Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34302e302f32322d3234203d3e20323632343337.roa
File:                     3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (raw, json)
Hash identifier:          vBqRghjcSO1xmy/uLPBthc2ThosEzfn+95fW/g/+jQI=
Subject key identifier:   32:9E:12:AD:23:4A:8F:74:7A:2D:A9:A6:5A:87:80:30:96:EA:F1:68
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       F4567E94DD3D7E73ADA540046149B9807984F7
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34302e302f32322d3234203d3e20323632343337.roa
Signing time:             Wed 22 May 2024 11:41:08 +0000
ROA not before:           Wed 22 May 2024 11:36:08 +0000
ROA not after:            Wed 21 May 2025 11:41:08 +0000
asID:                     262437
IP address blocks:        177.52.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
                          rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 06:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:56:7e:94:dd:3d:7e:73:ad:a5:40:04:61:49:b9:80:79:84:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: May 22 11:36:08 2024 GMT
            Not After : May 21 11:41:08 2025 GMT
        Subject: CN=329E12AD234A8F747A2DA9A65A87803096EAF168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:8f:d7:59:8b:38:27:53:a6:c6:27:b0:5b:
                    a0:ee:9c:30:dd:95:dd:af:22:99:4f:f4:89:9d:a8:
                    ae:49:1c:75:e9:64:ee:06:e6:28:b1:1b:e3:de:0e:
                    dc:e8:1e:d3:06:06:5d:91:76:9c:1e:0c:9b:94:1d:
                    c2:5b:fb:ef:0a:da:da:5c:69:ce:f6:ef:b6:30:17:
                    db:bd:38:58:38:6c:c9:80:6e:07:a6:92:6b:60:a8:
                    91:af:96:f5:40:51:6f:f0:c8:cf:3a:5d:d6:35:ff:
                    2c:4b:6b:55:be:2d:3d:8c:c3:8b:4b:91:d8:80:2b:
                    a3:2a:ee:3f:76:91:a1:7c:a9:9a:1f:4c:9f:73:b5:
                    77:52:c8:1e:4e:e9:8c:bd:36:47:42:4c:48:e1:73:
                    36:7e:5c:ab:ea:25:d4:5f:94:82:38:e8:b9:2f:ee:
                    c0:2c:fa:cb:77:19:92:cc:fe:0d:2f:91:70:dc:83:
                    1b:f3:e8:bc:89:f3:63:fd:26:4a:0e:c8:d7:15:98:
                    3c:db:97:15:61:c4:63:07:9e:56:46:f7:3d:c1:43:
                    b1:3f:d4:05:42:11:fd:07:dd:4e:d6:7e:f8:b1:ae:
                    20:d6:b9:39:35:d3:25:33:0e:9b:43:1c:ca:40:b7:
                    77:22:ab:ab:36:f5:51:56:da:76:72:65:67:67:90:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9E:12:AD:23:4A:8F:74:7A:2D:A9:A6:5A:87:80:30:96:EA:F1:68
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34302e302f32322d3234203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:66:09:b2:82:86:1f:1c:4a:c7:f0:22:27:20:7a:7f:4e:f2:
         ab:66:67:d4:6a:49:f4:8e:6d:51:8e:4f:5a:a7:64:f1:19:b8:
         a7:4d:02:70:e3:c3:41:02:78:00:a6:b4:1f:92:0d:98:6d:5e:
         77:32:8e:64:93:32:d3:a4:25:bb:03:f1:bf:52:36:fd:a2:27:
         c5:4d:51:c6:54:85:00:f4:6f:10:29:3c:eb:11:b0:40:aa:de:
         e3:7b:c0:53:16:2d:1f:af:db:c6:e8:09:6e:09:8e:bc:ec:00:
         96:75:3b:b3:d7:25:01:0e:99:b7:9b:bd:b2:13:00:5a:4f:09:
         8b:9e:c3:99:d4:63:75:51:05:2b:5d:cd:00:17:e4:2c:1e:fa:
         42:17:7c:61:43:62:95:a0:9f:4c:b7:0f:98:97:60:76:05:0b:
         3f:12:58:b3:a0:a6:b0:7b:f7:da:8a:39:e9:4e:ad:6c:f1:90:
         7d:c1:63:fc:eb:50:02:74:62:58:d0:d4:bb:a4:9f:2a:c3:6a:
         7f:17:33:03:00:df:c6:11:88:c6:19:a8:3c:da:22:55:e9:37:
         90:a5:c2:0c:cd:f6:02:42:b0:54:3a:88:7e:23:e5:11:f9:4d:
         50:81:d5:98:3b:83:c2:51:3d:9b:fa:fc:12:a7:7d:83:be:26:
         d8:bb:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:42 2024 by rpki-client on console-ams.rpki-client.org