Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39322e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          ygvSnYTbIu8OeFq4SSh6LsbAymUM73ZHr9BDiljCpd8=
Subject key identifier:   03:79:31:F4:04:8C:72:06:05:4B:92:81:7F:93:81:34:ED:D2:51:1F
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       687F6C3DE5AEE1ECA858D2234B6EBCD486464C23
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:39 +0000
ROA not before:           Tue 23 Apr 2024 19:08:39 +0000
ROA not after:            Tue 22 Apr 2025 19:13:39 +0000
asID:                     263627
IP address blocks:        177.12.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7f:6c:3d:e5:ae:e1:ec:a8:58:d2:23:4b:6e:bc:d4:86:46:4c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:39 2024 GMT
            Not After : Apr 22 19:13:39 2025 GMT
        Subject: CN=037931F4048C7206054B92817F938134EDD2511F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:47:cd:e1:ea:35:cf:9a:22:52:d7:2c:a6:
                    ec:42:e5:43:8e:35:78:c3:52:2f:6d:6a:01:b5:0a:
                    d6:f4:22:97:f6:68:d3:9c:14:df:10:59:1e:30:af:
                    17:eb:dc:4a:3c:91:37:f4:7d:ef:92:c4:67:1d:2b:
                    55:02:9a:4a:33:12:de:f9:f7:ad:dd:0d:01:9b:9a:
                    c2:31:38:28:98:48:70:a4:ed:5d:0f:25:dc:18:5a:
                    ef:d8:69:0f:09:6d:d9:76:2d:66:86:3d:1b:3e:83:
                    c0:e4:ef:a2:fc:e6:15:af:bf:38:e5:3a:db:38:cd:
                    5f:b0:19:10:33:1d:63:be:4f:d4:21:78:d8:5b:e3:
                    37:aa:d3:aa:62:6d:18:12:d6:d3:06:ed:f2:8d:19:
                    d3:76:c6:fe:12:eb:c9:3c:19:27:04:18:e1:d7:f5:
                    e9:5f:b2:49:35:5e:a5:31:b6:ea:c6:23:dd:99:54:
                    db:32:51:9a:a9:53:4c:0c:02:68:db:3e:23:f7:6d:
                    e8:66:b0:47:10:1a:8c:63:02:c8:83:69:50:a1:3a:
                    8f:26:ef:0c:60:77:53:5b:e2:68:2e:3d:84:8b:a1:
                    a2:91:a3:ce:a2:33:a8:fc:9f:fb:b2:e8:81:50:8f:
                    1a:76:25:67:a1:19:fd:2a:83:a8:3d:e7:1b:d1:6f:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:31:F4:04:8C:72:06:05:4B:92:81:7F:93:81:34:ED:D2:51:1F
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:76:a7:a0:14:3d:e5:5d:43:9b:1a:fb:d4:b3:7e:fd:ad:
         d5:53:dc:df:30:3a:22:c4:9b:22:9c:72:ff:1a:3e:5f:09:4c:
         62:b6:60:6f:c3:61:d1:3c:b8:76:19:94:5a:fa:70:b3:55:35:
         7f:ee:83:37:8e:7e:7c:e9:9b:bf:10:08:22:ef:bd:a6:1f:66:
         34:a8:e8:f6:22:7e:6b:77:f6:92:8e:ac:1b:a3:86:40:5a:55:
         98:18:d7:8b:83:1b:54:0d:e2:cc:ff:d2:e0:a3:6a:4b:36:c5:
         f1:a9:c0:0d:b0:b6:2a:bf:31:8e:f3:dc:f8:2c:ac:f4:3f:56:
         71:40:1c:54:e4:2c:d1:ea:ab:15:fa:86:ad:e9:b2:7c:16:61:
         c4:62:97:8a:3d:58:39:9a:65:87:38:83:03:14:d3:06:bc:de:
         66:91:de:ad:d9:63:af:d6:33:d5:5c:ff:e0:9f:b1:22:4e:53:
         55:9d:ae:a1:e7:ba:d6:4e:09:57:bf:b9:5b:b0:a9:ef:a1:15:
         a4:78:1a:09:e8:94:6c:58:17:20:49:d3:60:55:61:90:3e:d0:
         f7:14:0e:ec:4b:55:67:2b:20:35:15:6a:8e:8f:fb:8f:45:56:
         ab:08:4b:f0:dd:bf:d1:5b:60:09:f0:e8:ec:37:f3:f3:20:59:
         42:fc:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org