Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39332e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          uH1MGsHarpwiorY7MEwr6nuYP9N/a2eXh0ATc7EWKnA=
Subject key identifier:   3E:7D:71:2E:57:AB:5E:93:06:2C:3C:77:27:4A:2F:53:1B:23:00:09
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       200849E3138C13B80A6C8E0690CF4E9C3B4B30F9
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:40 +0000
ROA not before:           Tue 23 Apr 2024 19:08:40 +0000
ROA not after:            Tue 22 Apr 2025 19:13:40 +0000
asID:                     263627
IP address blocks:        177.12.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:49:e3:13:8c:13:b8:0a:6c:8e:06:90:cf:4e:9c:3b:4b:30:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:40 2024 GMT
            Not After : Apr 22 19:13:40 2025 GMT
        Subject: CN=3E7D712E57AB5E93062C3C77274A2F531B230009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cb:35:15:b1:cd:58:64:82:e4:34:9d:0e:2c:
                    3f:b3:b0:0a:90:de:54:65:7c:35:23:d9:06:55:84:
                    df:55:74:a6:56:24:68:00:0b:a0:42:a1:fc:28:8f:
                    28:1f:95:78:f6:c5:37:a2:4d:a4:d9:f4:92:4c:4e:
                    ee:0a:8d:27:be:b8:a5:a1:79:0a:19:00:90:a0:16:
                    56:24:2c:fd:5a:83:6d:94:a9:63:99:5b:93:84:f9:
                    61:63:93:c6:24:e2:d2:85:6f:8f:7d:ea:a1:7a:32:
                    1e:8f:80:6a:ee:88:30:d9:0f:91:ad:7b:b8:4b:11:
                    23:01:3e:ef:af:d5:f8:7c:1b:b5:b6:a2:d2:9b:7d:
                    28:2c:12:52:78:6d:31:dd:66:9d:68:9a:cd:6d:85:
                    56:ed:27:9b:a9:c1:fd:02:82:0c:23:d1:73:7f:4c:
                    4d:2b:e8:d5:e5:33:49:5c:7d:6c:ed:0d:56:2b:31:
                    b5:28:b6:23:78:ac:6c:f0:a8:d6:4c:b3:31:3e:86:
                    f5:78:39:09:31:8c:e0:01:51:e9:f1:44:66:14:8b:
                    c9:8d:b6:88:ef:72:09:fa:d9:72:71:bf:24:cf:14:
                    33:d0:de:f8:e1:d9:e4:10:26:8c:d8:66:46:77:72:
                    8f:2c:b8:ad:58:97:6e:f7:86:a8:6b:ec:8b:13:6f:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:71:2E:57:AB:5E:93:06:2C:3C:77:27:4A:2F:53:1B:23:00:09
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:6e:c8:de:2d:62:92:d2:90:8d:dc:e9:e9:6d:91:b1:99:
         61:28:c9:b2:2b:09:9d:d2:44:81:73:7e:9f:29:ff:d0:aa:2f:
         d4:13:4b:c4:8f:5b:f8:dc:e7:58:9d:38:29:d6:8f:ee:62:25:
         8f:08:b1:8a:10:70:36:14:32:db:c7:c9:db:c4:31:c3:f5:2e:
         51:6f:cd:62:0a:ca:73:c2:4e:f9:ef:a4:aa:e1:6b:c7:50:7b:
         b1:96:c0:79:8c:2d:77:35:90:20:36:08:10:28:41:9a:5a:e2:
         55:22:99:8a:7d:fa:fb:1d:d0:65:96:a3:45:0c:a2:e3:ed:c5:
         c9:23:10:08:12:0e:71:0b:bf:5d:dc:ba:e2:0f:59:ea:e8:8e:
         2e:37:99:d2:15:54:04:cf:bb:e9:77:b8:ca:40:fc:d4:05:eb:
         1b:6e:eb:91:67:01:c5:b3:54:22:9a:9b:d8:59:e4:a2:9d:b1:
         68:6f:2b:b7:54:8d:39:d4:d5:82:c0:c4:ad:2a:32:c1:a6:8c:
         e3:0a:67:fc:af:1f:5c:64:2b:f3:7b:b2:8e:99:52:b8:c4:18:
         3a:59:39:b6:b9:f1:a1:02:90:cd:39:2b:47:69:fe:68:aa:eb:
         3f:59:be:31:81:14:5b:a3:92:0c:da:11:ef:a7:03:70:ef:5c:
         f4:f5:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:25 2024 by rpki-client on console-ams.rpki-client.org