Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
File:                     3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          d3bn0i6ILYyMjCOWgyDYdh0kw3odLtnFpmmgVQ3HUpQ=
Subject key identifier:   60:25:1C:9C:DE:52:89:51:3A:7B:F9:69:A1:C7:B1:DE:61:81:C5:21
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       4596A752AAF805FF248309207C712F67AB548764
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
Signing time:             Wed 03 Apr 2024 22:49:43 +0000
ROA not before:           Wed 03 Apr 2024 22:44:43 +0000
ROA not after:            Wed 02 Apr 2025 22:49:43 +0000
asID:                     52756
IP address blocks:        177.11.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl
                          rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:96:a7:52:aa:f8:05:ff:24:83:09:20:7c:71:2f:67:ab:54:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Apr  3 22:44:43 2024 GMT
            Not After : Apr  2 22:49:43 2025 GMT
        Subject: CN=60251C9CDE5289513A7BF969A1C7B1DE6181C521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:30:b0:6e:20:b4:06:f8:91:f1:3e:11:bf:
                    e5:fc:d7:ef:19:94:3d:d2:44:ac:b9:cd:b3:31:a6:
                    8b:36:49:90:5d:d8:f4:f6:21:a5:8d:3c:05:09:2f:
                    6b:00:16:0e:1a:80:b5:8a:dc:59:90:90:ec:33:8c:
                    3d:2f:97:3e:0f:e3:23:78:f7:79:94:e9:b6:75:f5:
                    fd:a2:57:41:3c:f7:8e:fb:ab:2a:5e:9f:0e:76:04:
                    6b:6a:1c:28:61:da:61:78:a1:af:39:8e:75:0b:eb:
                    5b:57:d2:b2:bc:9d:9e:55:54:0f:00:da:39:42:23:
                    36:4e:32:c3:3e:df:3d:e1:b1:1f:e8:66:90:8a:69:
                    46:4a:b5:d9:38:01:b4:c5:1b:a4:c5:97:f8:58:37:
                    b9:d4:9b:86:37:e7:af:fb:7d:e1:5a:fb:23:51:bc:
                    d8:90:63:e3:2d:ca:25:fe:35:be:bd:43:29:55:c0:
                    4c:f8:62:91:1e:4d:f9:a2:fc:e1:36:3d:f8:08:7a:
                    9e:e1:5b:70:96:dc:a4:be:32:43:61:de:1a:d4:b5:
                    56:c3:65:da:90:2e:07:bd:88:02:31:f8:de:44:a2:
                    0d:c8:76:41:96:d4:76:2c:26:37:ca:4b:13:5b:bb:
                    05:f6:c9:b6:6d:49:1b:13:b6:cc:d8:99:a4:9f:a2:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:1C:9C:DE:52:89:51:3A:7B:F9:69:A1:C7:B1:DE:61:81:C5:21
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:31:89:0a:2a:fa:83:6e:0b:39:b8:80:6c:28:44:db:17:
         54:00:c5:45:c7:1e:aa:ae:8d:d7:0a:66:ea:19:e6:fc:cd:e3:
         51:fc:6d:2f:98:2c:20:9c:71:7b:f7:23:5b:d6:6e:1c:50:5a:
         16:a3:c2:3c:b7:ab:8e:25:4c:05:4f:5c:08:98:b5:5d:7b:a9:
         1e:09:85:48:9b:8c:a3:4b:d2:01:cb:98:dc:7e:95:d3:22:e7:
         15:2c:1a:52:02:4e:9e:e7:12:42:17:aa:a0:0b:6a:54:81:55:
         49:6f:91:ba:5e:da:ba:cf:21:df:84:83:4e:ce:93:9c:c4:09:
         f8:40:93:ba:6f:49:9b:e4:a6:fc:b4:16:9d:49:ce:e7:c8:ae:
         e0:df:b6:e1:01:d2:86:c3:4c:06:63:f8:e5:7a:7f:22:58:b8:
         7f:72:18:30:aa:6a:c4:88:9c:b6:03:14:21:d9:a8:a6:e2:09:
         38:10:f0:be:41:0e:e7:86:23:21:52:05:ae:56:7c:fe:67:bd:
         d9:78:e8:b9:be:d8:a2:93:0c:31:ff:da:72:ef:47:31:84:10:
         bb:e7:78:a1:67:84:7e:5f:f5:5c:9b:82:f4:ad:15:30:68:58:
         8e:be:07:52:66:51:38:a7:4c:e3:76:e4:7b:dd:8c:bd:bb:98:
         72:c9:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org