Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          upMnVtyvmOruxa5nYxnTOSbXahpg9n4yBE/lunZi0J4=
Subject key identifier:   8C:6A:97:A4:39:B5:EE:F3:C4:D9:F5:92:EA:E0:EA:FD:F1:EA:AA:18
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       5D916290E733366F80830B29995E2D49B961645A
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:33 +0000
ROA not before:           Wed 15 May 2024 13:22:33 +0000
ROA not after:            Wed 14 May 2025 13:27:33 +0000
asID:                     262424
IP address blocks:        177.44.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:62:90:e7:33:36:6f:80:83:0b:29:99:5e:2d:49:b9:61:64:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:33 2024 GMT
            Not After : May 14 13:27:33 2025 GMT
        Subject: CN=8C6A97A439B5EEF3C4D9F592EAE0EAFDF1EAAA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:62:ea:9d:fd:a6:3f:81:d3:c9:6c:d3:cd:
                    3e:4e:e3:5d:84:fa:94:0f:28:67:f9:92:c5:5c:11:
                    9d:8b:08:06:82:eb:55:c2:fe:88:06:02:f0:a4:30:
                    c2:6a:a5:46:71:9b:4f:82:39:0e:16:88:ce:e9:5f:
                    82:c4:21:76:ac:71:9c:ba:ab:58:74:6a:5b:eb:d3:
                    b6:09:ab:10:ba:ca:f2:19:3a:a6:4a:b8:ef:08:53:
                    3f:41:bf:bd:af:e3:1d:32:51:8b:11:14:57:10:5e:
                    72:3c:5a:a5:41:88:06:1b:bf:0d:ff:92:84:13:69:
                    93:16:67:23:6b:28:db:25:9d:24:92:58:d9:49:d5:
                    9d:31:0e:df:78:05:e7:c2:5b:09:5a:a3:ad:40:da:
                    bb:ef:81:5b:5a:ad:21:7a:41:34:0b:4c:0e:13:ad:
                    e3:e1:f9:ac:07:39:dd:d4:ef:0c:73:a5:d0:46:47:
                    25:7b:81:6b:98:54:98:94:28:0c:eb:27:d2:56:69:
                    58:64:75:fb:1d:16:a9:b8:06:85:7c:49:0c:67:42:
                    f7:9e:d4:2d:8e:6c:00:4c:e8:15:9d:73:6a:b0:d7:
                    72:fc:30:27:e2:c8:06:30:e8:8f:b3:43:6e:7d:26:
                    20:38:4d:54:cf:91:3e:9f:18:84:52:f9:d4:1f:5c:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:97:A4:39:B5:EE:F3:C4:D9:F5:92:EA:E0:EA:FD:F1:EA:AA:18
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:95:3d:1d:82:8b:27:e8:91:fa:d3:0e:d3:21:60:30:96:
         76:d2:4b:5f:9f:a8:78:53:f0:2a:c5:26:68:1b:27:ce:15:50:
         a5:01:64:d4:ca:63:b4:17:3f:e3:2f:08:f4:06:f5:a1:9a:f4:
         f3:4e:15:fa:b6:56:d2:03:f4:b2:30:2c:df:3b:58:51:c6:d2:
         30:4e:20:93:62:a9:64:28:e2:c7:37:f9:6d:20:98:e3:06:4c:
         ee:cb:90:c3:1c:42:d1:ab:e2:39:29:98:0b:1c:35:9a:d3:95:
         f0:03:d6:29:26:ce:98:4b:8f:af:47:c6:4c:2f:b5:3b:3e:e4:
         21:9b:96:f7:4d:fe:27:f4:3e:9d:29:e6:2c:bf:46:77:f9:ec:
         47:11:36:d9:c5:e1:c8:e6:b7:85:f7:20:8b:e3:a6:37:ab:f1:
         7f:54:21:5d:52:06:fb:2e:3e:21:04:48:5f:a3:bd:de:05:a7:
         9e:2f:06:84:0d:2c:d8:e3:65:62:cb:0b:ec:80:29:1d:5f:93:
         ee:5e:40:88:28:be:d2:e1:cb:e0:d5:72:72:90:8d:4a:31:46:
         dd:5b:72:01:34:26:b0:3b:d5:ea:44:d0:c8:8b:b6:0c:3d:9a:
         3b:05:38:96:60:08:84:9e:4e:dd:d3:16:4b:cf:cf:6e:b5:b6:
         f5:2a:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org