Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          0stu9xEEqFBTfK8MW0f61EtLAkV+ExKxe+KT3m9/ET8=
Subject key identifier:   6A:A3:20:80:1C:CC:03:65:0A:73:26:B1:8C:45:57:C3:3B:61:F9:D7
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       5B46F3B8AF6D9CC234BEB6F8109BA6110CA6639A
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:06 +0000
ROA not before:           Thu 04 Apr 2024 00:51:06 +0000
ROA not after:            Thu 03 Apr 2025 00:56:06 +0000
asID:                     262866
IP address blocks:        177.12.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:46:f3:b8:af:6d:9c:c2:34:be:b6:f8:10:9b:a6:11:0c:a6:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:06 2024 GMT
            Not After : Apr  3 00:56:06 2025 GMT
        Subject: CN=6AA320801CCC03650A7326B18C4557C33B61F9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:c5:52:1b:90:69:16:4f:80:93:15:a3:07:
                    97:cf:27:32:c3:6e:1c:d5:0a:f8:85:66:e0:b4:5b:
                    70:19:22:fc:7d:bb:a3:4a:85:d6:4c:c9:5d:b3:61:
                    23:1e:6b:6a:08:bf:60:4a:f3:60:f2:a2:8d:26:56:
                    28:0c:4e:7b:82:c4:3f:b3:0e:94:f2:d1:3d:5e:14:
                    1a:2a:be:a1:5e:1f:6a:14:20:66:3a:97:1f:59:99:
                    d1:e1:7d:0e:fc:39:13:c2:8a:bc:ff:c8:97:d2:c0:
                    ba:14:88:ba:cc:6d:d9:62:9a:6a:ed:56:83:34:03:
                    03:0d:e7:d1:e0:02:38:6f:04:83:10:4a:79:cc:32:
                    c6:14:26:09:f2:e4:54:7b:c2:34:4e:93:25:ee:91:
                    43:11:33:e8:90:55:e7:76:99:e4:9b:30:b4:4b:58:
                    ae:1d:b2:d1:7b:b9:a0:55:8d:bc:be:f4:19:b5:d5:
                    52:ff:d6:2e:c7:77:03:6a:a7:21:77:7e:9f:f6:a9:
                    4a:6e:64:73:68:6d:d3:b7:9c:fd:e1:a1:14:0c:46:
                    33:df:92:0d:ba:4c:bc:2d:b3:c3:67:0e:05:34:fa:
                    b2:53:80:72:d3:09:b5:79:f2:05:6e:e5:f1:e8:b6:
                    8e:5a:fb:1c:f1:6c:a3:50:a8:7c:55:14:bf:c1:8e:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:20:80:1C:CC:03:65:0A:73:26:B1:8C:45:57:C3:3B:61:F9:D7
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:10:bf:ab:c0:06:b5:86:da:f4:ab:84:23:72:cd:12:be:
         77:5c:ff:fd:09:9c:ad:12:5c:6f:4b:d2:6a:60:6b:07:35:42:
         58:a5:5e:5a:c7:ce:c6:4f:30:b1:c7:cb:69:79:22:17:0c:ad:
         a5:2a:86:87:4b:cb:3d:8d:54:73:6e:05:de:cc:59:e7:35:73:
         c8:39:f6:31:df:e8:d6:e7:f1:f6:11:f6:33:46:0b:5b:ef:a6:
         8c:50:4f:94:00:18:f4:63:a5:01:e7:3f:b7:bd:13:72:10:a0:
         9f:9f:78:c3:76:15:e2:90:b3:2d:cc:d0:01:f4:24:e6:2d:83:
         35:2e:76:74:8a:9c:5b:ca:39:2e:c0:cc:6c:de:b9:16:0e:db:
         80:a7:2b:42:a0:c3:98:01:af:a5:fc:38:c7:dc:6b:ee:1d:29:
         5e:1b:f9:38:00:49:4a:88:32:5e:4e:8c:82:a6:76:9b:50:b1:
         c1:6a:03:58:c9:01:27:7a:93:21:58:87:30:83:75:eb:85:f3:
         a5:42:20:aa:d8:6d:94:19:8f:62:cb:0e:e1:05:50:c7:e8:51:
         ee:a7:8e:18:39:61:1c:d9:b8:04:2f:9a:7d:18:fa:80:61:94:
         8e:56:cb:72:21:28:a2:e7:4e:de:f1:71:14:27:55:9d:20:20:
         7f:8f:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org