325F8EA
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa
Signing time:             Wed 03 Apr 2024 21:30:11 +0000
ROA not before:           Wed 03 Apr 2024 21:25:11 +0000
ROA not after:            Wed 02 Apr 2025 21:30:11 +0000
asID:                     52748
IP address blocks:        177.155.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9b:80:44:a3:9c:30:14:88:29:56:e6:70:08:b7:f5:53:25:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Apr  3 21:25:11 2024 GMT
            Not After : Apr  2 21:30:11 2025 GMT
        Subject: CN=C6E0F13B3ECE1863DC1E4C9D10543CB1967AC513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:5f:ab:72:fb:d8:62:d5:9e:12:1b:8b:74:
                    d4:55:8a:56:09:19:75:77:91:16:87:00:11:b1:28:
                    8b:10:e1:50:0e:72:4b:66:6c:1d:13:1b:46:fb:96:
                    f2:69:1a:d4:6b:03:0e:05:30:cf:da:29:3f:4b:13:
                    e0:5e:90:47:6c:f4:68:84:03:a2:e4:72:8c:58:30:
                    9b:db:90:52:f7:91:0c:38:60:f7:ea:81:2d:f9:41:
                    4d:80:f2:53:5d:53:04:7c:cf:b1:66:8e:90:eb:58:
                    80:da:33:4b:5c:76:31:37:21:2d:16:95:86:5e:f8:
                    e9:a0:d1:e7:93:90:d7:04:13:11:04:6f:2b:2e:0e:
                    44:e0:51:a1:73:a4:e3:0d:7f:e1:89:72:0c:e0:7d:
                    75:41:96:de:c6:25:23:dc:9d:f0:63:0a:87:4c:ee:
                    d4:1b:65:d7:68:7a:0b:53:5d:4f:ed:5f:e0:b7:6e:
                    90:be:8b:a3:80:73:92:9f:85:71:55:4f:83:d0:ab:
                    cb:db:17:d2:6b:e3:30:70:78:a8:ca:0c:be:13:29:
                    be:f5:7d:10:d7:56:47:48:c7:d4:d6:ea:f1:38:db:
                    36:ce:ce:1a:00:e2:78:56:09:54:01:ff:ac:16:d6:
                    81:83:df:e7:36:53:e7:5b:6d:a9:d6:de:24:85:00:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:F1:3B:3E:CE:18:63:DC:1E:4C:9D:10:54:3C:B1:96:7A:C5:13
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:72:dd:f9:0f:c8:eb:79:43:88:29:27:83:10:d3:c5:c9:
         af:06:63:37:0a:b0:b6:f2:18:e1:32:5e:ca:d7:56:83:d9:e0:
         d1:5f:aa:ca:5c:e1:d4:b4:09:54:eb:27:44:7b:2a:6a:eb:34:
         77:6f:7f:92:07:1d:8b:f7:4d:ef:66:46:de:a1:67:10:ce:01:
         c5:5c:c9:85:1a:ff:8d:12:bd:33:1b:8d:29:63:b3:80:e2:24:
         b0:ec:67:38:71:52:41:1f:4e:58:e7:66:5b:37:cc:4d:e5:f0:
         81:6c:a8:7e:c5:ad:86:c6:b4:2a:b8:8e:6e:e3:b2:10:e5:38:
         76:76:c5:67:4b:a2:bb:30:26:e1:0b:48:9a:6a:01:cd:9c:45:
         85:d0:52:07:3f:c8:5e:e1:16:2c:55:e4:0a:6d:99:01:86:7c:
         72:30:3b:e2:16:46:aa:fe:ba:4c:58:12:b9:2b:11:44:2c:ab:
         04:66:a9:0d:07:8c:86:ec:97:c6:a1:72:d7:9e:a9:1e:c4:d6:
         2b:68:4f:5f:bb:7a:d0:77:95:11:26:76:73:aa:75:b4:6a:17:
         c2:4f:45:7d:37:e1:3d:d9:7e:da:50:4e:b8:2c:99:7a:96:33:
         0f:a0:b2:81:78:bd:79:b0:a2:1f:4d:92:b7:5b:50:12:02:0d:
         ac:d4:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:28:52 2024 by rpki-client on console-ams.rpki-client.org