Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39302e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          dY7r5Rx2KbAa46F2GreozE1V08zaYku5P1mSapEUJGU=
Subject key identifier:   74:13:39:B7:5C:8C:A1:28:82:4D:8E:86:83:2A:C7:85:9C:9F:41:96
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       48F42CCD4D3BE469CCFD847E0D5B4E4CED54A4DA
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:57 +0000
ROA not before:           Wed 03 Apr 2024 23:17:57 +0000
ROA not after:            Wed 02 Apr 2025 23:22:57 +0000
asID:                     52653
IP address blocks:        177.221.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f4:2c:cd:4d:3b:e4:69:cc:fd:84:7e:0d:5b:4e:4c:ed:54:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:57 2024 GMT
            Not After : Apr  2 23:22:57 2025 GMT
        Subject: CN=741339B75C8CA128824D8E86832AC7859C9F4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:e2:77:d0:ee:dc:3c:73:26:1d:1e:03:9e:
                    df:76:82:c9:e7:13:8d:6a:91:70:78:16:c8:c9:b3:
                    78:af:c7:6c:39:8c:aa:cb:55:d8:89:ab:66:54:1f:
                    c6:6e:36:18:2f:7e:28:f1:f1:a5:33:7d:a9:6d:85:
                    a4:d6:05:e8:78:8e:68:e7:1c:65:e3:c0:cf:c0:7a:
                    a4:61:5b:20:09:1d:63:d7:1a:7b:d1:6d:17:9a:99:
                    aa:1a:4f:fa:94:7f:7a:ed:3a:24:d4:ce:7e:64:9f:
                    ff:0b:da:58:b6:46:6c:99:35:6b:3c:b5:88:29:b4:
                    33:a5:ed:d5:88:fc:32:55:18:18:b6:8c:5d:f0:8c:
                    6a:0b:32:b1:eb:94:5f:8f:eb:28:78:e4:7e:4d:0e:
                    dd:2a:8e:31:a2:5e:8d:f3:eb:21:58:4e:66:a0:4f:
                    65:99:94:55:b1:48:42:48:04:63:99:1e:54:72:32:
                    7e:e1:1c:fb:c7:53:fe:aa:85:61:ff:6a:e5:f5:e7:
                    8e:8f:5e:b1:e4:06:50:09:47:b1:87:7e:8b:f6:42:
                    d2:87:5c:57:0e:bc:61:f7:54:48:a0:23:29:7f:33:
                    65:90:59:35:e1:0d:05:a6:ba:61:69:5e:74:19:c4:
                    f7:9a:52:f1:c8:d7:d6:a5:4b:e7:af:be:32:ef:8a:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:39:B7:5C:8C:A1:28:82:4D:8E:86:83:2A:C7:85:9C:9F:41:96
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:4e:20:1b:9d:7e:4a:6d:a4:91:79:79:6d:f7:21:d0:33:
         05:3c:c7:1c:81:11:3b:30:22:6b:c4:aa:80:dc:88:2e:a9:47:
         94:8f:a0:9a:b2:6b:1f:f4:c6:89:7a:d4:03:bb:d0:b1:bb:dd:
         db:98:e8:00:4e:c5:03:ad:76:7b:c9:30:67:fe:8e:f5:c4:0e:
         3f:0e:14:53:81:08:f1:6e:d6:f4:db:50:1a:b8:9c:42:3f:13:
         28:d7:e2:8f:0e:d3:65:7b:99:0a:f7:d0:da:a5:0e:05:5f:38:
         39:6e:23:83:ea:f3:e2:27:d7:3c:fb:5b:ec:37:b5:7c:42:fc:
         eb:d2:8f:6a:73:ef:d6:50:41:25:71:5b:39:ce:8b:a9:5f:fb:
         a9:e8:7d:e1:49:08:17:22:6e:85:9b:d0:7f:90:75:0e:27:b6:
         f2:a9:19:a8:54:f2:48:61:13:f6:91:64:a0:8c:72:3c:f2:ef:
         d7:2b:eb:f9:31:73:e2:57:b3:ee:4a:a5:59:c2:9a:d3:41:6e:
         e8:cb:57:f2:d7:9e:6d:83:93:92:06:78:1e:0c:fd:18:db:cf:
         f7:21:cc:df:91:80:1f:e2:d0:b7:85:fa:74:58:8a:eb:67:d2:
         4b:8a:2c:20:83:32:ca:c8:7a:63:a3:f6:9c:89:ba:67:aa:f6:
         96:24:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org