Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          BBvDWQ87TKlFbI+bzJjaUbuPptf3M5hoz6D/QPidBvY=
Subject key identifier:   EA:E6:39:73:C1:31:E6:4C:2D:20:86:9E:D1:EC:B4:3E:AC:22:16:8E
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       556D241D347739A0C6A5CEE36F860D76A1EB3907
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 13 Jul 2024 00:39:43 +0000
ROA not before:           Sat 13 Jul 2024 00:34:43 +0000
ROA not after:            Sat 12 Jul 2025 00:39:43 +0000
asID:                     262507
IP address blocks:        177.55.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 22:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6d:24:1d:34:77:39:a0:c6:a5:ce:e3:6f:86:0d:76:a1:eb:39:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jul 13 00:34:43 2024 GMT
            Not After : Jul 12 00:39:43 2025 GMT
        Subject: CN=EAE63973C131E64C2D20869ED1ECB43EAC22168E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:f1:75:2b:53:f6:30:bc:87:f9:09:16:5c:
                    a7:47:d1:bd:92:01:29:be:ea:bb:bd:60:0c:f5:a2:
                    6d:4d:d5:04:ca:d3:a5:1d:f9:55:8d:2c:46:5e:a2:
                    0e:57:8e:f7:18:55:08:5f:4c:db:17:b8:c0:7a:e3:
                    ef:6e:1b:17:dd:00:46:de:73:1e:4e:02:cd:c2:5d:
                    62:be:e8:62:69:16:48:0c:7f:34:03:96:d2:7e:ad:
                    1f:53:f3:13:95:03:76:7e:53:f8:1c:c4:40:16:54:
                    7a:25:b4:ba:2d:4f:e8:17:fe:74:d8:14:92:9f:ef:
                    15:1f:9c:d1:d8:51:d5:53:1b:50:58:f5:c9:0f:26:
                    24:b7:8f:7e:ae:63:33:03:fa:a2:bb:f4:35:ac:ef:
                    82:63:76:55:32:f7:3d:fc:09:d4:76:03:37:c8:88:
                    55:30:f3:4d:59:49:fd:bc:e8:94:74:86:13:c9:6a:
                    61:7d:ba:c5:dc:8e:9d:6f:c8:ce:5a:d0:94:4b:26:
                    eb:c6:2e:8d:23:46:bd:bf:16:58:4f:02:98:0b:1b:
                    17:31:90:86:55:dc:48:b4:d7:96:50:bf:cf:08:0a:
                    5e:42:af:7b:c1:5a:f6:0f:8d:8b:05:1e:b4:f9:34:
                    84:be:49:c3:9c:ad:0a:20:d0:63:bc:45:74:dd:a1:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:39:73:C1:31:E6:4C:2D:20:86:9E:D1:EC:B4:3E:AC:22:16:8E
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:89:4a:8b:e7:96:f3:aa:43:ec:3c:2f:55:cd:e5:80:0d:fd:
         2a:4a:00:04:53:69:3a:3d:12:bf:58:a5:54:ff:4d:80:07:2e:
         2a:66:86:8f:9a:38:d5:c6:2e:2b:80:40:81:27:4c:90:0e:69:
         92:03:ca:50:ee:40:fa:8d:97:c6:0e:e3:03:b3:17:49:59:e3:
         c9:49:03:ed:ee:92:d0:e6:0e:9f:d4:2b:48:49:e0:72:48:f8:
         94:1b:51:d4:a4:a3:54:fb:9d:88:cc:8b:be:37:47:3c:fd:18:
         29:c1:70:a9:9d:7d:b6:99:c4:c9:71:40:4d:84:0b:9e:db:32:
         e5:83:e6:3f:ef:80:48:73:49:04:00:65:fa:7d:df:b1:ca:1c:
         38:c3:c8:6c:be:56:af:1a:9a:19:07:6f:79:e9:5e:eb:c2:4d:
         10:fb:cb:66:f9:50:0e:0c:ea:e4:6b:89:00:0e:c7:20:f2:92:
         18:04:62:35:08:1c:1a:eb:cc:f3:e1:a5:de:74:b7:d1:36:73:
         27:8f:98:dd:b8:a6:2c:ac:7e:06:3f:4b:43:2e:e3:51:47:93:
         c8:2c:23:d9:76:8a:63:41:eb:eb:05:26:47:35:5f:40:91:49:
         2b:8e:d7:14:43:6d:c8:e6:78:56:b4:d0:c0:8a:9b:bd:ad:ad:
         93:0a:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:24 2024 by rpki-client on console-fra.rpki-client.org