Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
File:                     3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (raw, json)
Hash identifier:          H7mC71KDUNr8Si13/BiO/sD5+55m+T50IA0V/6a3JFg=
Subject key identifier:   54:EC:AC:2D:54:4F:49:00:01:BC:01:E7:D6:57:12:49:63:1B:6B:B0
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       14757021415EBE70BBB506E5EC9A0F96050EFA11
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
Signing time:             Thu 04 Apr 2024 09:34:57 +0000
ROA not before:           Thu 04 Apr 2024 09:29:57 +0000
ROA not after:            Thu 03 Apr 2025 09:34:57 +0000
asID:                     52869
IP address blocks:        177.128.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:70:21:41:5e:be:70:bb:b5:06:e5:ec:9a:0f:96:05:0e:fa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Apr  4 09:29:57 2024 GMT
            Not After : Apr  3 09:34:57 2025 GMT
        Subject: CN=54ECAC2D544F490001BC01E7D6571249631B6BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:c7:fa:60:38:83:65:00:22:c0:93:ba:f9:
                    ba:4f:c4:b2:56:e4:fc:71:8d:29:df:3a:11:d1:4e:
                    85:57:8c:7d:77:66:5f:5b:52:13:4f:e1:e3:ad:97:
                    d2:28:a1:57:ae:4d:3a:2e:58:03:65:c9:e6:2c:8c:
                    5c:f2:e5:f5:a1:71:bb:fd:8c:2f:42:d9:03:7d:fa:
                    34:17:c0:83:ca:fa:ad:e8:86:00:cd:19:b9:c5:bd:
                    73:5f:c2:25:6f:d7:f7:b5:07:14:fc:09:73:25:40:
                    81:25:92:1c:12:ee:7e:b1:9d:23:45:c7:47:33:17:
                    f3:76:bf:64:48:0b:8d:b6:b8:07:b9:1d:57:e4:82:
                    02:75:a2:30:12:c2:ed:46:0f:38:63:69:fb:05:b8:
                    84:f5:38:e8:6d:ce:10:bc:d1:51:bf:98:63:d9:86:
                    e6:2d:85:27:8c:b6:5f:13:97:fc:e2:5c:26:54:3a:
                    33:01:fb:9b:69:51:03:0b:16:54:5d:95:60:3e:c2:
                    bd:bf:57:23:3e:26:53:86:d6:69:54:78:2f:e1:f5:
                    92:e9:6d:a6:f3:25:83:0f:e4:43:5f:33:1b:c9:3b:
                    ee:66:3e:8f:cf:c2:99:a2:f5:c2:1c:89:23:19:23:
                    3e:45:98:66:32:e4:cd:cd:1b:14:d9:82:8f:8b:7a:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:AC:2D:54:4F:49:00:01:BC:01:E7:D6:57:12:49:63:1B:6B:B0
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:c0:51:7b:6e:db:07:30:be:31:af:93:7f:9b:22:e6:ca:9a:
         4f:f6:04:92:2e:85:d6:dd:9f:e9:1c:a8:da:83:91:2e:cc:3b:
         6c:ff:59:cb:49:d5:9d:ae:8b:f0:da:65:e3:32:b6:3f:fb:3a:
         72:4b:d8:39:8a:45:73:2d:43:bb:17:64:53:99:ff:44:1d:80:
         a5:80:e4:72:de:4e:8e:23:0e:f3:18:03:fe:c9:77:24:9b:9b:
         99:70:5b:76:d6:37:1f:2a:7d:71:f1:27:19:ae:2b:b8:c0:f4:
         c2:b0:35:14:2e:8c:41:ca:33:7e:f2:21:91:de:11:e3:d0:89:
         f6:84:00:e5:32:f6:3e:b7:a3:42:df:0b:16:42:e7:2a:b4:72:
         10:ae:99:39:88:9a:9c:e0:f9:cb:3e:09:c5:3b:62:fa:f4:4b:
         ec:a7:dd:4d:9c:32:cc:be:2f:c3:d9:9d:7f:cc:27:34:ed:e8:
         c4:b3:4e:97:09:2a:4e:45:94:aa:1d:27:41:2e:76:2b:9c:da:
         eb:ef:4d:52:b1:b8:70:bb:0a:88:55:60:4d:64:f1:96:52:45:
         d4:86:76:4f:be:4d:37:cf:23:84:16:c7:c8:2e:b1:ad:17:c7:
         bd:79:85:35:90:c7:6c:73:ef:05:d7:02:02:7c:38:07:ce:c1:
         7f:30:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org