Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa
File:                     3137372e31312e3130322e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          36ZQhiJmkVMeg2QdaLLLrPJi4k4G61NwmoT0dQluquY=
Subject key identifier:   61:28:21:C9:72:E3:38:6F:62:ED:45:D1:2C:A4:01:89:D3:5E:19:15
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       52A0124B56DE59A821AEE05AB2FD390E8115D879
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:41 +0000
ROA not before:           Thu 04 Apr 2024 18:17:41 +0000
ROA not after:            Thu 03 Apr 2025 18:22:41 +0000
asID:                     61672
IP address blocks:        177.11.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a0:12:4b:56:de:59:a8:21:ae:e0:5a:b2:fd:39:0e:81:15:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:41 2024 GMT
            Not After : Apr  3 18:22:41 2025 GMT
        Subject: CN=612821C972E3386F62ED45D12CA40189D35E1915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:90:a7:db:79:bb:fb:df:91:cb:31:d5:d4:
                    88:10:3f:1f:b2:9c:78:9e:ce:40:a1:40:43:1b:d5:
                    06:d8:c0:66:32:fb:72:9a:46:aa:8c:b0:22:b5:a9:
                    27:81:28:1a:80:21:eb:0f:e3:62:5d:27:52:57:20:
                    a3:bd:24:16:e9:91:24:89:a1:1f:46:39:48:f6:8b:
                    df:0b:02:68:38:c5:39:8d:fa:de:7a:99:a9:ad:1e:
                    5e:26:f7:cc:b7:ca:08:2e:1f:67:06:8a:b3:28:a4:
                    91:64:62:97:04:0b:42:ab:8e:81:d4:7a:bf:6a:d3:
                    79:0f:51:5e:b3:b1:7e:61:ee:92:b3:1a:7f:59:66:
                    b3:50:df:85:78:2a:0b:10:1b:85:0d:8b:76:68:b7:
                    0f:ef:1d:30:cf:9f:74:5f:02:5b:e1:af:de:fd:96:
                    74:b5:14:e1:91:16:2b:47:5a:77:e8:c5:8f:3a:85:
                    c3:74:be:10:d5:1a:13:fa:d7:db:3d:f3:a4:dc:60:
                    c9:e1:49:1b:bc:04:ac:f0:8b:8f:d6:df:b4:29:f0:
                    43:35:54:fe:68:34:9b:09:fb:37:fa:8d:30:81:be:
                    56:ce:da:69:b5:b1:ce:09:74:a3:0e:d1:c2:a7:3e:
                    a9:f6:a0:c4:e5:6e:de:0e:6f:5b:ce:6e:82:09:f7:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:21:C9:72:E3:38:6F:62:ED:45:D1:2C:A4:01:89:D3:5E:19:15
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:49:96:8c:2b:ce:94:ce:0a:21:58:01:08:99:94:62:bc:
         c4:55:6a:ab:b8:e4:23:3a:70:75:a5:6c:97:af:fd:8d:b1:d3:
         71:67:7f:1a:13:b7:48:62:20:67:e6:49:7c:bf:2a:c1:b2:32:
         d5:28:8d:32:9a:73:69:70:1c:ae:cb:cd:7e:63:1c:54:9b:6d:
         1b:72:29:89:ee:e2:04:b2:14:5e:d7:c1:b9:01:b1:e0:79:c4:
         43:88:55:ba:07:ed:ef:bc:d2:83:2c:f2:03:91:f1:30:7f:40:
         04:bd:33:ea:de:07:3f:49:b3:a4:17:22:74:df:e3:f1:b9:0d:
         71:43:0e:60:b5:57:d7:43:21:f1:f8:46:b1:14:06:c1:e6:4a:
         5f:e9:1c:1b:b2:9a:c4:71:5b:4a:39:33:94:c8:d3:4e:73:d2:
         89:ea:9a:df:0b:91:05:04:6c:90:74:e7:a1:b5:75:d1:83:f3:
         3f:6c:2d:11:39:9b:d9:3e:96:85:5b:be:91:ce:b3:69:ba:f0:
         a7:08:c1:6d:6b:4e:6c:6a:fd:b9:37:93:16:77:23:40:86:f0:
         0e:6f:92:41:5c:e5:19:79:00:c9:b9:16:34:9c:07:81:fb:71:
         3b:f0:71:e6:99:be:84:e7:a6:67:6a:dd:2d:1b:27:74:f3:66:
         69:27:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org