Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
File:                     3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          afwf2dz7uYZf5vy9sS7CwofdSejq/lKevIqv/C4mbPg=
Subject key identifier:   8C:5E:6D:24:D7:9E:C1:DA:62:5F:03:62:42:82:D5:01:6B:07:62:0B
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       7A2F1589EBB56AFD2ECE16087503035448794207
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     267301
IP address blocks:        177.155.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2f:15:89:eb:b5:6a:fd:2e:ce:16:08:75:03:03:54:48:79:42:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=8C5E6D24D79EC1DA625F03624282D5016B07620B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:24:da:bd:f3:e9:d6:44:53:dc:28:7c:d6:
                    ea:3e:2f:4e:23:7d:3b:59:70:c9:57:a9:02:40:0f:
                    35:b8:68:f0:70:cb:8f:99:d7:6f:a7:09:e5:6f:8e:
                    88:82:87:8b:8c:7e:81:2e:9e:c3:55:ac:7b:73:32:
                    ed:37:44:87:d9:c3:fc:4d:81:83:a6:dd:7b:8d:a0:
                    de:39:a5:13:6c:68:7e:38:2e:ec:70:f6:2b:b9:7a:
                    d8:f8:cb:15:ec:25:ec:a6:1a:f7:9e:20:d8:fc:1b:
                    f5:e6:fe:9a:75:db:19:56:af:3c:00:41:83:8c:df:
                    4b:39:b0:7a:86:9a:b1:d8:32:c6:31:14:a2:30:e7:
                    c7:b6:c5:3e:0e:66:68:1d:f5:bf:2d:fd:70:a6:9b:
                    02:e9:4c:e8:f5:d5:30:5d:90:60:c6:46:26:66:76:
                    5d:50:40:d1:29:a2:ba:bc:6c:27:9d:0d:67:d0:85:
                    26:b1:c9:2c:f1:4c:69:cc:6a:6b:af:6b:10:42:20:
                    1b:73:eb:ca:64:21:d3:ce:5b:44:bd:72:70:d0:2f:
                    78:58:d9:f1:f3:88:ef:da:1b:30:fd:cd:07:3b:18:
                    9d:bc:20:77:f5:34:b2:23:9d:ad:cb:f9:a0:23:32:
                    9f:0c:14:88:39:3d:9b:64:05:9b:1b:25:38:5b:69:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:6D:24:D7:9E:C1:DA:62:5F:03:62:42:82:D5:01:6B:07:62:0B
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:12:e8:17:be:73:00:7f:2b:89:41:5a:39:71:eb:b9:bf:c8:
         78:73:93:b4:56:70:86:27:c5:04:e9:d3:16:86:2f:22:6a:0d:
         aa:f9:42:36:d3:55:d1:22:81:d1:49:ae:1b:e7:b3:be:79:81:
         cf:da:fd:f1:8d:58:17:c2:c1:f7:89:c3:57:f4:98:92:23:7a:
         ac:f8:31:da:8c:19:ef:f8:93:e1:fd:85:a6:2e:59:f0:20:18:
         21:30:dd:c5:66:a9:b6:e5:7c:f8:ad:b0:0e:ef:94:06:c9:9b:
         24:5c:47:81:6e:0d:f7:37:a1:38:5e:8a:5a:ca:7f:71:fd:21:
         a1:e0:17:2e:1b:a9:78:bd:62:6f:46:d7:11:f4:08:0e:0b:62:
         fd:59:30:44:74:37:c5:43:90:92:4f:30:63:82:cf:8d:63:f0:
         65:79:36:86:ff:26:9f:7b:9a:d3:2f:35:1d:d7:0b:d8:75:1c:
         10:16:81:f3:53:eb:d2:04:74:1d:90:75:c8:f7:30:ca:70:b2:
         bb:4a:c7:d3:40:66:4c:cd:d5:19:d0:1e:fe:51:62:d3:35:7c:
         d2:be:0d:42:d0:d6:53:8f:10:11:b0:ed:4c:46:69:1d:d7:33:
         fe:4d:a5:41:bb:5c:45:9d:e5:05:65:d9:a7:62:e6:83:67:32:
         4c:9f:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org