Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          YhNzBHZ3f0nzhAsHhlUzhihVQygTu9uu2nkZCJ5w9fE=
Subject key identifier:   AF:67:67:37:71:A8:30:89:0E:4C:10:05:20:05:3B:95:5F:ED:40:40
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       107D7D7CB7DE70CB97649C2A1E3CAA1618E031FE
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:57 +0000
ROA not before:           Wed 03 Apr 2024 23:17:57 +0000
ROA not after:            Wed 02 Apr 2025 23:22:57 +0000
asID:                     52653
IP address blocks:        177.221.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7d:7d:7c:b7:de:70:cb:97:64:9c:2a:1e:3c:aa:16:18:e0:31:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:57 2024 GMT
            Not After : Apr  2 23:22:57 2025 GMT
        Subject: CN=AF67673771A830890E4C100520053B955FED4040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:24:f7:05:73:d7:33:e5:aa:d6:cc:5d:d0:
                    9d:54:0f:4c:2a:91:3e:e7:84:c0:ef:87:2a:b2:ad:
                    2b:71:93:6c:e1:57:f8:0c:28:66:95:7e:1e:ef:16:
                    63:e1:06:4a:d2:f1:ac:e6:03:14:3a:89:88:46:05:
                    3f:17:ba:3c:b6:f0:f2:82:e0:0b:eb:55:c3:a9:ec:
                    e3:2e:41:23:23:93:f6:a4:26:3c:c9:26:3c:98:83:
                    45:4d:a1:9e:5f:5c:35:63:86:ea:a7:3d:a1:48:5c:
                    cf:55:9c:47:fb:72:af:06:7f:27:77:7a:4e:e5:ea:
                    d5:14:64:3f:85:c0:f8:0f:de:a4:d0:ae:19:a7:4a:
                    8f:24:d7:6b:24:32:63:38:47:03:c6:33:93:53:e9:
                    6a:83:48:58:36:7a:9e:65:3e:a2:2c:00:d2:75:98:
                    3f:da:63:a9:f7:9e:13:38:4d:26:1a:24:7d:62:1f:
                    c3:85:e3:43:3c:0b:ae:a6:2a:8e:5e:f2:59:ba:38:
                    47:8e:bf:58:84:48:e6:33:1e:c1:af:92:30:d6:39:
                    c1:b2:5e:82:06:2e:d7:da:1c:38:a0:0e:93:f9:cd:
                    57:eb:03:02:57:ab:06:68:b7:6c:9f:72:57:5a:cf:
                    be:74:16:fd:26:e9:26:03:ec:54:d6:2b:2a:14:75:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:67:37:71:A8:30:89:0E:4C:10:05:20:05:3B:95:5F:ED:40:40
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:fb:60:50:1f:08:dc:61:9b:65:53:3d:f9:ab:19:5b:f1:
         d2:e8:9e:61:e9:f8:f9:45:73:96:42:aa:1d:ec:f7:cb:fa:7e:
         95:4d:0d:7a:a8:ec:84:c3:e6:c3:37:53:84:ca:e2:2a:84:a6:
         ae:ae:d4:e3:b4:7a:bd:3a:0c:03:f8:c6:38:f8:c2:46:7e:9c:
         a4:63:2e:ea:5b:6e:22:65:98:44:69:89:d9:62:a4:5b:10:0e:
         92:55:49:6a:59:56:bc:29:cc:3f:15:13:3f:e1:1f:b8:c4:44:
         fb:0f:1d:99:0e:9b:5e:6b:7b:1a:b9:b7:17:90:a6:ed:61:d9:
         ae:88:de:6b:d5:d3:c3:86:aa:87:d9:b9:70:2d:fc:33:4a:60:
         1d:f2:52:a3:c8:11:1c:a4:47:bb:f0:e8:ee:91:c5:48:cb:35:
         69:31:04:4c:57:6a:84:c5:28:ae:0a:be:40:ff:0a:cc:4d:f1:
         f0:08:b4:a2:29:54:a2:42:1e:42:de:a3:23:d2:76:1e:18:f3:
         bf:b2:c6:4d:ec:6c:d1:79:15:8c:a9:2d:75:2a:f1:28:c1:20:
         b3:02:02:59:da:02:d0:ae:fe:2c:ec:99:5a:20:8d:05:51:bf:
         08:54:5c:e5:2b:83:8d:b3:86:da:34:97:45:8d:9f:ac:50:44:
         09:fc:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org