Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa
File:                     3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (raw, json)
Hash identifier:          4BAtDRmrCV9FnT6TzniEfJjqyxJO5fzuH+smDPZyeM4=
Subject key identifier:   FB:FB:32:7E:91:91:BA:67:CA:2F:11:16:F0:00:2E:40:D9:0E:32:B9
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       4B4BCC6C861962CBE7F02EE441E61F315A591E2E
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa
Signing time:             Thu 04 Apr 2024 01:00:39 +0000
ROA not before:           Thu 04 Apr 2024 00:55:39 +0000
ROA not after:            Thu 03 Apr 2025 01:00:39 +0000
asID:                     262531
IP address blocks:        177.55.223.1/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4b:cc:6c:86:19:62:cb:e7:f0:2e:e4:41:e6:1f:31:5a:59:1e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Apr  4 00:55:39 2024 GMT
            Not After : Apr  3 01:00:39 2025 GMT
        Subject: CN=FBFB327E9191BA67CA2F1116F0002E40D90E32B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:0e:81:87:3b:11:31:8e:44:c2:03:4a:77:
                    cf:b6:cd:bc:db:b3:f9:87:53:46:97:69:14:fc:11:
                    bd:90:d4:ff:36:6d:fc:fe:b6:68:71:b9:f1:8a:e7:
                    11:38:b4:c1:59:16:cd:13:c4:af:2f:c2:51:1d:5e:
                    67:75:83:07:0f:b6:a9:3b:e5:fb:8d:14:67:da:27:
                    db:c9:ae:d8:08:90:63:16:12:dc:3a:93:ac:8a:a0:
                    7e:63:9b:47:18:49:4e:9a:64:bd:41:d3:69:a4:fd:
                    71:e2:f7:34:6a:66:a5:2f:08:e3:9e:e1:0c:65:58:
                    01:f1:6a:03:1a:f8:a7:42:a2:28:37:03:c5:6c:d7:
                    ee:8d:39:e5:f9:28:ed:51:97:da:b7:6e:d7:a4:3c:
                    27:58:42:da:9c:41:39:7c:16:a1:7f:9f:06:c7:35:
                    53:44:d9:32:6f:58:ab:5c:c5:40:10:d8:77:b1:54:
                    98:f0:9b:b1:73:0a:a0:c4:df:b6:f6:04:e1:4f:0e:
                    d5:75:e8:71:78:f3:72:84:61:88:2f:cc:6c:8e:3f:
                    5b:13:99:d6:45:c5:21:96:00:be:1f:a6:e2:21:f4:
                    77:0e:53:d4:b7:ff:8e:84:07:41:c4:c1:6e:80:6d:
                    9a:60:66:1d:47:65:d5:dc:9a:39:0e:fa:39:ce:4f:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:32:7E:91:91:BA:67:CA:2F:11:16:F0:00:2E:40:D9:0E:32:B9
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.223.1/32

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:12:cd:7b:c4:99:d1:cd:cd:2d:c6:9a:4c:1d:f5:5a:2e:
         40:22:1c:be:a2:da:21:20:ed:2d:aa:c8:3c:be:4d:8f:0f:c3:
         62:ac:a5:04:2b:b7:c4:89:0f:93:59:2d:72:60:66:ae:f3:08:
         f4:09:6e:70:25:14:22:98:21:39:db:0b:63:c8:da:4e:37:1d:
         42:ed:27:fa:13:86:9e:a5:9a:21:84:7c:51:85:d9:43:b6:d6:
         c2:ae:9f:9b:f5:e5:db:02:d6:24:e5:39:a7:03:6c:5b:80:23:
         ee:19:d4:7b:93:42:c7:1a:5a:ba:ed:ae:c4:e9:bb:2e:eb:54:
         91:e8:77:3b:ed:9b:eb:50:26:1b:74:9e:5e:f5:8d:50:e3:b5:
         10:99:86:eb:0b:ff:4f:e5:34:78:2e:3c:e0:8f:fb:58:a4:ad:
         74:74:98:b1:32:90:39:fc:5f:1a:4c:87:87:fd:09:8d:a3:00:
         a3:d2:24:1d:00:2b:9d:18:1f:2a:d2:64:8b:80:dc:6f:40:29:
         09:1e:e8:10:d8:b0:15:52:59:ad:03:ec:34:5f:5b:cd:15:45:
         17:51:a0:50:09:2f:26:83:36:82:4e:da:d0:85:be:37:ec:6d:
         6b:2a:eb:91:3d:4c:9a:61:dc:22:6b:4b:c2:46:94:c6:8e:fd:
         fc:2c:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:29 2024 by rpki-client on console-ams.rpki-client.org