Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
File:                     3137372e31312e3136382e302f32312d3234203d3e203532393033.roa (raw, json)
Hash identifier:          P3MNsJJyzbQ4+cWSD6hSkZ54bOqzx44uvy9vvt818K0=
Subject key identifier:   10:8B:85:82:BB:FE:64:9F:6F:69:9A:F3:B4:CA:5C:CD:DE:FA:26:78
Certificate issuer:       /CN=36ECAA0A83F15C768CBF66E950397B9929964174
Certificate serial:       59FEBF6C08CA04A819B4734D4EF6C6A511EBE1D4
Authority key identifier: 36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
Signing time:             Thu 04 Apr 2024 08:00:34 +0000
ROA not before:           Thu 04 Apr 2024 07:55:34 +0000
ROA not after:            Thu 03 Apr 2025 08:00:34 +0000
asID:                     52903
IP address blocks:        177.11.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.crl
                          rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fe:bf:6c:08:ca:04:a8:19:b4:73:4d:4e:f6:c6:a5:11:eb:e1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ECAA0A83F15C768CBF66E950397B9929964174
        Validity
            Not Before: Apr  4 07:55:34 2024 GMT
            Not After : Apr  3 08:00:34 2025 GMT
        Subject: CN=108B8582BBFE649F6F699AF3B4CA5CCDDEFA2678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:74:f5:95:0d:cc:f5:70:ac:a3:08:f7:6e:
                    41:81:b9:bf:34:ce:87:9d:80:ec:31:c3:44:7a:7c:
                    62:b8:6f:8c:6e:ef:ca:c7:18:9b:1b:3f:0a:ca:6f:
                    84:02:8b:77:2d:7f:57:4f:dd:94:49:f0:d3:d9:0e:
                    38:4a:0f:6d:42:30:ec:8d:e8:49:bd:54:fe:66:75:
                    64:f4:23:93:71:95:65:05:58:78:3f:ec:79:3e:5f:
                    41:f4:a5:6a:07:6b:80:dc:79:03:80:9b:72:a4:3e:
                    47:ca:af:3e:67:4a:b6:bc:5e:37:96:77:41:97:09:
                    c8:bb:15:bd:50:2b:d0:6a:c2:fb:d8:07:4d:44:50:
                    b2:22:7d:83:9e:82:73:d9:ae:bd:a4:10:9a:e8:de:
                    1d:37:fa:f7:fa:49:18:a0:e1:09:8a:69:61:40:12:
                    f0:cc:77:25:aa:17:b7:6a:b9:a0:9c:71:9e:a0:36:
                    d2:ca:70:a6:77:11:9e:d9:07:50:f7:36:87:34:b3:
                    35:94:6c:e9:2b:32:92:0f:d2:95:9c:55:37:4f:b3:
                    4c:89:fc:e2:64:11:fc:41:78:48:a3:df:3a:f8:5b:
                    fa:1e:ad:99:24:85:56:d5:2a:11:aa:c1:07:c4:d9:
                    b6:c9:8c:76:23:a2:7d:42:b9:c3:66:b5:df:e9:03:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8B:85:82:BB:FE:64:9F:6F:69:9A:F3:B4:CA:5C:CD:DE:FA:26:78
            X509v3 Authority Key Identifier:
                keyid:36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:08:44:3f:df:50:ae:3f:95:e2:16:fb:a7:71:53:3b:d6:34:
         87:af:6d:3e:89:59:51:2b:a1:f0:4e:4c:40:6e:56:23:ae:56:
         e5:a3:1c:a7:7e:ae:0c:5f:62:9d:6c:b5:25:cd:57:cc:0b:67:
         ee:a0:dd:6b:1c:44:50:a3:72:57:ef:b1:79:53:f1:16:b0:2c:
         0a:b1:3a:04:7a:d6:a4:c1:85:0d:04:ed:40:f4:35:49:4f:5a:
         1a:78:e5:8a:91:4a:18:27:18:38:e9:ac:4f:b5:92:98:9c:66:
         fb:f1:8c:bd:86:69:69:4e:f2:0f:f7:60:c7:b0:4a:d5:5f:8e:
         2b:d6:58:40:e8:ad:ad:2f:af:50:13:68:db:1f:4e:8b:9e:13:
         a3:02:9a:57:38:2c:09:44:31:51:91:5d:b2:61:d1:1a:c8:12:
         fd:0b:aa:6f:04:07:e3:a6:b2:12:51:7f:10:f1:fc:2e:cb:ee:
         ef:b4:60:9e:8c:c3:c3:6a:47:15:01:34:de:0f:1c:b1:bb:fe:
         58:49:e7:21:ce:d8:87:aa:10:89:59:22:ec:9c:49:e8:00:76:
         ca:cf:24:67:a3:65:6a:79:fe:d5:89:14:de:a7:8a:f3:7b:e4:
         a2:c5:3e:38:a8:5d:31:3c:8b:78:48:31:58:3d:75:da:7e:75:
         68:1b:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:52 2024 by rpki-client on console-fra.rpki-client.org