Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          JPTZdFEExE3iYB3+EoeDiBLiEulQCwP4OfmvbjBJS08=
Subject key identifier:   8E:5B:54:FE:CB:A4:86:1D:A4:DE:9C:69:B0:8A:29:2F:68:F4:38:E2
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       2CDE3DA6F5FA3EB29DA12E5A78A08FEC9A2E0080
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:14 +0000
ROA not before:           Wed 15 May 2024 13:22:14 +0000
ROA not after:            Wed 14 May 2025 13:27:14 +0000
asID:                     262424
IP address blocks:        177.44.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:de:3d:a6:f5:fa:3e:b2:9d:a1:2e:5a:78:a0:8f:ec:9a:2e:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:14 2024 GMT
            Not After : May 14 13:27:14 2025 GMT
        Subject: CN=8E5B54FECBA4861DA4DE9C69B08A292F68F438E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:53:34:e0:cb:8f:b5:e0:e1:b9:f9:e3:31:
                    a9:60:48:55:3d:52:50:05:56:da:26:05:db:af:08:
                    2e:57:93:c7:c7:a5:0d:23:52:4d:8b:2c:32:4a:6e:
                    22:e0:6b:54:9c:d7:36:99:28:ea:df:78:82:ae:50:
                    eb:34:fe:f4:72:35:ba:55:06:a4:9d:4a:85:a8:a1:
                    da:33:91:86:3a:71:f4:94:1a:04:33:29:d8:cb:d6:
                    7a:d5:7c:fb:61:64:66:cc:21:59:28:fc:2c:20:cc:
                    b9:11:df:fc:67:cb:4c:13:32:a1:85:91:2d:83:1b:
                    86:bf:69:9a:fe:66:45:96:d2:16:53:0f:6b:42:be:
                    0c:8e:bf:45:fb:f7:d2:02:15:fe:6c:23:c9:62:5e:
                    cc:29:a2:86:70:d4:1f:ad:77:3b:d4:ec:e2:de:ae:
                    4c:7f:6d:4a:64:d4:b1:ae:29:83:08:27:f5:24:91:
                    0f:cf:f5:f4:67:80:a8:21:2f:f3:8f:9f:68:5e:37:
                    54:c3:45:d7:a0:b7:08:45:65:dc:5c:09:4b:97:d0:
                    c8:f4:19:a3:f9:4e:29:72:ea:5e:d7:0c:66:69:e4:
                    ce:93:45:f4:c3:04:40:1c:1e:df:40:ea:cb:f2:ef:
                    42:8f:d5:bf:d0:e3:2b:db:59:10:c2:4a:79:fa:b3:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5B:54:FE:CB:A4:86:1D:A4:DE:9C:69:B0:8A:29:2F:68:F4:38:E2
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:22:9b:e3:d2:1e:24:3a:bd:72:f9:ee:86:8d:b2:b6:49:
         c9:e7:2f:ac:38:f6:45:75:fc:cb:04:49:e1:91:fb:24:4d:db:
         a6:47:a6:a8:27:b6:3d:85:72:6a:18:94:7f:53:78:ac:95:f9:
         3b:81:1a:49:e2:c0:ba:a0:0e:d1:8b:67:b3:bb:b3:60:10:42:
         26:f5:a9:01:8f:f6:eb:9d:ec:17:20:60:49:ad:66:91:69:0c:
         a2:18:e1:76:a3:99:df:3a:70:9d:d7:59:c3:d5:f3:01:33:18:
         12:a0:cd:bf:8f:3c:ba:23:0e:bf:d5:71:c5:ac:be:fb:b9:02:
         05:5f:8e:df:47:b3:6b:49:77:27:b5:a9:df:ca:8d:d3:16:68:
         c5:b0:c9:fe:d3:3c:ad:b5:58:a1:f2:fd:96:8d:5b:63:eb:dd:
         f8:49:69:0e:8f:e8:6b:a3:ab:ec:2c:55:ef:cf:dc:09:b5:99:
         82:44:79:a8:3d:5e:32:e9:46:59:91:f4:83:ab:5c:de:66:eb:
         ab:82:34:45:aa:49:16:77:34:6b:61:67:c9:a6:0e:70:02:15:
         9b:45:4c:a5:40:b6:8c:a1:c1:93:f9:fb:99:86:42:55:e4:15:
         b7:6b:e2:ac:16:b4:99:f8:1f:3b:c6:1a:54:02:4a:e2:8c:0e:
         59:5b:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:20 2024 by rpki-client on console-fra.rpki-client.org