Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          SXxwixbPZTIzXRk2DjD5NuVnTppj4rs6YWwrIzqMq3k=
Subject key identifier:   1B:2E:BB:4E:55:9D:BD:55:31:04:AA:DC:EB:D2:50:A6:87:F2:46:4C
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       4EDCDEC24D02E17380187E623C78BA893DC22EBC
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:05 +0000
ROA not before:           Thu 04 Apr 2024 00:51:05 +0000
ROA not after:            Thu 03 Apr 2025 00:56:05 +0000
asID:                     262866
IP address blocks:        177.12.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:de:c2:4d:02:e1:73:80:18:7e:62:3c:78:ba:89:3d:c2:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:05 2024 GMT
            Not After : Apr  3 00:56:05 2025 GMT
        Subject: CN=1B2EBB4E559DBD553104AADCEBD250A687F2464C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:1f:f3:57:82:39:da:86:8a:05:b4:98:ac:
                    74:0f:ac:33:a5:8a:b7:5f:9d:60:4d:1b:41:90:0a:
                    fa:ae:54:2d:fd:ac:a2:25:09:c7:16:b6:ad:46:02:
                    7e:43:12:05:1e:ca:04:94:f5:cb:d1:17:80:8b:87:
                    78:b0:1f:21:e2:98:03:ce:7f:22:1c:42:9a:c6:87:
                    b6:fb:30:35:73:a7:d1:34:4a:bf:98:d0:0e:61:01:
                    a2:e6:ed:60:93:a6:db:ee:1d:bf:60:f7:f7:a0:7b:
                    6d:4a:26:a1:74:55:b2:78:50:93:e6:70:dd:db:b2:
                    e9:19:84:74:4d:c4:86:3c:47:62:b2:35:cb:63:fb:
                    45:22:32:64:8a:45:9e:6f:19:49:c0:4b:82:3e:eb:
                    64:ef:0d:59:17:11:c4:3a:b3:a9:77:c8:4e:c8:64:
                    99:04:88:79:7c:37:f8:4f:27:15:3d:37:64:50:83:
                    5b:1b:bc:fc:55:36:4c:32:77:4c:37:14:ce:cb:cb:
                    cf:44:da:16:df:77:af:6c:8f:e0:a3:2e:9e:f1:8f:
                    95:b5:51:41:4a:ed:d8:39:49:78:a4:2a:aa:c7:30:
                    4d:04:05:9b:1c:3d:7c:18:5e:3b:83:59:6c:f8:77:
                    12:72:a6:c3:cc:1e:64:cc:b6:69:ab:15:a1:92:13:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:BB:4E:55:9D:BD:55:31:04:AA:DC:EB:D2:50:A6:87:F2:46:4C
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234352e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:0c:f2:71:f5:43:0d:04:ce:c9:00:7b:bb:22:4d:c6:0f:
         96:de:b8:48:f1:99:16:33:da:3b:b4:a1:0a:36:7e:e3:eb:4f:
         a1:30:52:e1:00:08:fc:5a:75:cc:21:1b:07:60:2f:44:4f:06:
         3e:82:61:cb:ce:0b:1e:3c:4a:25:e6:eb:bc:99:45:4b:6c:60:
         67:26:95:8f:cd:9d:a4:b4:2d:92:01:92:5b:5e:90:16:e0:5e:
         63:b8:15:76:c4:fa:7e:ac:ef:5d:2d:b1:c9:7b:47:42:66:8f:
         a4:6c:67:ef:72:26:bb:73:2d:6e:01:bf:b1:3d:d2:be:89:a7:
         8b:a9:70:2c:62:5e:17:87:40:a5:03:4c:df:cc:f3:ed:83:46:
         70:59:08:83:53:2c:ec:96:5c:ad:13:48:70:7a:59:51:31:90:
         3f:6a:20:15:96:58:4a:74:86:ec:fb:ac:f6:ce:00:e6:39:72:
         f5:a1:4b:7b:b0:2c:78:de:6d:64:aa:b7:f7:d9:05:d7:6f:fa:
         fc:8e:90:a6:7d:1f:35:38:60:35:b9:87:54:3e:5f:65:1b:7b:
         08:18:02:b5:68:46:6b:21:75:81:63:8e:2b:05:94:05:b1:18:
         7a:ac:55:c4:ae:26:71:ba:00:45:cb:51:a5:c5:ba:23:42:1d:
         5d:2c:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org