Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          qjTApTZOZ4acYuryp6XgsPpMRDX5Yp4eBvkP4gYYhF4=
Subject key identifier:   6B:C9:DD:56:EB:44:F4:BF:32:80:6F:60:F5:22:47:D0:22:D2:E0:02
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       5D7F03292647A22DE89DD2271F2D56101C8E06B5
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:21 +0000
ROA not before:           Wed 15 May 2024 13:21:21 +0000
ROA not after:            Wed 14 May 2025 13:26:21 +0000
asID:                     262424
IP address blocks:        177.44.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7f:03:29:26:47:a2:2d:e8:9d:d2:27:1f:2d:56:10:1c:8e:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:21 2024 GMT
            Not After : May 14 13:26:21 2025 GMT
        Subject: CN=6BC9DD56EB44F4BF32806F60F52247D022D2E002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:56:8d:52:f4:5a:f3:b2:63:c3:5a:92:0d:
                    5d:0b:9a:9d:e5:2f:09:42:9d:31:7d:77:30:49:82:
                    8a:38:77:d9:c2:14:29:09:25:3d:c7:45:31:4b:c5:
                    c1:eb:b9:fc:8c:ba:e7:3d:83:fa:12:94:05:b0:2b:
                    89:9c:62:7a:61:91:21:23:87:07:93:7f:b2:a0:95:
                    00:c3:4b:7e:db:a7:fb:95:38:a1:2c:2f:4c:10:40:
                    fb:71:79:46:ba:2a:01:b6:bc:79:7b:f7:d2:31:3b:
                    08:c5:8b:90:dc:d6:3c:88:34:73:44:e7:78:30:11:
                    13:b2:f3:35:8b:e7:7d:5c:2a:61:a3:38:35:07:bc:
                    89:3c:0c:95:b3:91:47:11:9d:43:c7:dd:5a:9d:ad:
                    a3:dc:a5:81:be:60:33:48:0c:40:4e:d4:b4:3d:6e:
                    b1:e9:d3:9a:14:86:22:7f:83:35:3c:91:a8:79:60:
                    14:73:66:45:44:2a:11:dc:6b:bf:d7:ff:83:ba:2e:
                    5d:4a:d7:02:ac:df:86:a3:f4:25:32:22:cb:19:4b:
                    7a:3a:37:45:18:9f:69:ca:3f:64:f9:24:98:a3:89:
                    24:01:b8:de:b2:ea:0a:2b:7e:22:72:ab:cd:b3:0d:
                    b0:84:59:21:2b:11:62:48:73:07:72:9a:ea:26:b3:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:DD:56:EB:44:F4:BF:32:80:6F:60:F5:22:47:D0:22:D2:E0:02
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:6b:65:d2:64:3d:62:f1:41:c3:b3:e4:3f:3b:07:e5:1b:
         12:3b:1d:82:8d:fc:b7:46:3c:4a:f4:36:7b:e6:4f:d3:13:d8:
         06:cc:54:a1:a0:1f:3a:c4:24:24:73:7a:70:5d:45:62:07:47:
         57:ac:89:30:2f:6d:d6:45:2f:f1:5d:21:6b:22:1b:f1:2a:c1:
         05:9a:82:c0:ed:d2:71:a4:6c:5c:36:10:60:01:1c:f0:49:8b:
         cb:c6:d3:94:84:45:cd:ee:39:d6:ad:6b:62:d9:b4:62:aa:b3:
         7e:92:17:36:76:65:a2:4c:d4:04:9d:5f:ba:06:ee:3f:c3:e9:
         f7:ff:ce:a9:89:d1:d8:9d:45:29:e8:d7:b2:ed:61:a1:29:3b:
         06:b2:38:ac:60:6b:56:6b:2d:c7:b3:51:ed:fe:73:53:29:27:
         16:6b:ab:17:63:47:97:30:06:8f:fc:0c:1f:8c:3b:a0:cd:5e:
         95:fd:a6:b3:c4:f9:78:24:fa:1d:48:47:b3:7a:4a:58:e6:67:
         84:f3:7f:d2:3e:78:c0:5a:24:1d:ee:40:0e:b5:4e:e4:68:36:
         e2:5e:36:43:4e:d2:93:56:a4:82:06:40:5c:11:84:ef:fb:c7:
         7a:41:b9:7f:b6:e0:75:db:8c:36:67:05:f2:30:5a:b0:b7:2c:
         55:4a:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:52 2024 by rpki-client on console-fra.rpki-client.org