Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          ZGzNJj0WH/B7/Ofa1Ys/hYmKo+hSAODjq/HD1YggWtI=
Subject key identifier:   10:35:45:38:D0:2B:B9:A1:CE:7B:4A:5D:5C:DF:3E:B2:F8:2B:99:60
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       5EA4CB08F4243BB8C4246ABF36B8DFC766A97886
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:39 +0000
ROA not before:           Thu 04 Apr 2024 18:17:39 +0000
ROA not after:            Thu 03 Apr 2025 18:22:39 +0000
asID:                     61672
IP address blocks:        177.11.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:cb:08:f4:24:3b:b8:c4:24:6a:bf:36:b8:df:c7:66:a9:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:39 2024 GMT
            Not After : Apr  3 18:22:39 2025 GMT
        Subject: CN=10354538D02BB9A1CE7B4A5D5CDF3EB2F82B9960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:81:0f:28:09:94:31:ff:fe:97:f4:93:d4:
                    bb:6c:d1:71:ad:5f:19:a2:54:f8:5a:db:4a:b1:3c:
                    d4:79:d3:5d:09:d9:fa:06:73:af:61:69:d7:c1:41:
                    0d:a5:b0:e7:d2:66:43:7a:07:ee:e6:de:e9:3e:8a:
                    98:ff:2f:f0:c7:58:59:17:95:ff:94:ba:62:a5:8d:
                    90:e5:17:c1:a7:71:2a:c8:b3:b9:07:ef:7b:ed:f6:
                    fa:1f:53:6c:14:f5:97:06:e7:14:a5:0b:ab:d7:02:
                    1b:a8:e7:f9:87:87:77:e9:eb:15:39:74:a3:9e:f0:
                    0d:f0:b1:ef:15:e0:de:a5:ad:09:b1:3a:66:c9:c6:
                    8b:2e:a9:ee:af:a9:66:37:27:f9:4f:52:37:35:ef:
                    ac:7c:59:dc:4b:f2:0b:ea:c9:97:43:e2:b0:b9:d8:
                    60:f6:68:00:7c:b2:3e:8b:0e:4b:7f:2d:41:c4:7d:
                    a7:bd:0a:47:d0:88:90:8f:56:0c:84:a2:82:6f:ba:
                    c9:c7:de:68:f5:b3:45:a4:5a:be:b1:07:45:e8:9a:
                    e6:50:3a:5a:15:26:ff:86:91:99:39:0e:c3:e4:27:
                    e2:eb:40:de:7a:6d:a9:c0:2a:bf:61:78:03:d1:48:
                    b3:6f:fe:66:06:58:fc:ca:48:e4:50:78:6f:42:ba:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:35:45:38:D0:2B:B9:A1:CE:7B:4A:5D:5C:DF:3E:B2:F8:2B:99:60
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:61:7e:76:f0:c6:f2:15:db:e0:9f:c5:8a:0c:3f:02:4b:
         af:76:45:1e:3f:1c:53:3d:4d:48:01:df:63:95:1b:40:15:81:
         ef:e4:ea:a9:43:84:e6:da:19:01:cf:1b:03:a6:8f:5a:67:38:
         8e:11:78:fb:ba:dc:c2:0a:bb:00:6c:b4:4c:8b:7a:07:31:14:
         e4:e2:7e:d0:77:2b:f1:10:8f:65:44:76:b6:18:3e:af:70:50:
         4c:89:54:04:e7:72:c5:ec:78:ff:37:d0:a8:39:89:20:4c:d0:
         fb:70:0b:43:77:ad:a3:db:12:fa:b8:0c:8f:15:03:99:97:09:
         ef:d3:a3:4e:0c:c3:90:bc:a8:1a:b0:e8:de:11:88:dc:51:9b:
         f7:fe:c4:1d:8d:8f:2a:c3:82:c2:0a:6d:77:2e:55:0d:65:47:
         2a:aa:ea:41:82:d2:32:8f:cb:30:33:8d:d2:0c:20:1a:31:55:
         79:fa:83:c9:45:43:4a:e4:4f:4a:12:eb:65:7f:0d:ff:51:22:
         0f:1a:0f:3b:77:f4:46:ac:5a:d7:3f:4b:c5:e6:5c:6e:1f:45:
         9a:ae:dc:72:0d:27:0f:09:4c:a7:6c:4e:d1:50:bd:b0:79:89:
         94:9d:7c:8e:6f:ea:95:7d:cc:c3:18:2d:cc:d7:bc:be:c8:33:
         ce:fb:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:22 2024 by rpki-client on console-fra.rpki-client.org