Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          pw2zE/M7teaIl2eX6B8SM2MT9KRZA78mh7iVzgEPKXg=
Subject key identifier:   63:C1:4E:10:44:82:18:2E:B1:1F:90:F1:62:57:96:50:C3:BE:76:CA
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       164ABFF8EF0D01F7A7306239691FA44F1A3C72E6
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:56 +0000
ROA not before:           Wed 03 Apr 2024 23:17:56 +0000
ROA not after:            Wed 02 Apr 2025 23:22:56 +0000
asID:                     52653
IP address blocks:        177.221.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4a:bf:f8:ef:0d:01:f7:a7:30:62:39:69:1f:a4:4f:1a:3c:72:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:56 2024 GMT
            Not After : Apr  2 23:22:56 2025 GMT
        Subject: CN=63C14E104482182EB11F90F162579650C3BE76CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:de:b8:41:2f:9e:93:93:65:11:9c:ea:2b:
                    b3:f6:0d:35:d8:a9:91:dc:37:64:42:3a:6b:0f:36:
                    2f:5e:78:af:34:47:08:e7:47:3a:18:35:14:6f:1b:
                    93:9d:66:04:c7:ee:08:00:01:2a:8b:cc:bf:ee:c8:
                    a2:e2:0d:0b:77:c7:cb:2f:88:b3:ea:dd:40:2b:c2:
                    3a:bc:93:c4:0b:a8:c6:08:1f:96:08:a6:ef:28:46:
                    8e:f6:e8:c3:a7:6b:d9:4b:cd:a5:cb:45:41:06:2f:
                    fa:4e:56:2b:2f:13:f8:f0:50:98:3f:a4:76:7a:c5:
                    97:a5:58:82:9d:0d:db:1d:2d:64:bc:68:cc:cb:ca:
                    bb:d9:db:bf:63:d3:82:22:56:7c:d6:11:70:ef:23:
                    69:b3:9a:85:ef:f7:d5:4f:e9:39:0b:21:70:2e:90:
                    45:2a:cd:fd:f5:ed:2d:22:4f:62:d7:ae:1d:77:43:
                    4f:37:af:ce:0e:81:dd:51:a9:9f:79:ea:4c:b6:97:
                    3e:e0:94:3d:4f:05:7f:8d:86:c5:4b:18:c2:d8:26:
                    98:ad:94:fd:61:15:58:4d:db:e1:f4:18:e6:3c:8f:
                    5f:64:1d:05:f1:e9:29:02:ee:c7:63:2e:ea:91:bd:
                    22:75:88:d9:52:5d:fe:6f:24:7b:18:b1:cf:d5:ef:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:4E:10:44:82:18:2E:B1:1F:90:F1:62:57:96:50:C3:BE:76:CA
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:4a:13:9c:1d:34:50:a9:7a:ab:68:3d:6f:db:dd:7e:0c:
         cb:13:82:5f:cb:5e:80:2d:8f:f9:f6:fa:b8:ad:5e:a2:08:12:
         ae:3e:fc:64:5c:44:18:6e:53:d8:4c:18:ee:93:17:b1:11:a4:
         26:10:99:a4:8c:3a:79:e0:8f:12:3b:33:15:2a:14:94:b4:f5:
         3b:e7:19:4e:07:71:5b:f9:36:2a:27:03:7d:1d:a1:b6:59:5c:
         92:a8:40:7a:66:90:ae:9c:fa:e1:44:de:6d:fa:63:67:3c:47:
         b8:4f:64:c5:be:d4:d7:b1:13:6a:9f:41:76:3e:c7:2e:3d:22:
         c4:28:aa:fc:11:01:c8:71:68:b1:79:ca:06:8a:8e:59:d0:ef:
         ae:ef:66:d0:25:19:38:84:d2:d6:93:59:80:37:51:18:21:39:
         80:73:64:c5:f0:ac:bd:96:b9:74:fc:c5:2e:23:88:86:03:95:
         f2:9c:63:4a:11:2b:8a:2d:0e:f5:91:68:37:7f:0b:31:9a:7a:
         f4:ce:78:3c:4b:68:a5:71:0a:b6:b1:cb:2f:2d:ba:46:b8:0f:
         29:81:7e:78:80:7b:ab:96:dd:b6:d3:f8:d6:24:51:a4:3b:8a:
         0e:8a:33:82:09:cb:aa:d2:c3:3a:cf:18:c7:61:e4:ac:a8:cc:
         45:f6:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org