Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa
File:                     3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (raw, json)
Hash identifier:          1YSF2laSzdC26DXgX2mu0ezI2QtSogpOQ/ZhO6FvPGY=
Subject key identifier:   C8:3C:DF:3D:2A:93:41:79:64:6D:AA:20:84:95:A3:D5:41:83:9A:BA
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       6B639C56CA1A02C8BB1D7AF9BADCBF6B2A2F1CA3
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa
Signing time:             Thu 04 Apr 2024 10:53:08 +0000
ROA not before:           Thu 04 Apr 2024 10:48:08 +0000
ROA not after:            Thu 03 Apr 2025 10:53:08 +0000
asID:                     52771
IP address blocks:        177.155.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:63:9c:56:ca:1a:02:c8:bb:1d:7a:f9:ba:dc:bf:6b:2a:2f:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Apr  4 10:48:08 2024 GMT
            Not After : Apr  3 10:53:08 2025 GMT
        Subject: CN=C83CDF3D2A934179646DAA208495A3D541839ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:b8:13:7d:bc:05:71:31:c1:cd:c1:59:d4:
                    a6:13:2a:80:a3:4e:d1:01:ec:86:12:dd:f7:39:9b:
                    55:b6:e2:dc:b0:5f:39:f6:94:8d:9a:f7:a1:e4:8b:
                    68:c1:ce:9b:37:54:44:a0:a9:d4:c1:6b:df:cf:4f:
                    e4:51:73:95:21:9c:87:44:a3:0e:47:ac:80:3a:1a:
                    42:0a:ae:b1:1e:bf:e2:47:36:b6:18:91:e6:36:51:
                    5b:58:fb:bb:90:58:21:52:d0:83:83:ab:03:fd:fe:
                    81:2f:6f:dc:63:33:7f:b5:7d:83:ff:01:21:6e:88:
                    8d:43:8d:cf:62:9b:f7:73:d4:12:40:14:4a:5b:02:
                    9a:d5:78:fa:a0:81:79:f9:40:72:ba:30:55:80:82:
                    17:42:36:97:16:5f:08:01:84:76:81:bf:db:c6:43:
                    c5:54:39:d2:04:c8:ff:14:d5:48:76:c9:ef:fb:26:
                    8f:47:08:ec:84:4b:50:ff:63:cb:c8:c3:b6:13:43:
                    65:3f:90:3f:32:d7:8e:32:4f:ee:13:d7:ad:7a:4f:
                    a9:01:04:9c:b5:e2:a5:bb:64:6c:a4:3b:ae:13:ac:
                    a0:ab:89:5e:55:df:59:5d:c2:9d:71:0d:2f:12:62:
                    3c:69:0a:34:5e:5c:89:70:9e:29:51:6d:a5:a0:45:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:DF:3D:2A:93:41:79:64:6D:AA:20:84:95:A3:D5:41:83:9A:BA
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:c1:3c:7d:c7:2b:ec:6a:9d:ec:72:db:6c:e4:27:29:d1:
         c3:bf:18:e6:94:da:06:27:07:86:e1:00:e0:0a:c8:b6:64:0e:
         2f:41:19:c6:11:7e:73:ff:90:9b:6a:b9:11:08:74:09:02:6d:
         af:0a:28:50:8a:a3:f9:c9:69:6f:31:db:77:22:0a:69:2c:af:
         e4:c8:5e:d0:e4:e9:4b:30:28:8d:c1:37:70:b3:08:bf:78:6a:
         a9:09:d3:fb:00:97:b9:14:2a:68:c6:f3:63:c5:af:93:a3:93:
         62:15:c1:de:47:d7:b9:60:01:3e:62:e7:6f:2d:1a:72:de:90:
         34:c8:dc:99:fa:d7:10:2f:e2:02:36:70:83:bb:4c:99:d9:7a:
         92:00:f6:a7:81:25:f6:67:7e:93:44:a9:aa:12:44:04:a3:ec:
         98:39:38:8f:a1:57:73:0d:30:88:7f:85:cc:b8:4e:a3:5b:a0:
         5a:ea:a1:cb:88:3e:05:cc:51:60:2f:6b:1c:bf:b0:78:c8:51:
         d5:f9:a6:5d:2a:37:a4:81:38:51:e9:fd:21:72:c9:e3:45:ac:
         df:16:41:dd:1b:dd:43:31:66:cc:96:54:50:f1:bc:9a:4b:82:
         64:3f:36:5d:0b:bc:76:0c:06:db:ba:ee:86:69:22:95:a5:45:
         c7:7e:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:58 2024 by rpki-client on console-fra.rpki-client.org