Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          9ZaTacJFF/agHIkYD/enm1EpLjhFXAFoKQsp0epqTEE=
Subject key identifier:   96:10:9F:F2:10:B4:52:67:C4:30:DF:E1:B4:D7:BB:3C:85:22:5D:E7
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       233058566FD21C8B534066FB9A1DE2E2FD143142
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:06 +0000
ROA not before:           Thu 04 Apr 2024 06:24:06 +0000
ROA not after:            Thu 03 Apr 2025 06:29:06 +0000
asID:                     262452
IP address blocks:        177.52.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl
                          rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 05:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:30:58:56:6f:d2:1c:8b:53:40:66:fb:9a:1d:e2:e2:fd:14:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:06 2024 GMT
            Not After : Apr  3 06:29:06 2025 GMT
        Subject: CN=96109FF210B45267C430DFE1B4D7BB3C85225DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:a2:94:36:0a:b9:4b:1d:3b:95:ae:b7:15:
                    94:7a:d5:40:c9:fc:d3:a0:67:ba:5c:35:9c:06:62:
                    88:b9:64:3d:e2:7e:e8:61:56:cb:7e:6e:a8:3b:30:
                    79:ef:10:54:d2:d3:3e:07:bb:c0:0b:c1:a0:a3:ad:
                    46:e3:79:96:53:35:e6:cf:b3:14:69:5b:11:ff:1d:
                    cd:a2:ed:dc:8f:f1:9b:b2:2a:33:2c:f2:ed:00:f7:
                    a1:1c:ac:10:d0:15:51:fc:c6:e1:b2:43:ef:05:26:
                    13:96:c2:3c:69:5d:7e:6d:e2:d2:5f:a5:92:fd:c0:
                    d5:1f:30:77:68:53:5b:54:fb:49:9b:e6:c2:30:c1:
                    2b:38:1a:47:d9:c2:2a:d8:4d:ef:e4:dc:15:81:eb:
                    12:e9:74:19:f0:78:33:a1:35:30:cb:fc:f8:0b:9a:
                    b5:53:fe:4e:55:95:1c:12:93:7b:27:48:03:09:0b:
                    7a:55:65:16:69:ba:a4:6d:95:57:5c:03:a0:c1:56:
                    69:49:af:be:b2:fa:bd:5c:48:fc:53:e4:4d:2c:c8:
                    2a:f7:2a:b1:45:91:33:93:57:84:56:2f:b9:b6:08:
                    e7:de:5d:9d:de:50:b5:95:6c:5d:d3:a5:35:8f:e8:
                    0e:a2:9b:7a:9d:7b:bc:2a:50:ac:f1:32:d9:90:1c:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:9F:F2:10:B4:52:67:C4:30:DF:E1:B4:D7:BB:3C:85:22:5D:E7
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:85:4b:16:65:a0:c6:67:84:c1:71:8b:7f:72:32:3a:5c:
         e7:b5:22:97:a8:6e:bb:87:d3:7d:e9:63:0a:51:0a:a8:fc:7c:
         f3:1f:47:e4:93:04:f3:c5:a4:69:a3:e1:e3:57:a9:ea:5b:da:
         48:e6:4b:84:a2:a0:cf:31:9e:de:01:70:dd:c1:15:b1:52:21:
         e4:02:72:f7:23:b8:4d:e9:ed:6c:bf:86:af:ce:54:71:74:5d:
         0c:69:1d:bb:0e:b6:32:c4:22:0e:0e:89:df:d2:e4:e5:3a:c6:
         72:e2:4b:09:55:fd:86:48:0d:a0:d2:fe:6b:29:7e:ed:bb:c6:
         43:ea:df:28:d9:90:c6:9d:43:f1:6c:5c:32:38:c8:bc:63:b5:
         69:24:e7:06:41:75:49:e8:10:ef:b8:9b:89:1e:4f:ef:78:28:
         c3:ac:a3:9c:40:8b:bc:12:f2:d7:bb:50:04:38:bc:54:d4:af:
         f2:81:a7:0e:dc:de:95:5d:37:4e:93:df:be:a0:54:3f:b2:b4:
         80:e2:c1:5d:c7:e4:23:44:e2:8a:d0:5a:e6:c1:66:d6:8a:f7:
         b5:b3:09:7f:31:c6:02:ae:1f:8f:13:54:9e:f8:4b:cd:2d:ac:
         ba:7f:bd:29:b8:f5:bf:be:9d:25:c3:3f:7d:30:c2:00:bd:03:
         10:e6:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:58 2024 by rpki-client on console-ams.rpki-client.org