Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          41ZLh9AqFEbx+VpIr1VtYvYFtxhzzx+wyrnkbskqjQw=
Subject key identifier:   E7:5A:41:17:E3:29:92:D7:63:CA:28:46:CD:32:F6:76:39:73:A8:F8
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       159EA15C23A0866FDB071235BC7770B732177116
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:55 +0000
ROA not before:           Wed 03 Apr 2024 23:17:55 +0000
ROA not after:            Wed 02 Apr 2025 23:22:55 +0000
asID:                     52653
IP address blocks:        177.221.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9e:a1:5c:23:a0:86:6f:db:07:12:35:bc:77:70:b7:32:17:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:55 2024 GMT
            Not After : Apr  2 23:22:55 2025 GMT
        Subject: CN=E75A4117E32992D763CA2846CD32F6763973A8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:26:54:c3:5e:26:dd:19:ee:29:c4:92:3d:
                    73:4a:4f:3a:74:5a:dc:6b:ca:83:90:8d:48:bb:fa:
                    54:e5:da:41:19:38:5d:79:d1:07:3b:26:94:78:ae:
                    86:9d:6c:94:3b:1b:62:f3:4e:91:9c:f7:ae:bb:f6:
                    8f:ef:7e:5e:12:28:dd:ca:7e:c2:4d:f0:60:e2:75:
                    a6:36:85:d3:09:bd:1e:17:44:94:00:a1:0b:3e:d3:
                    85:f2:a0:9c:11:3c:2b:51:9e:73:5d:fc:29:c0:7a:
                    8d:f0:da:00:29:12:50:92:07:e7:fb:fc:80:22:03:
                    7c:75:d1:93:dc:5e:20:b2:55:3b:79:79:4e:2c:39:
                    53:1b:09:3e:46:f0:a6:05:09:94:0c:13:dd:66:6a:
                    67:11:ec:d8:c0:a1:c7:c7:aa:23:29:1d:b7:9a:13:
                    1e:c8:be:cf:84:b7:e9:5a:42:c9:cf:5b:bf:b0:ee:
                    ac:c5:67:1c:31:33:79:b6:49:63:00:1e:a0:be:9a:
                    22:5f:e2:8f:4f:06:fc:63:ca:61:41:44:87:2e:8b:
                    aa:8f:93:6f:fc:b9:73:a9:55:3a:8b:bb:f3:f5:4f:
                    62:ec:8f:3e:a6:b9:e7:c2:13:a2:be:17:55:78:e4:
                    8d:fe:e8:eb:73:39:e5:31:29:c1:0f:94:15:5a:ad:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5A:41:17:E3:29:92:D7:63:CA:28:46:CD:32:F6:76:39:73:A8:F8
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:e9:f9:6f:4d:5e:b9:d5:ea:da:d7:bd:df:18:7f:d1:51:
         50:ad:b3:02:9b:94:b5:8f:ee:c7:3a:72:c3:a9:a3:15:a4:b2:
         d6:ee:a6:b1:fa:b8:49:eb:0a:e7:ea:25:af:c9:26:1d:6e:c5:
         17:3b:2e:57:ca:67:fc:97:ea:c3:e4:66:8b:99:30:08:68:ac:
         c0:ef:22:a5:1e:67:25:a7:9f:44:84:43:b0:07:ba:9b:38:bb:
         a9:7a:c6:8d:5f:2e:2e:f8:c3:fe:f6:6c:36:f3:6e:3a:f3:78:
         43:c3:87:13:d1:38:62:8a:d9:e7:c9:a3:51:b0:b4:70:93:8b:
         f4:50:74:78:21:cd:f9:08:90:b4:3c:97:d1:0f:a8:d8:67:81:
         57:e1:e6:78:2f:cd:ac:6f:bd:47:4b:2a:f7:d7:11:a2:cc:07:
         ac:f0:d8:1e:1f:03:37:1d:96:94:a2:93:3f:03:16:31:99:7b:
         46:fc:5d:c1:92:a2:ca:fc:56:d0:50:9d:64:4a:75:d2:0a:ba:
         30:e7:83:6e:c6:f0:eb:3e:aa:34:0f:5e:68:e3:f1:cb:17:7e:
         63:02:79:12:b5:2f:a6:52:58:8a:ae:14:1d:ad:ca:97:0f:f9:
         c2:8c:ac:21:1a:6d:a0:49:98:da:29:9c:1e:f4:99:98:8e:ab:
         de:b5:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org