Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130312e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          bM/gkiyw/yMCyLO54SaJ7pjxhruLzZm00BDCd5HkCaQ=
Subject key identifier:   64:78:22:02:3E:CC:0E:3A:08:4E:9F:0C:BC:0D:3A:E4:71:B3:89:99
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       2507ECBFDEAD9F2E8CEDFD89B6E8C9DF83E9544F
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:39 +0000
ROA not before:           Thu 04 Apr 2024 18:17:39 +0000
ROA not after:            Thu 03 Apr 2025 18:22:39 +0000
asID:                     61672
IP address blocks:        177.11.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:07:ec:bf:de:ad:9f:2e:8c:ed:fd:89:b6:e8:c9:df:83:e9:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:39 2024 GMT
            Not After : Apr  3 18:22:39 2025 GMT
        Subject: CN=647822023ECC0E3A084E9F0CBC0D3AE471B38999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:99:0c:7a:fe:4e:b3:62:d7:76:6b:0a:68:
                    b7:82:9f:3c:72:36:82:a2:65:9a:b9:d4:f8:c1:f5:
                    a0:25:3a:1f:aa:10:3d:a2:5f:4b:cf:69:d4:e8:0c:
                    d0:a2:6f:e9:68:6c:99:2f:0b:32:98:cd:6e:26:06:
                    ec:40:ec:cf:7b:ba:d3:8e:3f:40:b1:68:5a:04:4c:
                    70:41:d0:88:bc:33:df:29:d3:a2:11:fe:4f:15:59:
                    da:2d:a3:03:41:01:30:80:bd:26:1d:c5:d7:00:3e:
                    d2:83:41:65:1f:a3:30:6f:d8:a1:3e:95:91:5f:7d:
                    69:f1:5a:de:71:df:cd:63:36:4f:27:23:01:4b:70:
                    e1:b6:c4:ed:24:5d:7c:0f:d0:ec:56:b3:f9:9d:39:
                    8a:a0:53:a6:3c:5b:80:74:fb:aa:79:61:18:96:7e:
                    d0:15:94:ca:c0:29:cb:69:15:89:bd:f2:8a:43:66:
                    48:30:a4:4b:d5:15:2b:3d:f3:84:c5:b8:e5:10:1e:
                    47:9c:ca:00:f1:a0:ff:79:2f:d4:7d:60:93:4c:91:
                    e0:b2:ce:e6:f8:b2:4c:33:95:72:6b:a6:46:80:4f:
                    b6:2c:4d:c6:4a:e9:01:e4:1d:5e:4a:cb:2c:15:fb:
                    9b:fb:d3:1d:39:f0:cd:d9:cb:c7:02:eb:23:fd:e6:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:22:02:3E:CC:0E:3A:08:4E:9F:0C:BC:0D:3A:E4:71:B3:89:99
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:db:75:21:d0:f4:6c:b2:63:a9:4b:05:4e:45:62:c4:9b:
         c6:5e:08:39:aa:5b:59:2f:f4:89:71:65:9b:d6:dc:7f:d1:72:
         12:9c:26:92:13:98:58:85:63:31:8c:76:a0:de:a9:bb:a3:0e:
         5d:9f:44:ba:75:b3:2c:c2:c4:94:ef:39:88:52:be:e3:04:80:
         c6:1d:ae:7a:67:78:f3:0f:13:f1:bf:6b:e7:0b:90:97:29:e8:
         d5:07:62:75:bf:69:08:e4:ed:aa:c5:1a:24:c7:47:13:8c:58:
         d3:ff:a8:92:8e:bf:4c:21:e3:83:a0:34:03:83:19:b6:b9:5a:
         14:57:3d:9a:40:e6:01:c5:fc:5c:be:9d:bc:a3:a1:be:c1:f3:
         f4:28:31:48:88:a9:a3:7d:fb:ab:7a:a7:fb:98:50:f7:3e:0d:
         a6:81:97:4b:1e:55:52:c9:ef:90:ad:79:38:41:92:2e:a4:f4:
         bd:14:14:aa:07:fb:4e:51:c5:c2:d8:f1:ad:b3:e7:60:7a:cf:
         d1:6b:b1:95:42:a9:bc:0c:5b:b4:e7:55:00:98:25:28:92:c8:
         3e:cf:29:5f:9d:47:33:2e:ff:8c:fa:fd:8e:c4:c8:e6:f8:ad:
         13:d7:c8:49:3d:b2:c6:6d:ca:10:ae:3a:93:bd:46:84:b3:da:
         1c:94:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org