Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          nvWxDV7w/pNJ/rR8e08SFXYN+qnenUh5UX/dDE2uUbI=
Subject key identifier:   57:CF:E8:19:EC:C8:A1:15:CE:94:18:3F:84:92:1D:1C:ED:1A:80:5B
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       169E5E40815D6359386EBED62FC1BD74DABC66B0
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:53 +0000
ROA not before:           Wed 03 Apr 2024 23:17:53 +0000
ROA not after:            Wed 02 Apr 2025 23:22:53 +0000
asID:                     52653
IP address blocks:        177.221.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:5e:40:81:5d:63:59:38:6e:be:d6:2f:c1:bd:74:da:bc:66:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:53 2024 GMT
            Not After : Apr  2 23:22:53 2025 GMT
        Subject: CN=57CFE819ECC8A115CE94183F84921D1CED1A805B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:38:0a:20:72:de:28:a9:56:06:b7:72:51:
                    28:54:f9:df:0a:c5:95:3d:54:69:6b:62:1c:52:ca:
                    3e:bb:1e:12:ac:a4:cf:69:ba:6b:5f:b4:82:14:6a:
                    44:d8:16:83:78:92:61:35:3a:bf:32:42:44:50:d2:
                    fb:92:1d:19:8a:cd:89:2a:d7:58:86:07:9e:c0:59:
                    45:f7:c5:45:98:c0:d3:84:59:ea:09:66:c9:cc:be:
                    97:87:02:e1:1c:2b:e7:ff:cb:bd:86:2c:7c:85:65:
                    f2:b7:bf:c7:17:49:fc:6f:86:99:7e:4d:75:2e:d9:
                    28:33:8f:ff:f6:b2:63:ab:41:86:b3:03:c9:61:37:
                    36:27:48:64:9c:75:a6:29:86:44:89:4c:f9:d9:aa:
                    9a:e1:76:41:f9:21:0e:9f:df:42:16:b4:9f:11:8d:
                    f3:e6:ef:15:13:65:97:b2:f3:14:60:54:a8:c6:ae:
                    9f:f7:00:a1:ce:fc:9c:41:25:a0:1c:60:96:64:ad:
                    2e:90:5a:5f:7b:a0:9f:93:9c:a1:fb:15:e5:fd:31:
                    79:13:43:65:dd:82:a4:7c:41:c8:74:a7:9b:25:d7:
                    bb:4c:6a:92:c9:69:68:4a:ff:f9:87:c7:23:c1:79:
                    e4:53:55:83:ac:08:03:9c:fd:00:c8:ad:dd:f3:6d:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:E8:19:EC:C8:A1:15:CE:94:18:3F:84:92:1D:1C:ED:1A:80:5B
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:f3:6b:df:b9:83:8e:ca:c2:23:69:a1:ec:88:f5:84:88:
         02:5a:06:63:8c:13:d6:e7:35:aa:0b:56:33:ec:c9:d0:d2:da:
         bf:4f:3a:37:fe:d2:83:fe:67:95:77:be:0b:6c:51:5c:97:aa:
         ee:4e:5f:83:6d:1a:a0:46:2c:d5:20:f2:73:3c:7d:cc:69:33:
         33:67:dd:1f:06:e8:66:76:60:50:52:ab:97:8f:c8:7f:62:ac:
         b5:51:25:c2:94:7f:34:81:a6:57:ed:eb:cc:a4:63:87:5a:f0:
         1d:f4:17:bd:d2:6a:08:7f:05:0f:cd:6d:79:85:78:56:6a:3b:
         bc:88:4d:12:94:4d:33:d3:3f:ac:e0:07:c4:ef:b1:64:17:7d:
         71:11:2e:01:db:a3:b0:a2:60:fa:38:de:9a:93:f6:14:a4:5c:
         4a:5c:69:3c:48:21:dc:c3:a2:22:a1:cb:74:e9:ed:d2:41:58:
         61:15:10:2d:36:69:9c:61:c7:c0:4f:e2:4b:a7:33:10:bb:a7:
         88:11:0d:30:30:45:fb:58:01:b3:10:02:6c:04:28:dc:4d:05:
         c0:7f:c5:e6:2c:98:ce:62:4f:b6:0c:65:12:be:35:2e:e2:a9:
         c1:16:9a:12:69:0f:b5:e2:6d:63:25:42:e9:89:b0:3d:c0:14:
         e1:f2:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org