Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
File:                     3137372e3132342e302e302f32312d3234203d3e20323632333131.roa (raw, json)
Hash identifier:          +XhRDwINjHBV2Kfdh3GmEv9gJ5F5OWGOF31yje+AtlY=
Subject key identifier:   C5:71:89:40:33:26:4F:87:A8:6A:3E:0A:60:B7:2F:65:3F:EF:13:7F
Certificate issuer:       /CN=8B49F9344E05C9F966C6027F79FC469130EC971D
Certificate serial:       4E748CD7FAF5250E5F955DDC30244D73E9265821
Authority key identifier: 8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa
Signing time:             Thu 04 Apr 2024 00:53:38 +0000
ROA not before:           Thu 04 Apr 2024 00:48:38 +0000
ROA not after:            Thu 03 Apr 2025 00:53:38 +0000
asID:                     262311
IP address blocks:        177.124.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl
                          rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:8c:d7:fa:f5:25:0e:5f:95:5d:dc:30:24:4d:73:e9:26:58:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B49F9344E05C9F966C6027F79FC469130EC971D
        Validity
            Not Before: Apr  4 00:48:38 2024 GMT
            Not After : Apr  3 00:53:38 2025 GMT
        Subject: CN=C571894033264F87A86A3E0A60B72F653FEF137F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:e3:02:a2:3e:48:3d:99:38:eb:c6:4b:c8:
                    b7:cb:f8:aa:5f:7e:84:b7:98:bc:e2:dd:ba:16:c4:
                    1b:45:d5:5f:48:e3:5b:33:55:2e:eb:9a:cc:4f:c7:
                    fc:f0:dc:77:9a:20:22:a7:1b:9d:29:d5:6f:72:79:
                    11:22:12:c2:09:c8:76:f0:5c:a5:57:3e:44:6e:4c:
                    80:73:ed:ee:1a:d1:a7:2f:9b:be:c4:7c:b6:53:d4:
                    df:4b:c7:ab:1c:da:82:42:0e:7e:e6:4d:65:b6:f9:
                    52:00:7d:41:32:bb:10:6d:88:08:04:98:ff:59:90:
                    d6:71:d6:40:a3:64:eb:1e:eb:18:17:bd:1d:27:07:
                    f1:90:4a:ce:da:eb:7c:29:c6:52:88:c6:34:df:69:
                    cf:06:f0:b3:fb:1c:a4:7b:96:68:2e:81:a7:4c:e2:
                    97:49:10:a2:2a:0c:49:a0:8b:22:be:83:ab:98:35:
                    59:26:fe:a8:fc:5d:72:cb:1d:ac:a5:27:fa:66:86:
                    dd:55:bd:9b:5e:7e:7a:03:d2:e1:2d:64:ee:67:07:
                    b1:9f:c0:3e:69:55:3b:c7:6c:5f:8d:50:f5:79:11:
                    48:7b:fa:ec:b0:40:c8:c1:42:d6:ff:85:c0:0f:99:
                    90:2a:bc:e0:35:e1:c5:5b:1f:95:2e:59:89:69:a2:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:71:89:40:33:26:4F:87:A8:6A:3E:0A:60:B7:2F:65:3F:EF:13:7F
            X509v3 Authority Key Identifier:
                keyid:8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/3137372e3132342e302e302f32312d3234203d3e20323632333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:71:fb:6d:2e:c9:46:f1:0a:16:6f:34:77:66:c5:f0:a5:
         e6:5c:29:79:d7:10:98:bf:b2:0e:25:82:96:47:c7:dd:9a:99:
         18:89:81:2b:69:aa:4b:bc:11:f2:72:9f:c0:ff:55:56:7a:70:
         52:89:68:38:6e:1a:81:44:58:6c:07:a1:a7:3c:8d:f5:4f:67:
         90:fd:ae:d3:8e:d8:e6:9d:cb:56:9d:74:e3:03:d7:31:3a:b5:
         9c:ba:9f:77:f2:5d:e6:78:d5:40:84:88:3c:cc:fe:73:fc:44:
         ac:f5:5b:69:17:63:bb:29:f8:a3:7a:fe:01:6f:48:f3:e2:91:
         c3:c0:cc:56:17:c3:ca:03:8e:7e:9f:89:42:95:63:b0:a4:f0:
         dd:34:26:ca:49:87:29:48:de:18:18:3e:b7:19:52:ba:47:23:
         20:8c:a0:39:f2:88:ab:1a:99:7a:33:8c:d3:34:43:20:28:47:
         c8:18:38:6f:d3:5d:96:37:46:1f:e9:ac:e3:fa:5f:fd:d2:ff:
         f1:07:9a:56:fb:1f:61:89:3b:a1:3e:24:d8:8c:5f:a2:ca:64:
         e9:5e:12:5a:df:99:e6:cf:bc:f5:0b:c5:23:26:18:a1:1e:f5:
         30:c7:43:ab:a3:0a:ef:25:aa:85:cc:13:48:66:b5:db:1d:a8:
         91:fb:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org