Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa
File:                     3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          uJkw7fDYTnNjE/XjcsqyWs1QBz9ZNREGI9zTX7VEBqo=
Subject key identifier:   53:DA:1A:3B:69:25:B5:47:AA:4B:3E:DF:25:0D:6C:C7:5A:F5:D7:41
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       66896305C31E8C7432CDE3E04D4BC9D1294175AB
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:11 +0000
ROA not before:           Thu 04 Apr 2024 21:53:11 +0000
ROA not after:            Thu 03 Apr 2025 21:58:11 +0000
asID:                     263650
IP address blocks:        177.74.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:63:05:c3:1e:8c:74:32:cd:e3:e0:4d:4b:c9:d1:29:41:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:11 2024 GMT
            Not After : Apr  3 21:58:11 2025 GMT
        Subject: CN=53DA1A3B6925B547AA4B3EDF250D6CC75AF5D741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:85:2d:39:6d:fd:59:a1:7c:d8:0d:b8:5f:
                    56:51:bc:6d:05:c4:68:42:af:be:b5:a3:b1:db:43:
                    a6:b4:f4:2d:95:5d:40:46:d7:5d:c4:50:cf:50:e5:
                    a7:4f:42:83:39:d2:17:61:47:9e:60:a5:ad:d6:6e:
                    26:76:63:62:cd:65:6d:bc:f1:90:94:4f:37:9b:0d:
                    f9:df:07:32:b1:69:cb:33:a4:78:4a:bd:3d:fa:6b:
                    54:33:b0:48:14:6f:4a:90:be:47:15:a5:67:7e:4c:
                    30:d4:54:7e:4c:fd:4f:4a:e8:7a:ab:2a:22:97:82:
                    e9:8b:87:e5:97:f2:81:7b:91:12:40:3a:d9:9e:8f:
                    96:f6:2d:c6:6b:90:03:50:51:e0:2a:7c:e0:f4:6b:
                    24:07:67:29:b3:19:04:a4:95:24:eb:7c:f8:e9:53:
                    1b:9c:94:bd:ad:31:f8:5e:80:a3:d7:2c:3b:27:6c:
                    24:34:ee:d1:73:a0:55:60:da:e7:70:8a:82:29:91:
                    78:6c:e9:3a:7a:b5:ca:15:4a:12:08:60:cb:4f:1e:
                    5e:0d:c4:aa:a3:f7:51:d4:67:46:0e:e6:d9:31:75:
                    60:2a:52:8a:67:e6:8c:08:60:ab:d8:8b:f1:ac:1f:
                    a4:96:17:33:5f:bd:55:dd:b0:87:97:76:92:01:59:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DA:1A:3B:69:25:B5:47:AA:4B:3E:DF:25:0D:6C:C7:5A:F5:D7:41
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:fb:91:99:21:63:8b:af:cf:a6:b8:58:e4:6b:47:a9:3c:
         d6:ef:57:96:8d:b3:88:68:ee:cd:ae:e5:5f:41:63:33:e7:05:
         58:f8:4a:d0:91:ad:85:d5:d5:ad:c5:94:3c:88:cc:f7:14:92:
         9a:96:55:6b:29:16:77:24:c7:e5:31:01:28:f9:7d:59:9b:ca:
         8a:85:2d:b7:6d:4f:95:aa:e2:fc:f0:7d:b7:8a:08:ab:49:17:
         b9:87:bb:df:5c:76:58:96:ab:ac:35:80:25:ac:7e:73:78:fa:
         1f:64:99:b8:df:67:78:85:97:2c:44:99:48:26:d7:ac:94:e7:
         0e:05:6f:01:cd:52:05:19:d2:76:29:39:17:c9:6a:cc:66:01:
         05:33:c2:bd:50:b1:98:a8:70:2b:5c:2c:01:68:33:2c:09:e4:
         81:b1:7f:43:3a:b6:e6:6d:60:cc:9f:28:d7:4f:0d:c1:eb:2f:
         f3:75:b6:ff:64:a4:6e:32:b8:dd:fe:0d:e1:ea:21:64:1e:ea:
         90:0c:c4:58:89:17:22:14:c5:86:65:d8:1c:d2:f9:8e:c6:4b:
         6a:dd:97:a5:8c:ca:a3:37:ec:ac:cc:d4:e0:71:3a:0e:1a:ea:
         84:ec:22:61:78:45:8a:5e:14:20:30:ce:40:67:00:4f:8f:28:
         c2:b4:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org