Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39342e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          p1aGMS4y911NTEferajAis7BZfADjqXueIFnnD0DJpY=
Subject key identifier:   D8:5C:0B:52:DC:2A:E9:04:9D:0E:3B:EB:A6:9F:82:BE:F2:D2:83:96
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       393DF0962F6073C1ECCC4EA6E340D8C6ABD4A25C
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:52 +0000
ROA not before:           Wed 03 Apr 2024 23:17:52 +0000
ROA not after:            Wed 02 Apr 2025 23:22:52 +0000
asID:                     52653
IP address blocks:        177.221.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3d:f0:96:2f:60:73:c1:ec:cc:4e:a6:e3:40:d8:c6:ab:d4:a2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:52 2024 GMT
            Not After : Apr  2 23:22:52 2025 GMT
        Subject: CN=D85C0B52DC2AE9049D0E3BEBA69F82BEF2D28396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:b5:3e:20:99:41:96:26:f2:0d:5e:c5:5d:
                    b8:88:d0:5b:d4:60:e5:cb:b0:7d:76:5f:f0:31:be:
                    6f:60:e3:85:24:1e:bb:07:ce:db:a4:e7:ec:fa:24:
                    0a:f6:80:99:c9:5f:8f:17:58:59:46:6a:b1:70:61:
                    f4:f7:bf:b9:9c:13:ad:e7:0a:51:02:4c:48:d9:0a:
                    43:01:af:bd:47:21:fd:4c:30:15:59:1c:58:f7:1f:
                    88:c9:98:59:1c:a8:83:d2:e2:f2:3d:b6:62:1f:d3:
                    6f:aa:f8:88:71:c3:5b:1e:74:4d:b5:15:c1:16:90:
                    4c:a7:c5:fa:43:76:d3:54:94:d4:86:77:ea:a7:61:
                    5c:f9:7b:57:0a:f0:23:24:0f:33:3a:34:08:1f:f6:
                    80:00:10:c6:ec:59:73:0a:3d:c4:7d:27:54:5f:fe:
                    7a:7b:c6:48:ce:70:d4:72:4b:fc:24:31:ab:9e:d9:
                    5a:35:14:d6:e9:ca:f3:62:de:e7:eb:d5:e2:66:f8:
                    bb:13:39:98:9c:ae:ac:97:24:7f:04:38:c5:e3:1d:
                    30:02:d0:e5:56:7b:d2:93:e8:b6:a4:4b:34:d5:74:
                    71:1a:57:7a:a8:34:e7:1a:aa:47:1e:53:d3:20:d8:
                    8b:98:d5:4c:d7:aa:12:56:f0:eb:c4:ea:0f:ab:83:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:0B:52:DC:2A:E9:04:9D:0E:3B:EB:A6:9F:82:BE:F2:D2:83:96
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:86:ef:19:25:34:7f:da:1f:27:49:e2:87:0e:ce:a6:36:
         bf:26:9b:17:50:f6:41:49:21:df:93:4b:cd:0e:d7:1b:7b:cb:
         92:cc:d3:9e:95:6c:10:6a:aa:60:c3:34:a0:d4:5e:3d:27:5b:
         fa:12:c2:c7:7c:cb:fc:d3:c3:38:97:1c:1c:4d:3d:5d:a8:b7:
         9f:2a:3e:7a:21:6c:7e:0e:b4:ee:2f:cc:bd:09:ea:35:75:a3:
         9d:9d:f9:73:7e:ec:fd:26:91:c3:e2:75:0a:b0:7c:cb:67:c7:
         c7:86:da:ff:c5:61:33:c9:18:d4:70:ae:48:82:b9:b4:9e:55:
         9c:eb:6b:db:f5:85:a7:e7:f2:32:f4:38:6e:9a:33:ee:12:1a:
         92:e4:bd:c0:e3:92:4c:27:5b:63:3b:7c:ce:18:30:c4:7f:ed:
         40:36:07:bc:52:6e:b6:75:bc:d1:54:bd:1e:5c:69:4c:32:e5:
         d2:b9:e6:ff:d8:64:5e:2e:fb:20:3b:e3:dd:e0:a6:df:42:7b:
         f3:2c:d1:28:27:5b:f7:26:3d:b5:cb:65:d0:48:33:ca:ed:09:
         2a:31:5f:5b:c4:16:75:0e:51:e8:77:b0:31:a3:6c:36:eb:59:
         2f:a6:7c:50:e9:3e:d6:f8:c4:7b:0d:78:42:7e:78:8d:93:eb:
         6e:74:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org