Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          Jiz7xAUZjx3c/pyMsaz6+BOeX/URkrLVsEMSEqlU43c=
Subject key identifier:   DF:A6:BA:A9:89:DB:49:60:85:F1:B2:18:0F:E5:05:50:D0:88:FF:62
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6E525C2ACF3A6ACE0D400C3109B7123DECFEE4E9
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:51 +0000
ROA not before:           Wed 03 Apr 2024 23:17:51 +0000
ROA not after:            Wed 02 Apr 2025 23:22:51 +0000
asID:                     52653
IP address blocks:        177.221.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:52:5c:2a:cf:3a:6a:ce:0d:40:0c:31:09:b7:12:3d:ec:fe:e4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:51 2024 GMT
            Not After : Apr  2 23:22:51 2025 GMT
        Subject: CN=DFA6BAA989DB496085F1B2180FE50550D088FF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:79:14:a5:5f:38:52:21:21:b1:03:13:df:
                    44:1c:08:b0:ec:35:45:ac:79:bd:cb:41:41:47:fb:
                    81:1a:2b:7f:69:fd:f7:71:99:1a:49:57:95:b4:7b:
                    a1:8e:36:f4:04:bb:81:63:75:c0:3e:89:26:47:68:
                    45:a5:e8:49:a4:30:4a:6d:59:66:f9:a9:1a:69:f2:
                    49:fd:e9:0a:8c:83:0d:8a:e5:1a:cd:ba:8a:33:b7:
                    94:e4:d9:f8:4b:64:fe:d8:a9:83:9f:08:b9:47:ae:
                    4c:5f:80:21:48:d6:cc:60:26:1e:62:80:68:fd:ca:
                    40:2e:67:32:26:81:76:6d:ca:97:cc:a2:50:78:76:
                    9b:b1:74:54:f8:26:d1:23:41:db:ec:96:e0:dc:49:
                    80:4a:fc:ad:12:aa:db:72:ee:ad:16:5b:76:3f:c0:
                    8f:79:0c:79:ca:85:f0:d0:20:e4:fc:1c:67:ce:8a:
                    d8:87:9f:c2:34:bf:6a:ad:7e:0c:1c:a1:3f:a3:bc:
                    cd:eb:fe:bc:02:36:7b:74:1f:a3:26:8f:34:86:2c:
                    86:71:81:3d:fa:c5:89:9e:3c:2b:20:97:9a:36:7a:
                    54:90:b5:6c:6e:22:0b:c9:4c:41:a9:20:be:ef:51:
                    94:81:3d:e6:7b:f2:a2:d8:0a:d3:3a:75:b8:c2:0d:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:BA:A9:89:DB:49:60:85:F1:B2:18:0F:E5:05:50:D0:88:FF:62
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:36:7d:da:f3:c7:ba:02:11:0a:c6:23:3d:c2:bf:3c:e1:88:
         c6:5a:81:81:08:18:b1:a0:24:93:88:3d:ec:b0:99:29:15:71:
         68:e7:9b:2b:8f:03:dd:cb:de:98:ed:ed:a0:a1:2b:6b:ce:01:
         51:f5:ed:2c:08:58:0e:60:a7:de:92:ba:e0:be:57:88:39:d5:
         eb:e5:5f:8b:7c:7f:7f:00:2d:68:ea:ad:23:ce:8f:34:6a:a8:
         c6:2d:15:05:ec:52:b2:c1:b1:bf:36:bb:03:69:44:5b:a5:67:
         4b:5e:69:e9:a5:a4:0d:7f:0e:da:e9:9b:9c:46:4c:96:f6:d5:
         69:bd:9e:dc:a5:f3:5b:8c:f3:b3:24:77:fe:6b:5d:93:e0:c5:
         c1:b0:68:19:28:98:1a:f3:a4:75:de:94:d3:10:38:39:79:bd:
         14:c5:a1:f1:a4:fd:97:99:59:6d:43:31:cf:7c:85:ea:2c:a5:
         aa:97:c0:27:f1:74:2d:7e:5d:e2:42:63:b5:d4:84:e3:5e:5d:
         d1:b0:37:99:99:e3:df:67:29:2e:5f:25:18:05:f5:15:c9:f8:
         4a:5e:24:aa:85:d5:d6:e0:0b:d9:60:b3:4c:cd:69:1e:ea:df:
         9b:92:4e:8a:95:6c:a4:1e:77:32:66:b3:00:ba:11:d4:48:e7:
         ce:ec:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org