Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          kWibNGnB3OHewwlb/kDSMs0uRs6zmlOZuvvJPOMV58M=
Subject key identifier:   AE:69:30:40:DD:A8:A6:E1:25:D7:73:4B:CD:66:37:88:11:26:13:DF
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       16FE879F2EDD9F4498C1626B03E20D46CA30E3
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:52 +0000
ROA not before:           Wed 03 Apr 2024 23:17:52 +0000
ROA not after:            Wed 02 Apr 2025 23:22:52 +0000
asID:                     52653
IP address blocks:        177.221.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fe:87:9f:2e:dd:9f:44:98:c1:62:6b:03:e2:0d:46:ca:30:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:52 2024 GMT
            Not After : Apr  2 23:22:52 2025 GMT
        Subject: CN=AE693040DDA8A6E125D7734BCD663788112613DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:e5:27:6a:42:8b:05:76:64:c8:05:96:15:
                    76:1c:65:8c:fe:5f:2e:b0:8f:89:24:5f:6e:da:8a:
                    27:d5:86:a1:dd:32:0c:30:ef:2d:fb:61:44:95:eb:
                    66:40:bc:f6:35:43:c7:bd:bd:ae:7c:75:36:24:c2:
                    de:c4:43:3a:7f:bf:8c:cc:81:71:2a:16:55:d6:06:
                    73:5b:2d:95:d2:53:e8:c3:b8:bb:75:f0:66:a2:c9:
                    6d:b2:a6:b5:04:5e:a5:5e:0d:00:24:9c:b7:3d:ca:
                    18:4d:5f:4b:2d:9b:3d:2a:29:ed:ba:64:12:99:42:
                    bd:8c:14:6b:a5:15:6e:6c:f0:e5:9b:cf:62:2f:52:
                    0b:3c:b7:fd:1d:06:ed:6c:ba:d1:d7:75:3e:b1:93:
                    74:e6:c5:e0:f9:c1:ab:65:94:2c:5b:98:44:e2:9b:
                    91:e1:22:d7:85:ca:53:0a:23:1a:d4:99:8d:7d:6a:
                    09:11:85:ce:64:87:83:68:a4:0f:b4:cf:b3:87:a1:
                    38:57:1d:93:68:1d:a9:59:2a:da:5b:86:7e:c0:42:
                    03:7b:a6:6f:83:66:b2:92:07:df:d9:62:4d:be:76:
                    7e:2c:34:ca:36:0d:c2:8a:85:2f:91:42:8e:09:64:
                    33:f8:4d:af:16:05:31:b0:43:c0:38:f7:ab:89:35:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:69:30:40:DD:A8:A6:E1:25:D7:73:4B:CD:66:37:88:11:26:13:DF
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:3a:d6:e8:a9:63:3e:56:3c:75:45:89:f0:9e:68:ea:ce:
         68:4d:71:a5:c0:0f:58:9c:42:d2:15:ee:5a:6d:c3:12:98:94:
         a1:56:57:50:c3:65:89:ca:f6:14:b4:69:ca:3f:a9:be:ad:34:
         b2:60:af:ba:a5:9b:a2:6b:c0:e0:a4:24:c0:7b:13:93:2b:7f:
         c0:77:b0:2f:e0:c5:a2:55:9e:6b:9e:3a:79:5a:5b:57:49:d8:
         69:d9:e9:80:88:4e:e1:7f:a2:e1:15:7c:85:12:54:a1:e0:1f:
         79:e3:d1:1e:47:35:17:5e:a2:1f:c2:30:f7:1c:f3:cc:2f:af:
         0d:45:ee:ef:78:e1:ac:07:a8:c9:e1:2f:bd:01:c5:b4:20:93:
         4a:0f:ca:aa:d5:15:bf:21:bb:76:dd:ad:95:45:da:56:3c:c4:
         43:e0:7f:e9:bc:74:fa:e9:f8:0d:e8:a5:e3:ac:6a:43:e2:1f:
         5e:52:c2:b0:80:07:27:0d:51:b8:8f:ee:43:e8:81:b1:f9:36:
         85:89:d5:d4:6f:db:dd:f1:ec:d0:84:3d:ac:2a:b1:b2:65:44:
         9d:46:7a:27:59:69:fb:d2:88:23:b9:a5:b2:49:6e:12:fa:8d:
         ec:ff:0b:47:db:13:0e:9f:5a:03:d1:a8:5e:7b:52:9c:cc:9f:
         63:10:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org