Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          EppLLuL4KQkVKg2Es8nKagGlZt+7p7bqzsl6+FIDikQ=
Subject key identifier:   13:81:10:60:37:6F:64:7D:E7:C4:66:64:2E:69:F7:8D:BF:FA:53:EC
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1311A7C7FD0A4C1B8819FD093D64B77EA4B114DC
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:51 +0000
ROA not before:           Wed 03 Apr 2024 23:17:51 +0000
ROA not after:            Wed 02 Apr 2025 23:22:51 +0000
asID:                     52653
IP address blocks:        177.221.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:11:a7:c7:fd:0a:4c:1b:88:19:fd:09:3d:64:b7:7e:a4:b1:14:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:51 2024 GMT
            Not After : Apr  2 23:22:51 2025 GMT
        Subject: CN=13811060376F647DE7C466642E69F78DBFFA53EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:d0:da:26:8a:a6:ab:8a:eb:55:a7:13:ae:
                    da:ad:14:c2:fb:a7:16:3a:26:72:2e:dd:78:ec:31:
                    6c:7d:39:f1:21:f0:f8:eb:1e:9e:db:36:2c:7a:c2:
                    9c:17:5b:71:04:ca:ef:83:72:a1:1d:0d:05:00:e8:
                    40:8b:e4:98:c4:f1:ff:c6:41:f5:00:ce:d2:0b:56:
                    b3:33:d1:b2:7b:34:a7:22:90:18:76:14:30:a8:15:
                    f3:20:ab:6b:14:ce:19:a9:95:c6:16:9f:5b:fa:4a:
                    83:25:72:96:a8:83:e0:ee:c7:8a:af:ce:23:c1:82:
                    ea:a5:b2:1d:d1:d6:2e:c7:d8:5e:a7:72:46:e0:8e:
                    3d:46:fa:8f:6b:c6:c7:5f:38:26:db:71:a3:4a:e4:
                    4b:45:e2:40:d1:b0:4f:47:13:65:9d:05:f1:2b:dd:
                    ad:32:97:84:1b:b2:0d:f1:fd:4d:4b:18:e0:d3:bb:
                    34:74:4c:c2:3e:dc:92:5a:01:10:9e:81:07:b7:98:
                    2e:f2:18:ac:eb:58:7d:72:bc:75:9f:40:f7:f4:0a:
                    59:bb:71:33:27:02:ec:6c:ac:74:e5:ac:52:cc:bf:
                    83:11:bf:72:63:60:be:d3:b0:b4:b9:1e:87:8d:ed:
                    90:81:c6:ae:ca:52:f3:1b:a3:6c:5b:79:43:34:ee:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:81:10:60:37:6F:64:7D:E7:C4:66:64:2E:69:F7:8D:BF:FA:53:EC
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:8a:e4:28:0f:6f:0b:b0:02:96:a3:fa:0f:93:49:54:dd:
         cd:c7:87:a7:28:6f:3a:4f:1d:8f:91:74:dd:f3:37:f9:f9:6a:
         f8:0d:3d:c6:d2:ef:c9:ad:98:4b:72:18:14:cf:54:9a:d5:2d:
         d9:33:e0:7d:a5:59:04:46:69:70:06:ed:ae:ca:da:d5:5f:0f:
         6f:d4:3b:f4:da:5f:8e:0c:c0:f3:f6:3e:fd:32:97:75:67:fc:
         c0:bf:6f:2b:7e:e9:70:2c:20:9d:60:4e:10:63:b5:f8:52:14:
         a3:bc:61:6a:3e:e9:8b:45:b6:a0:00:07:c5:dd:16:9d:73:b1:
         c5:36:68:d6:87:3d:0f:ff:77:87:4c:27:09:57:ef:7c:d8:50:
         58:8f:14:b8:3f:85:fe:03:d8:5b:6b:dc:8b:76:56:65:c5:a0:
         9a:1c:3b:fd:ca:17:a3:cc:5c:a7:3e:02:8e:7d:e9:47:55:26:
         8b:2f:f8:8b:55:97:d6:46:2d:1c:18:07:71:5e:a1:c5:9a:d7:
         3c:97:26:79:82:67:e8:0a:84:94:12:23:8e:96:db:27:cc:e0:
         e3:0f:80:d1:c5:dc:31:b7:cb:b4:98:b2:e9:e6:da:be:2b:f7:
         3d:67:63:98:66:e5:83:82:30:b9:84:cb:3d:8e:ba:4a:92:d1:
         6c:4d:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org