Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa
File:                     3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (raw, json)
Hash identifier:          IirKOzBLZuSasinOivcc63TROxrNRMNE2yTFMY/5FAc=
Subject key identifier:   3D:D5:44:A6:16:E0:8B:6F:18:34:DD:04:DB:B7:86:49:A4:FD:ED:22
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       4D18227176E84C718287685FAB523C1E9B60E8B9
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa
Signing time:             Thu 11 Apr 2024 18:10:57 +0000
ROA not before:           Thu 11 Apr 2024 18:05:57 +0000
ROA not after:            Thu 10 Apr 2025 18:10:57 +0000
asID:                     52913
IP address blocks:        177.23.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:18:22:71:76:e8:4c:71:82:87:68:5f:ab:52:3c:1e:9b:60:e8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr 11 18:05:57 2024 GMT
            Not After : Apr 10 18:10:57 2025 GMT
        Subject: CN=3DD544A616E08B6F1834DD04DBB78649A4FDED22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:11:71:9b:f3:05:6f:37:f2:8c:88:c0:56:
                    c9:27:0f:84:ec:b6:59:94:a7:92:ca:36:79:10:4e:
                    e6:df:b1:f6:65:c4:d9:8c:ae:6e:a5:cc:8e:c7:8f:
                    bc:05:2f:73:31:0e:1d:e5:bb:02:1f:f6:54:b3:55:
                    f5:d3:f6:7a:d9:8e:e6:16:8f:b2:b3:21:f5:ca:f4:
                    59:f3:2a:a5:97:89:b9:15:9f:64:c3:ba:64:c2:32:
                    e7:14:94:c7:52:b5:31:c9:f6:5d:14:ec:5d:e8:48:
                    cd:7c:d4:b6:aa:ae:c2:5a:74:51:cf:dc:97:73:54:
                    40:b8:19:1f:a5:2a:8d:c0:e8:c8:c7:75:26:ef:90:
                    a6:bf:e2:8c:c5:49:a5:a7:1c:2b:53:b1:4f:38:15:
                    22:54:ae:50:19:45:11:fe:a1:95:3b:b8:54:d3:e0:
                    d7:65:ba:10:a9:c9:18:a6:7f:62:df:b3:56:d0:ca:
                    57:ed:99:37:3c:b0:5f:ef:5a:4d:0c:8b:77:75:ca:
                    98:e4:dd:03:3d:f7:a0:d1:b3:e6:a8:03:40:20:d0:
                    db:77:79:f3:27:df:62:48:5a:14:04:2b:61:75:7a:
                    14:df:59:ab:d2:60:f7:1c:ec:7b:ae:08:a1:d0:c6:
                    b9:2b:50:29:94:2a:14:0f:bc:12:4e:d5:38:48:17:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:44:A6:16:E0:8B:6F:18:34:DD:04:DB:B7:86:49:A4:FD:ED:22
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:81:73:ac:f8:93:b2:55:92:7e:16:50:b3:72:15:cc:1e:
         b5:f1:73:6b:aa:ca:c5:a7:1d:d8:30:63:47:6f:d3:6f:4d:cd:
         a3:c4:c1:79:65:b5:e6:af:23:f1:5c:b5:b6:39:86:5b:cc:9d:
         57:4e:7e:ff:17:17:6f:be:55:85:ed:07:af:99:fd:31:67:95:
         c7:a1:4a:1b:e9:a0:04:63:03:ec:78:46:c4:d1:35:9d:c6:a4:
         5f:2f:6d:b1:03:3f:7b:60:78:c2:67:10:1e:01:4c:22:fa:18:
         a6:ff:25:15:b2:2c:c6:f7:25:c3:f5:74:b7:ad:a6:f8:ea:87:
         82:69:22:ed:12:87:3e:b0:75:61:4b:b6:0b:d6:ab:40:dd:4d:
         ec:d0:c3:89:5a:a8:1e:c7:7d:15:49:94:27:a2:fc:b4:35:32:
         5b:8e:be:de:73:54:f8:67:97:41:07:4f:9a:9b:15:38:df:6e:
         ae:68:55:cc:70:fe:e0:dd:ea:53:df:73:14:01:e0:45:40:c8:
         41:6b:17:d6:55:c7:a2:a0:e3:7b:f9:2e:27:ab:65:47:d1:14:
         18:e7:61:8c:26:a0:6f:ec:6c:23:74:12:08:dc:4e:f9:29:9d:
         aa:33:74:4f:30:5e:52:ed:22:58:4d:36:a0:c3:08:05:19:47:
         33:08:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org