Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa (raw, json)
Hash identifier:          I9ZeeaTwPMPo4EwxFreAM3w4y2z4iCYn1zPfQ5hqd/Y=
Subject key identifier:   EB:CF:28:55:ED:EC:A6:24:90:32:B1:C8:62:C7:4C:FA:61:17:83:C4
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       3ED083F2EDDBF1CED58A4BC19F0C73ABA69FA4CB
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:08 +0000
ROA not before:           Thu 04 Apr 2024 00:51:08 +0000
ROA not after:            Thu 03 Apr 2025 00:56:08 +0000
asID:                     262866
IP address blocks:        177.12.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:83:f2:ed:db:f1:ce:d5:8a:4b:c1:9f:0c:73:ab:a6:9f:a4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:08 2024 GMT
            Not After : Apr  3 00:56:08 2025 GMT
        Subject: CN=EBCF2855EDECA6249032B1C862C74CFA611783C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:ee:4e:05:b0:bd:f7:14:93:47:92:d5:f9:
                    8d:41:1b:ca:d3:59:2d:99:6e:c6:97:3d:16:bb:e7:
                    08:44:75:22:bb:5c:09:a9:f7:ee:77:47:01:3b:5d:
                    6a:7e:6e:c3:29:38:5c:eb:5c:a3:cf:fa:ad:81:8e:
                    73:57:b6:c5:c9:3a:ce:f2:a0:92:45:59:3d:a8:be:
                    10:b4:cd:73:6f:26:66:97:06:d3:ef:d6:92:d7:fd:
                    5b:0d:81:3a:5b:20:db:ab:68:e1:af:7a:98:16:e5:
                    8e:00:76:24:9c:80:92:82:5e:2c:49:8a:9a:c5:85:
                    aa:ca:7f:a5:02:75:d1:06:64:16:56:64:72:89:75:
                    e3:0c:7c:95:ad:b2:b8:16:25:f6:40:27:a7:31:fc:
                    84:ec:1f:06:4b:e1:27:5a:4b:74:7d:75:63:d9:24:
                    98:16:53:69:8b:4f:1d:19:ab:f1:18:80:72:3b:9f:
                    a7:87:53:8d:97:0f:56:c4:49:6a:50:91:6b:21:41:
                    69:f3:34:84:b5:7f:2f:d6:80:16:35:64:ab:fb:2b:
                    7d:fe:f0:fd:de:28:04:8c:a7:6a:2c:24:18:08:02:
                    ed:02:ba:ed:aa:f5:53:d0:ac:08:08:03:f4:c2:83:
                    6d:ff:3f:9e:73:8b:0b:c2:6b:22:8d:fc:cd:90:62:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:28:55:ED:EC:A6:24:90:32:B1:C8:62:C7:4C:FA:61:17:83:C4
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:e4:8c:d6:3b:76:54:49:5e:3c:09:3c:b6:45:0d:5b:cb:
         88:e2:74:ca:2e:83:be:99:81:67:d1:27:b2:0c:44:db:f4:ee:
         1a:45:97:10:a3:10:70:1d:43:36:b9:d5:fd:9f:82:dd:f4:dc:
         5c:84:9f:43:98:cb:ef:d4:8f:d3:e9:c0:2d:08:aa:6a:8e:3f:
         02:c2:a1:f1:53:e7:ed:91:81:5e:9b:d6:b8:20:a6:1c:ff:e7:
         52:7e:5d:44:fb:5c:7c:45:f4:86:b1:78:ad:a6:ba:f4:87:c2:
         14:77:bd:e4:f2:4f:6f:63:94:9d:d0:b5:21:b3:5f:d1:51:a8:
         de:e9:3c:24:7d:08:7e:6d:56:b5:d5:eb:83:63:04:74:c3:03:
         be:7f:ad:9f:b1:c6:5b:48:8c:4a:49:b3:19:4f:5b:98:09:57:
         17:60:e9:bf:b6:53:ef:42:92:09:41:22:54:86:08:e8:86:59:
         92:96:1f:10:2d:97:a8:8a:bd:be:8a:0a:0d:c4:d4:64:c7:23:
         4c:d2:ff:36:12:9d:32:58:ee:00:57:8c:c6:b7:ff:c2:18:a5:
         bc:81:45:13:16:10:37:80:1a:03:29:4c:6c:c9:d2:18:1f:06:
         d1:6f:5b:da:fa:83:96:ef:11:ed:a2:80:64:1e:7a:f1:27:4d:
         03:da:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org