Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa
File:                     3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          eg+Y7uE9HcyNHX1+3sRnP1NDpbjQQFwmfo+RkrehOV8=
Subject key identifier:   72:F4:BC:38:C3:D6:00:BA:80:70:B5:CB:ED:08:0D:4D:A1:D4:36:96
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       15F3E21D098A5050AE7B5897122FD996E7ECA387
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     267301
IP address blocks:        177.137.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f3:e2:1d:09:8a:50:50:ae:7b:58:97:12:2f:d9:96:e7:ec:a3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=72F4BC38C3D600BA8070B5CBED080D4DA1D43696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fe:e4:58:75:3f:45:41:16:99:2d:0c:31:6d:
                    17:16:8e:b5:ff:c7:46:82:21:e8:35:c9:16:0b:1f:
                    75:b6:d6:dd:48:de:bd:22:7b:2a:f7:6b:c1:88:50:
                    7b:26:9f:cd:cb:ea:0c:a0:44:e4:55:48:35:0c:5c:
                    65:1d:dd:24:27:d6:4b:a2:c5:d0:43:c0:d1:c5:66:
                    da:d1:4c:b1:b1:cb:6e:8e:7c:70:a1:a9:23:fd:7f:
                    02:0c:61:1a:1a:57:d7:50:27:c3:4c:5c:93:1f:a3:
                    d1:68:6d:77:7e:07:62:d8:f8:87:fb:06:cd:3e:4e:
                    f0:60:22:82:ba:90:3a:5e:9d:c4:b9:34:8a:b6:cf:
                    83:90:26:ae:24:65:aa:3e:82:84:b1:35:00:cd:72:
                    4b:99:4e:3d:8c:77:65:bd:15:8b:df:50:42:c9:bb:
                    f6:0f:ed:15:e8:fa:54:19:9d:db:3c:4d:4f:d9:95:
                    ad:9b:80:47:b2:50:b6:35:4b:6c:38:fa:8c:43:1e:
                    71:12:93:17:65:db:ce:44:d2:45:f3:76:ce:6a:83:
                    d0:0a:d6:98:cb:d2:c8:7d:3c:53:a3:83:1c:ad:4e:
                    97:22:d6:ed:f2:d2:1e:18:8e:9a:4a:24:4a:ce:bb:
                    55:83:08:12:84:a4:ed:d3:39:90:d8:b7:f9:06:be:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:BC:38:C3:D6:00:BA:80:70:B5:CB:ED:08:0D:4D:A1:D4:36:96
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:71:8c:db:de:9a:dd:c7:f1:57:87:69:d4:26:6d:0b:07:11:
         c6:05:34:75:9a:94:34:2b:4f:46:ab:47:99:d4:56:98:d0:53:
         c2:cc:d2:ce:71:97:5b:50:73:28:93:b1:86:f2:67:3c:b4:d3:
         38:de:03:38:12:a0:42:f4:ef:3f:92:a7:7e:b4:44:1e:a6:bd:
         80:12:1c:ec:85:bc:b4:1d:7c:18:a9:13:45:8f:85:c3:5b:1f:
         bc:ed:95:ae:3b:4f:c1:a6:c5:02:6b:8b:d3:38:41:0b:9e:91:
         e3:2b:89:ed:da:78:56:6d:7f:d2:e4:09:34:d5:f9:a5:f8:9b:
         97:e7:03:b3:4e:2b:bd:7f:60:dd:2e:b2:56:ac:61:b2:d8:de:
         56:7f:d8:72:34:e0:13:99:8a:ef:32:9d:49:89:ac:7a:7a:4c:
         b9:f7:4b:75:87:c6:04:dd:96:8b:1c:1a:2a:0a:5a:4c:20:9f:
         87:6c:ca:dc:4c:dc:8c:59:02:bd:7c:5c:34:8e:dc:ff:57:62:
         e8:ca:f0:4e:04:2b:5c:b7:22:f6:f1:00:31:2a:24:0d:91:7a:
         17:58:93:6d:e6:ca:04:36:e1:6a:44:64:3b:5b:df:29:0e:02:
         1e:b5:f8:80:91:2c:ac:5a:23:eb:d7:f2:5c:1e:fa:ca:4a:50:
         87:6c:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org