Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39342e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          zKVwMHU0mKPx+HjvKjD/sirNz6jX46v86f5pnEFMxXU=
Subject key identifier:   4C:BA:DA:65:21:AF:6F:C0:ED:D4:89:84:DA:16:C6:30:51:AB:3B:9C
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       0DC7700CF5FE075A6FA354BDAC600405B8F54519
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:56 +0000
ROA not before:           Wed 03 Apr 2024 23:17:56 +0000
ROA not after:            Wed 02 Apr 2025 23:22:56 +0000
asID:                     52653
IP address blocks:        177.221.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c7:70:0c:f5:fe:07:5a:6f:a3:54:bd:ac:60:04:05:b8:f5:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:56 2024 GMT
            Not After : Apr  2 23:22:56 2025 GMT
        Subject: CN=4CBADA6521AF6FC0EDD48984DA16C63051AB3B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:37:07:36:f3:86:56:c1:24:1d:e5:6c:47:
                    22:15:e6:43:e1:85:1b:14:e1:1e:f6:25:56:a5:e1:
                    36:1c:a6:52:82:ea:e6:95:6a:b0:90:29:a7:b5:d3:
                    36:de:82:f3:08:9e:b4:e8:65:ef:53:2b:a5:f6:f8:
                    a8:92:51:38:59:84:4e:35:75:03:ed:73:ce:bb:a5:
                    51:d4:ce:4c:51:fe:c3:4d:45:64:2c:b4:63:f2:92:
                    35:6e:55:eb:4f:89:1f:af:c9:15:6b:87:65:63:13:
                    f7:a9:88:ab:a4:ac:1b:00:d2:a3:a1:df:b9:c1:8e:
                    7f:c1:78:a5:89:50:83:5a:f5:d2:37:e8:a3:00:86:
                    23:31:a2:76:bf:f3:2e:58:df:69:37:77:f0:49:60:
                    5a:43:9e:f4:d8:53:eb:51:49:b6:1e:21:ac:72:d4:
                    36:22:4e:ff:ba:96:d9:4b:b6:dd:7c:70:6c:fb:be:
                    9f:99:af:60:e0:d5:47:6e:5a:2b:56:a1:c7:cf:02:
                    94:c3:3b:78:15:80:99:2a:4c:ca:06:cc:a7:25:e3:
                    e0:cd:cb:b0:1e:ff:9f:5e:82:85:bb:f1:36:31:af:
                    87:08:9b:7e:55:8e:ce:51:8d:35:a2:35:b9:92:d2:
                    f5:27:63:f2:64:4a:66:37:46:8c:82:4f:26:e9:91:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:DA:65:21:AF:6F:C0:ED:D4:89:84:DA:16:C6:30:51:AB:3B:9C
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:6a:21:30:50:22:ad:d4:37:8b:4d:46:17:ad:0a:71:7c:
         df:7f:86:e5:e2:bc:98:d5:96:de:5f:08:18:d8:4b:76:d9:ba:
         ba:85:2e:8a:cb:9d:7e:fc:62:9a:c6:4a:88:91:1a:0a:63:c5:
         97:bd:cf:d9:52:56:15:13:e7:fc:a7:7c:2f:94:ae:08:05:cc:
         0b:3a:63:82:3b:3e:c1:ac:24:32:94:d2:63:c3:99:39:cd:37:
         65:0d:16:98:a6:62:34:0e:27:ee:78:47:75:bb:c3:71:95:8d:
         6d:dd:45:2c:4f:5a:a9:16:4b:95:a8:dd:f7:67:05:63:0e:dd:
         a0:48:26:fc:92:32:c4:63:2c:c7:10:3e:58:0b:f5:92:81:7e:
         d2:25:43:48:45:06:b9:74:4d:1a:bf:22:dc:91:eb:ef:ab:c5:
         ca:0f:4b:de:61:a0:3f:4a:d3:eb:b6:d8:78:a1:09:10:2c:b0:
         69:52:d2:88:e1:39:1a:7d:8e:10:f3:70:82:b7:04:38:c4:8c:
         0c:82:fc:3b:22:de:c1:83:2c:d6:86:5f:4c:12:f9:0a:de:b8:
         f5:eb:41:59:b6:e9:6f:50:c7:1d:9f:4e:3a:13:ee:6d:ac:02:
         97:18:25:98:16:80:4a:21:ba:19:3c:fb:51:57:21:84:6c:1d:
         33:14:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org