Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133342e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133342e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          7kSa84YahEm89KSZgvFJW1dOZvj0B8eB8R6nqMgn78U=
Subject key identifier:   C0:FF:AE:5B:79:EB:FA:21:CE:4F:15:E2:F8:63:F0:82:A4:DB:B8:39
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       42CB24265B8CC22B99A047B0EAFA5E6D16FECEA0
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133342e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:23 +0000
ROA not before:           Wed 15 May 2024 13:22:23 +0000
ROA not after:            Wed 14 May 2025 13:27:23 +0000
asID:                     262424
IP address blocks:        177.44.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:24:26:5b:8c:c2:2b:99:a0:47:b0:ea:fa:5e:6d:16:fe:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:23 2024 GMT
            Not After : May 14 13:27:23 2025 GMT
        Subject: CN=C0FFAE5B79EBFA21CE4F15E2F863F082A4DBB839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:38:7a:17:38:13:4b:45:4d:93:dc:39:cc:
                    65:cd:81:61:45:72:c0:80:c4:d8:18:00:65:74:be:
                    e5:64:10:c6:6e:f6:8a:fd:0b:96:9e:46:1f:f4:74:
                    54:96:f1:0c:49:b2:e1:87:20:5c:51:4f:5a:ef:1b:
                    89:19:6f:fe:1e:f0:82:b2:8f:64:98:9a:db:dd:53:
                    2f:bb:4c:e3:c0:c2:6f:d7:3d:89:41:1e:0c:c3:25:
                    45:cd:f9:e9:77:19:db:ff:74:eb:ca:c5:37:7e:77:
                    16:c2:63:01:3f:c0:94:fb:50:9a:5a:b1:97:d9:d9:
                    05:10:54:2c:a2:83:7f:69:b6:67:68:dc:6e:c0:d3:
                    aa:32:01:7f:06:89:bc:0b:25:37:0b:7d:5f:64:6c:
                    ef:f0:8c:c8:ae:21:46:a7:13:61:92:db:7f:12:14:
                    a3:a9:c5:91:14:a4:bb:e2:45:cd:e4:5c:e3:38:81:
                    ad:37:35:f9:3b:38:03:9a:45:8a:e3:48:5b:59:e1:
                    1e:d3:e5:e9:54:57:b0:db:bf:e0:e4:6f:3b:c1:63:
                    d8:5b:f4:19:2c:d8:9f:9b:34:6b:ae:0b:40:ce:69:
                    40:db:75:1d:e7:aa:0a:4b:6b:f7:09:1a:ba:38:5d:
                    9c:e8:c2:ff:d6:44:d8:60:c1:80:ab:56:13:c4:bb:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:AE:5B:79:EB:FA:21:CE:4F:15:E2:F8:63:F0:82:A4:DB:B8:39
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133342e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:5b:04:d0:c4:17:96:84:60:2c:b1:9c:56:8c:33:99:26:
         44:90:e7:e7:a9:a1:3b:50:73:7a:10:56:d9:fa:2e:0c:60:8f:
         d0:66:19:4f:48:9c:cf:44:d4:d6:cf:8a:79:36:71:cd:40:15:
         1c:9c:77:cc:b0:15:63:f7:0d:b9:37:7d:02:44:ad:25:88:50:
         5d:ca:c1:9a:ad:49:ff:96:26:97:ad:d7:21:c1:a1:67:c5:c2:
         2b:58:28:a3:b0:63:d2:18:07:d5:31:d2:5c:24:82:1e:e4:aa:
         e7:d2:7c:7c:a1:30:28:a3:f5:4b:4b:a0:11:5c:1b:09:c1:d7:
         58:b6:0a:b8:ea:e1:c1:10:00:25:36:73:09:50:92:c9:21:3a:
         a4:ea:a6:80:06:c6:b4:14:ad:4b:6f:cc:ba:f2:8c:78:d6:a2:
         f2:27:1b:70:a5:3c:2b:c7:b9:a5:04:4d:b0:e7:2a:47:fa:ee:
         db:44:0f:1e:b7:d1:22:d4:9f:02:a2:0c:fa:85:4a:12:4a:73:
         70:77:68:aa:fb:1d:0f:a8:70:15:81:8f:f3:34:fa:3c:8c:8d:
         9f:38:3b:02:76:f6:ab:9e:03:4c:6b:77:2b:dc:43:c5:4b:f8:
         dd:32:2f:03:54:44:74:70:45:ad:5d:64:b8:ce:97:cf:41:13:
         40:22:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org