Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          lrs/ZikRQnbDZ7SOQN6/9zzsk8TiFeVkoCqs4Dq+hv8=
Subject key identifier:   BA:D4:00:ED:1A:F7:71:E7:3F:B3:34:79:88:BE:71:48:30:57:29:45
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       6BF61614C3CA502936FF54D04E043FCC2DE46688
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:28 +0000
ROA not before:           Wed 15 May 2024 13:22:28 +0000
ROA not after:            Wed 14 May 2025 13:27:28 +0000
asID:                     262424
IP address blocks:        177.44.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:16:14:c3:ca:50:29:36:ff:54:d0:4e:04:3f:cc:2d:e4:66:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:28 2024 GMT
            Not After : May 14 13:27:28 2025 GMT
        Subject: CN=BAD400ED1AF771E73FB3347988BE714830572945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:50:09:08:f0:21:4e:86:21:b4:74:17:ac:
                    3f:7d:f0:4f:0c:f4:96:10:3b:99:a6:a2:5d:b9:15:
                    5b:02:af:1c:0d:c4:55:ee:5d:80:ac:9c:95:78:5c:
                    60:5f:76:5f:50:a3:ab:18:f3:eb:12:31:eb:9a:41:
                    b0:7d:d7:fe:be:71:28:a3:b4:08:4b:33:c3:80:3d:
                    c2:d8:a1:c5:20:81:10:8c:d2:86:0b:05:00:37:43:
                    47:5b:5a:6f:ef:1f:87:a9:3e:f0:de:67:0d:a3:15:
                    a2:53:82:a7:9d:22:d0:d1:d1:43:60:d3:fd:d1:55:
                    d9:47:61:b1:ea:7e:f9:1e:00:b2:02:58:cf:3f:a0:
                    d5:e9:75:3b:f6:32:f4:4e:72:21:6b:a5:3e:df:3c:
                    2f:d7:d6:27:53:d6:03:bc:61:52:91:12:83:66:90:
                    08:0a:3b:d9:11:ef:53:4e:b0:b5:4e:80:9a:fe:54:
                    22:52:2f:7b:18:51:21:a4:22:6d:b9:07:be:a5:d3:
                    8b:9d:ad:42:47:8d:d8:18:e0:99:5f:9c:a2:c6:a8:
                    30:c7:97:8a:ef:2a:12:e3:d6:a5:b8:40:6c:a2:24:
                    3c:0b:1b:2a:36:ad:5d:2a:5d:48:0d:8c:b1:10:be:
                    37:a2:93:6c:02:56:ae:66:e6:38:45:d1:9a:2c:a9:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:00:ED:1A:F7:71:E7:3F:B3:34:79:88:BE:71:48:30:57:29:45
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:56:f2:15:d0:0c:da:7d:26:07:4e:dd:70:ce:fa:89:91:
         ef:d7:f1:d8:6b:0a:c8:ee:3e:57:71:93:c8:c7:85:41:31:81:
         e2:cb:cb:26:4b:3c:df:d0:13:52:45:63:a6:f0:06:d2:ce:ae:
         db:24:7c:70:75:9d:0a:91:0b:8a:9c:0b:4b:00:bc:b8:e8:7e:
         48:83:97:22:8a:6a:46:e7:af:aa:2a:83:03:c7:65:37:81:71:
         9e:bf:48:3d:12:35:cc:80:21:69:83:f3:5c:34:29:9c:45:3f:
         9d:b3:af:c7:c5:a3:50:18:c5:24:5f:0e:27:d2:f4:7f:bd:98:
         2b:6c:5b:79:3e:a9:cb:a3:a6:1e:a9:90:38:9d:c6:85:8a:69:
         38:fa:09:7f:23:22:a2:11:c4:c1:ba:55:19:15:67:32:71:cb:
         b7:6b:17:10:55:0b:ae:af:fc:d2:4d:f6:43:71:ed:8a:ed:6e:
         82:c0:c3:b9:cc:ce:9e:10:0f:56:6e:d6:bf:53:92:d7:e6:e9:
         67:7b:dd:ae:b3:09:41:0a:56:2e:4d:24:22:21:df:9a:91:05:
         e8:ef:cf:41:ee:5c:87:49:6f:74:17:12:f2:4e:2a:b5:a8:fa:
         fc:6c:19:58:69:3d:a8:bd:ff:83:41:2c:23:8f:1b:fe:cc:69:
         90:22:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org