Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa
File:                     3137372e33382e3131322e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          kAoA9Iwx14qfDZT8eEMBNyc4+2XEKIailsF/H2pgTKw=
Subject key identifier:   B1:22:D7:0F:EA:ED:B1:63:CC:23:48:40:5F:57:0D:DD:E0:49:C0:4C
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       6E627184110F423F3532AEC88EAFA14574C4CB50
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:03 +0000
ROA not before:           Thu 04 Apr 2024 07:03:03 +0000
ROA not after:            Thu 03 Apr 2025 07:08:03 +0000
asID:                     52968
IP address blocks:        177.38.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:71:84:11:0f:42:3f:35:32:ae:c8:8e:af:a1:45:74:c4:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:03 2024 GMT
            Not After : Apr  3 07:08:03 2025 GMT
        Subject: CN=B122D70FEAEDB163CC2348405F570DDDE049C04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:1a:87:3f:d8:57:a9:8d:21:0e:46:4a:fd:
                    67:65:f6:03:c4:6c:b7:4b:da:b4:f8:6d:42:68:e2:
                    9f:e5:ce:4e:05:6b:d5:c8:a7:c2:be:a2:b4:5d:83:
                    a5:ee:0e:79:47:00:56:e4:c5:e0:96:ea:b2:09:dc:
                    b6:e9:b8:d4:2d:71:cc:89:c2:ff:ec:a0:53:b7:b6:
                    77:3e:f7:07:7f:6a:30:0e:54:86:26:e8:95:2a:b6:
                    80:c3:99:bc:ca:ee:8a:b1:63:86:44:86:74:c8:3e:
                    02:bf:45:4e:86:56:6c:dd:69:f1:82:7b:18:c6:a1:
                    52:e6:fb:c6:7e:b1:8a:80:1c:31:f7:67:33:04:50:
                    63:d0:52:8b:0a:ae:c0:c2:55:87:1a:7a:3d:8f:cd:
                    5e:fb:d6:4e:be:c9:c6:8d:d1:a1:f7:53:6f:96:e8:
                    78:d1:f3:1c:a5:7d:c1:4b:88:dd:69:b2:37:93:23:
                    7e:da:df:72:8d:24:7f:53:77:d6:65:5b:05:e8:54:
                    85:86:e4:29:ba:42:c4:3e:a3:06:d4:ac:ab:32:07:
                    70:d1:e1:b5:4e:fe:7b:93:27:f7:45:89:1b:17:f3:
                    37:7e:5e:83:eb:5f:ee:7f:04:3b:0a:41:5f:f5:b3:
                    0c:cf:94:4e:8a:1c:e2:54:f6:11:5d:03:c4:b2:74:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:D7:0F:EA:ED:B1:63:CC:23:48:40:5F:57:0D:DD:E0:49:C0:4C
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:d4:fa:50:e8:aa:4f:eb:cd:b9:97:36:9a:65:bd:ed:08:
         e0:0d:9b:78:2e:51:6d:5c:95:d3:ec:87:20:74:44:89:97:32:
         97:a8:95:f8:db:1e:45:eb:c1:3b:64:c8:cd:98:7d:16:69:7a:
         8f:83:64:8e:34:5b:de:ad:e3:62:2f:70:05:5a:05:1d:5c:85:
         35:f8:5b:ef:7d:ce:af:9e:46:b1:50:e4:4b:3d:86:cc:b5:05:
         1c:e9:6f:34:83:5e:b2:b0:58:e6:ed:59:d9:76:1e:a7:a1:b8:
         5c:9f:c6:13:23:2b:e7:ad:b4:bd:b6:76:f8:a3:df:f1:2a:9d:
         0f:9e:07:83:fb:ab:61:3a:77:db:b3:9e:f1:59:04:c3:90:ba:
         14:c5:70:1a:10:f9:c6:3b:0e:00:79:c1:e2:20:89:9e:ad:29:
         8c:dc:af:2e:6b:6b:3e:8e:8f:2f:6e:86:f9:7e:26:c9:cd:bf:
         b0:5d:43:81:5c:98:f3:58:aa:2a:5c:59:4f:d3:ab:f6:3f:94:
         c2:fa:a5:4c:ba:a5:0d:41:41:fd:63:42:89:0f:6b:26:d6:b6:
         60:88:95:51:b9:03:2c:24:a1:d8:a3:58:1b:40:c6:84:d6:18:
         66:75:71:21:76:cb:f9:4e:0a:27:f7:e4:08:b5:91:d6:b3:01:
         28:d9:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:50 2024 by rpki-client on console-ams.rpki-client.org