Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38362e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          bC8YMB+v7mFZCuv+kS7hg11ztfBBydiOzGvEZr8kVVs=
Subject key identifier:   8D:7A:1D:91:00:E2:AB:DC:BE:48:EC:93:B4:A1:D2:AC:6A:BD:53:F1
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1281B5159DC4FD8121058DC173A75470ECEAAA1A
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:58 +0000
ROA not before:           Wed 03 Apr 2024 23:17:58 +0000
ROA not after:            Wed 02 Apr 2025 23:22:58 +0000
asID:                     52653
IP address blocks:        177.221.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:81:b5:15:9d:c4:fd:81:21:05:8d:c1:73:a7:54:70:ec:ea:aa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:58 2024 GMT
            Not After : Apr  2 23:22:58 2025 GMT
        Subject: CN=8D7A1D9100E2ABDCBE48EC93B4A1D2AC6ABD53F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:6a:aa:1c:9c:78:4e:5e:6c:6e:0e:31:96:
                    b2:ea:06:cf:3e:7b:04:3c:1e:ff:50:8d:7f:2a:2e:
                    25:06:41:d4:e0:9b:5e:d6:1f:ee:e7:2d:26:2a:59:
                    d9:ce:48:1d:14:fa:83:c7:75:ca:9e:66:fb:c1:2b:
                    5d:01:20:1a:9b:7f:a5:5f:89:86:c2:c5:33:36:14:
                    a7:fa:c6:84:92:92:13:17:7e:4e:e5:a5:0d:54:d6:
                    46:7a:25:39:05:94:40:9b:d9:53:1a:3a:fa:74:ba:
                    94:62:7b:61:6f:3d:72:65:d4:ad:ad:31:43:d0:77:
                    2f:0e:9f:22:e9:58:bc:67:02:e7:12:51:0d:c7:88:
                    bd:b3:93:98:d0:9a:eb:43:6f:25:bc:47:cc:51:28:
                    e9:9a:e5:ad:ab:60:f8:b8:86:4a:27:84:63:c3:80:
                    c0:f3:e6:fd:4b:98:3a:45:e9:a8:9c:5d:b2:71:8d:
                    ca:0d:aa:f2:df:79:7b:69:c8:42:6b:8f:32:1f:4a:
                    ee:55:1c:5b:66:0e:9d:78:14:a5:fa:95:d3:9b:7a:
                    63:82:b2:16:9c:8d:6c:eb:22:6a:3f:9e:23:d6:1b:
                    a0:dc:44:99:d2:5e:05:77:5d:f5:06:be:0f:c5:a1:
                    34:a9:59:24:9c:22:6d:21:0c:ff:00:27:82:63:a9:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7A:1D:91:00:E2:AB:DC:BE:48:EC:93:B4:A1:D2:AC:6A:BD:53:F1
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:14:3b:77:97:1e:a6:7c:3c:c2:f7:54:14:eb:1e:87:c1:12:
         a5:22:6e:71:99:ea:7a:fe:f2:84:82:3b:18:7d:4a:44:1f:e4:
         82:94:1e:ea:db:28:98:08:fb:b0:14:32:01:56:10:64:a8:81:
         fa:23:7a:3d:68:d1:56:7a:ad:be:15:1e:6c:d4:13:65:7e:5e:
         a8:94:89:60:42:fa:b8:c1:26:74:ca:0b:fa:f0:49:b3:54:84:
         7b:de:80:09:46:a7:77:02:71:e8:aa:f0:59:df:53:4a:8d:f2:
         92:72:ca:1b:45:29:e6:8f:18:51:e5:2d:20:38:24:6f:13:e9:
         a8:b5:fa:58:de:42:89:9a:47:2f:24:f9:d5:0a:5d:d5:ca:34:
         13:4a:40:d0:b3:fb:32:c0:e5:34:7b:bb:f1:d1:52:14:2a:50:
         f9:ba:61:1c:d9:6b:47:0a:2a:c5:32:3b:c4:0e:4e:27:ed:08:
         8c:8f:73:1e:bc:c0:ca:fb:21:b1:25:a9:98:4a:e3:57:83:75:
         a5:e8:1a:02:2b:3b:88:2d:2b:cc:21:7e:66:b6:98:1f:1c:b3:
         c9:8d:2b:3e:c0:6c:aa:89:ff:d4:a8:66:5a:9b:e3:d0:1d:7e:
         22:be:db:5c:4e:c2:03:67:e9:e5:09:99:68:c5:f5:bb:d9:4e:
         1f:c1:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org