Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3136302e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          788eSm7FqqcGVmEXBnpta/iaA/xuXwugGX6YnantNns=
Subject key identifier:   47:DD:6D:15:5F:F0:A5:D8:1A:4E:50:91:B1:5E:8E:9C:E2:8E:1D:97
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       64D10F0FC426A7F355BE4786817BA37D29D560
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 13 Jul 2024 00:39:11 +0000
ROA not before:           Sat 13 Jul 2024 00:34:11 +0000
ROA not after:            Sat 12 Jul 2025 00:39:11 +0000
asID:                     262507
IP address blocks:        177.55.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 22:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d1:0f:0f:c4:26:a7:f3:55:be:47:86:81:7b:a3:7d:29:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jul 13 00:34:11 2024 GMT
            Not After : Jul 12 00:39:11 2025 GMT
        Subject: CN=47DD6D155FF0A5D81A4E5091B15E8E9CE28E1D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:57:24:46:34:90:49:13:64:67:4c:e5:20:
                    45:f7:ef:63:1b:d6:aa:34:dd:fd:5b:57:ea:2c:02:
                    97:43:0f:8b:0a:97:fb:64:2a:d0:e9:5e:2f:8a:de:
                    43:36:db:1b:39:6b:bb:33:09:2c:8f:78:28:f5:f6:
                    05:74:4a:38:df:51:e5:bf:40:65:7b:6a:2c:f4:3e:
                    38:0c:7d:11:1b:00:76:d9:0f:06:15:6c:52:a0:63:
                    89:50:d4:58:10:87:2d:cc:e9:aa:95:17:43:3f:4f:
                    4a:49:b0:65:a4:df:b8:ea:c2:74:61:51:fb:bf:88:
                    23:ad:bf:f1:fb:9e:8a:cb:9d:83:e1:94:e8:64:e2:
                    13:8a:e5:e4:ba:fd:14:b1:45:d3:6b:72:30:cf:ba:
                    29:f9:59:01:47:70:52:cf:72:69:d2:20:44:aa:38:
                    e0:4d:97:6e:c0:68:3f:95:e5:3e:e6:e1:5f:63:20:
                    22:81:ce:14:58:71:0b:7e:b2:44:14:02:28:44:c1:
                    ee:08:bc:84:65:9c:cd:09:23:72:cd:d1:c8:6d:2f:
                    0b:36:28:3c:76:fd:45:f2:9b:db:b8:c0:74:9e:47:
                    ec:35:54:bb:82:cf:f0:64:3d:39:87:e9:27:f9:b1:
                    cd:aa:3a:f5:9c:ea:d4:17:bf:95:fe:6d:b8:9c:07:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:6D:15:5F:F0:A5:D8:1A:4E:50:91:B1:5E:8E:9C:E2:8E:1D:97
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136302e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:fc:b2:1c:b2:05:94:ff:f8:19:2e:1d:bb:ea:3e:83:95:f8:
         19:a7:5e:b0:0a:8b:e6:89:0c:8e:6a:19:95:41:f7:04:0f:2a:
         3b:17:70:4c:85:81:31:4f:37:f5:50:03:20:72:d1:07:f1:d6:
         d0:9d:92:0c:9c:84:b1:ad:88:94:ee:08:fe:7a:ab:57:f5:71:
         aa:84:0d:f4:0c:34:d3:a5:ca:bf:2c:1f:c1:0a:51:1c:5a:c9:
         d3:c5:b9:1c:4a:a2:43:1f:b7:d9:dd:5f:39:99:cc:ba:5f:cc:
         53:e5:c3:f5:b1:52:17:0e:eb:c8:64:54:31:88:22:34:31:2c:
         d5:cc:11:01:18:5e:ab:49:21:dc:e9:e8:da:05:86:f9:4c:33:
         f1:ac:c6:3d:f6:b9:59:a1:fb:8a:8b:6e:6f:89:9b:6e:f4:55:
         c5:d4:0a:cc:3d:37:79:24:b2:a7:13:f9:b5:b0:8b:dc:3f:b7:
         96:00:64:a0:b2:75:a5:9e:68:78:1b:46:5c:13:57:ef:be:68:
         4c:28:67:d0:4d:8c:05:cf:e0:56:23:b8:08:86:60:6f:e7:11:
         e8:4c:91:de:0b:1f:31:de:1c:e9:03:da:2a:da:de:cd:50:11:
         ed:da:1e:22:5b:ea:2b:2b:f2:ab:43:9c:71:af:07:28:44:56:
         d4:91:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:24 2024 by rpki-client on console-fra.rpki-client.org