Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38372e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          /ru/1k86w6kjfSKq4DE/F0aQcvXzjgF5kcU/s0V9PCQ=
Subject key identifier:   F0:05:26:40:A0:5D:1D:CF:D9:5E:77:56:6D:DC:06:55:96:26:54:4D
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       04CE53C5A4DE75582BE7B474918F9C9736BA3DAD
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:53 +0000
ROA not before:           Wed 03 Apr 2024 23:17:53 +0000
ROA not after:            Wed 02 Apr 2025 23:22:53 +0000
asID:                     52653
IP address blocks:        177.221.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:53:c5:a4:de:75:58:2b:e7:b4:74:91:8f:9c:97:36:ba:3d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:53 2024 GMT
            Not After : Apr  2 23:22:53 2025 GMT
        Subject: CN=F0052640A05D1DCFD95E77566DDC06559626544D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:09:16:c8:ae:e5:41:cb:2f:e4:99:21:57:
                    7d:ac:bb:d4:10:49:14:39:ee:75:79:e4:a2:7e:83:
                    a5:53:99:c8:c0:d5:57:d7:ea:c4:a1:e6:61:ca:49:
                    f8:0f:4c:83:83:a5:e4:8d:76:6c:92:35:9f:95:d6:
                    45:c2:11:23:c7:dc:1c:b0:87:6c:6f:39:c4:ec:f7:
                    e0:44:ca:3b:51:14:86:39:1b:d9:b6:79:59:5a:29:
                    10:68:53:9c:ed:a7:3d:03:55:4a:42:2f:41:3f:ab:
                    2a:4d:02:2b:cf:9f:80:4b:77:6c:fe:2f:07:88:dc:
                    95:32:fa:ac:7f:6d:4f:82:17:c7:f2:97:4d:88:52:
                    e0:bc:a4:87:ec:86:dc:30:e3:c4:f3:23:f8:a7:62:
                    22:75:e7:34:04:a4:08:8e:74:e0:06:c5:28:cd:91:
                    fd:82:86:31:6a:6c:9e:34:2b:b5:72:2c:25:7e:e7:
                    af:58:f4:70:f0:cf:21:94:78:91:5e:cd:80:33:23:
                    f5:8a:3b:70:0d:4c:f6:0a:80:8e:3a:b4:9e:21:94:
                    9c:b8:16:6b:32:9d:18:01:b0:8f:0a:25:14:17:0a:
                    07:72:e8:ee:11:b5:d4:fe:08:22:06:1d:84:8d:c4:
                    f9:07:d3:d5:92:fd:ea:10:7c:c5:9b:d6:c3:e3:38:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:26:40:A0:5D:1D:CF:D9:5E:77:56:6D:DC:06:55:96:26:54:4D
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:b1:d5:94:91:78:b9:85:a2:cf:94:b2:51:2d:2d:d4:cd:
         af:da:b6:dc:8e:cc:5c:cc:25:d0:ff:99:a7:0d:64:f5:e6:88:
         5b:66:ce:ff:ea:3e:38:ee:74:10:d3:a3:06:65:d6:a8:2f:9a:
         b8:2c:52:12:1f:9c:ab:a1:4b:9f:36:18:67:d6:93:65:e3:05:
         24:af:cd:1c:82:41:a7:ce:3c:22:50:1c:73:64:60:ec:61:61:
         43:96:59:27:9c:d2:1d:93:8e:38:9f:b9:1a:78:aa:93:c0:a0:
         86:f4:d3:96:0a:88:0a:d1:29:ee:70:97:51:fb:f0:a2:34:8e:
         31:3d:19:ce:05:3e:63:39:2d:80:6f:26:70:de:54:36:be:ba:
         9e:d4:ab:f3:da:90:46:fc:41:9c:22:31:66:69:9c:5f:58:e3:
         f4:32:02:76:d4:a2:e3:02:e1:65:ac:38:2c:ba:c8:93:7d:f2:
         b4:b0:46:81:69:b6:1d:a5:a7:88:7d:4f:fc:c7:4d:37:d6:d9:
         bf:a4:d7:89:51:76:d6:2d:55:fa:8f:f5:89:21:e8:ed:93:18:
         ea:82:3e:f9:8f:1f:1d:2f:90:db:80:95:5c:5f:ff:9c:2d:6e:
         e6:b8:98:2c:af:0c:f9:c8:d1:b4:a4:18:59:3f:1d:78:7c:01:
         84:68:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org