Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          0ILzKnrHuuAsY943uHHrkWrDd2qLedn6WtfzVDdqYnE=
Subject key identifier:   A8:A9:87:32:84:CF:F9:8A:39:D8:98:E3:DA:7E:4A:B6:83:C7:54:B3
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       27A2849B63485FAF36839CC06BDAC4FF76B6A9DC
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:41 +0000
ROA not before:           Thu 04 Apr 2024 18:17:41 +0000
ROA not after:            Thu 03 Apr 2025 18:22:41 +0000
asID:                     61672
IP address blocks:        177.11.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:84:9b:63:48:5f:af:36:83:9c:c0:6b:da:c4:ff:76:b6:a9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:41 2024 GMT
            Not After : Apr  3 18:22:41 2025 GMT
        Subject: CN=A8A9873284CFF98A39D898E3DA7E4AB683C754B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:ef:27:8d:21:4d:0d:c6:fd:e4:ee:a9:47:
                    b9:4a:6c:c5:0a:9f:66:02:1e:e0:4b:f2:41:fb:cb:
                    3d:34:97:35:07:7a:a4:db:99:2c:2e:eb:b4:fc:2e:
                    4f:b9:65:7a:7a:ef:c9:73:f2:8a:f7:77:e3:6c:e0:
                    08:80:49:51:3b:b6:01:17:fd:1d:75:22:e2:fd:1d:
                    68:d9:df:f9:33:e7:c5:48:e5:d1:74:c7:93:fa:d5:
                    9e:8b:71:20:32:1f:0e:5f:65:a7:be:b5:d4:3a:99:
                    4d:a7:1c:fd:36:6e:7c:7e:2e:d6:ad:ce:e7:f4:92:
                    af:fc:75:7e:1d:19:3a:bf:c0:58:6a:63:f0:81:04:
                    e6:7b:e7:ca:e0:f3:59:42:88:11:02:e2:ff:fa:c3:
                    2c:5f:b3:6e:23:9a:1e:e8:28:a6:c7:bc:86:b4:12:
                    f9:0e:1d:85:01:1f:e4:82:11:75:6f:e4:a1:00:93:
                    e8:7c:4a:6b:19:20:91:25:4a:e6:cd:ec:00:50:a4:
                    fe:03:18:92:f8:26:94:6d:72:b9:9f:9b:49:87:fe:
                    16:4c:69:86:95:89:08:52:d5:48:74:7f:71:dc:b3:
                    c8:94:4e:64:c8:2e:d9:9a:c3:e0:1c:b8:a8:39:78:
                    6e:52:3e:8d:f9:a7:93:b3:39:1b:82:2a:48:94:f4:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A9:87:32:84:CF:F9:8A:39:D8:98:E3:DA:7E:4A:B6:83:C7:54:B3
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:97:4b:6a:c8:46:de:e4:2a:ed:95:63:17:cd:8e:b4:7b:
         2f:13:ac:60:95:9e:ec:8a:ed:59:79:4b:a2:95:b3:8f:b8:ce:
         06:f0:94:5e:8e:b3:36:3c:a9:50:ae:a6:0b:d3:07:a6:02:3e:
         0a:30:fc:23:3d:b9:44:01:7b:dd:da:30:2b:f3:85:ac:c1:8e:
         64:fa:34:6a:24:96:7a:29:7c:e0:94:b6:b7:c5:22:05:22:dd:
         d7:03:3b:f6:f1:80:bc:c9:a2:ca:45:de:6d:b8:c0:ca:2a:6c:
         7b:69:29:20:09:25:2e:5f:e7:9e:4f:76:3f:7d:1f:5f:13:ff:
         b5:f6:6d:91:d2:bc:98:77:a0:68:df:b9:80:a4:bc:67:a8:f7:
         96:8c:59:47:fd:fe:ba:b0:97:84:5f:d0:95:d7:65:16:fe:37:
         7e:e2:88:0d:76:d6:d8:25:c5:f8:31:a4:df:bc:aa:d3:7b:41:
         8d:45:ea:a8:b9:c4:24:e6:64:7e:ee:b6:4b:47:2e:1e:8d:7c:
         74:ba:80:ed:82:c6:b6:0a:19:6a:14:b5:d7:a7:5c:f0:49:db:
         8b:0b:69:4c:00:bf:be:39:39:9d:ef:a4:35:8c:fc:b8:b7:a0:
         03:5a:e7:67:dc:f6:a3:db:6e:f0:60:b3:4f:97:29:74:93:a5:
         ad:66:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:47 2024 by rpki-client on console-ams.rpki-client.org