Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          e5hiSot4x5kSdMhelixfYK3bH1xeLeSnPv9lcSFSEGI=
Subject key identifier:   0B:0C:D5:5F:2F:AF:FB:D2:17:A0:42:B4:3C:96:FC:23:BD:9E:A4:FE
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       4976971214DBA4E4FC1B81435AB3EA59DE144603
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:54 +0000
ROA not before:           Wed 15 May 2024 13:22:54 +0000
ROA not after:            Wed 14 May 2025 13:27:54 +0000
asID:                     262424
IP address blocks:        177.44.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:76:97:12:14:db:a4:e4:fc:1b:81:43:5a:b3:ea:59:de:14:46:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:54 2024 GMT
            Not After : May 14 13:27:54 2025 GMT
        Subject: CN=0B0CD55F2FAFFBD217A042B43C96FC23BD9EA4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:0a:6d:e4:ea:90:0b:66:39:fa:e1:df:7f:
                    f8:82:02:ec:49:bd:ae:6b:17:4e:fd:57:5c:7a:56:
                    c2:5e:69:53:c8:a9:9e:c9:a9:6b:ce:51:1a:83:ac:
                    c3:7d:7e:fa:8e:df:1b:74:3c:5a:04:8b:ce:fd:6f:
                    1b:13:fe:94:41:66:08:9f:d4:4f:5a:58:05:41:2d:
                    7f:42:f6:9b:79:de:c0:3b:c7:73:2f:f9:10:7f:15:
                    92:dc:a5:ef:43:7e:d8:26:83:e7:88:6b:af:ee:cd:
                    1d:db:87:3e:8d:df:c5:04:1d:c7:86:c1:e9:2c:23:
                    f6:b1:fb:ea:06:5a:f7:18:2e:3f:de:9d:47:4d:a3:
                    f2:b9:5e:8e:d8:67:fc:3a:c3:ad:e1:a3:80:2c:62:
                    a2:70:cf:7a:d4:d7:1e:20:64:dd:12:21:64:65:f9:
                    e2:6e:8e:6e:18:0e:17:af:ea:ef:65:9a:56:b4:dd:
                    5b:be:7c:e4:cb:24:62:12:17:80:4b:ac:ab:bc:c4:
                    49:21:92:fa:68:04:8e:00:2a:ae:5e:cd:f3:b2:fb:
                    38:cb:d4:59:b7:c2:77:7a:e4:7a:69:67:0b:19:a2:
                    8d:37:9e:2f:20:91:9e:b1:3a:7b:34:47:ba:e4:48:
                    73:f7:8a:55:35:57:fe:66:f3:3f:ce:48:bd:54:c6:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:D5:5F:2F:AF:FB:D2:17:A0:42:B4:3C:96:FC:23:BD:9E:A4:FE
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:79:8e:1c:85:58:ca:64:f3:68:55:a6:af:8b:6e:de:dd:
         f4:2c:1d:82:32:ed:2e:9e:b0:f9:b3:5a:b2:a1:1b:ff:38:16:
         f9:2d:08:90:a4:05:60:66:6c:6a:eb:a1:85:2b:47:81:60:b6:
         06:17:0f:e1:ed:48:ca:3e:26:7d:dc:fc:58:b3:75:de:fd:04:
         8b:6f:d1:cd:b3:27:16:59:a5:a2:23:98:94:ea:47:fa:d4:f3:
         94:4c:c2:a4:1f:51:29:1b:c9:34:e8:ba:ea:ac:c8:26:99:dc:
         6f:79:c8:bf:bf:30:3b:c5:96:e3:4d:86:0b:f1:30:f6:1d:43:
         6c:53:f9:83:1d:ca:a5:25:18:b4:0e:1b:dc:b1:be:1f:c3:9f:
         dd:c4:da:9f:a6:f4:b2:9f:e0:22:28:30:bd:63:9a:b3:9a:2e:
         8a:f8:53:b3:5d:ca:a8:41:da:a2:ff:cc:b5:00:57:da:bc:d0:
         5c:b7:41:b7:9f:cc:b5:68:b2:7e:a2:91:42:e0:d3:83:84:37:
         b7:a2:0e:89:f7:53:22:4e:95:ce:e6:8f:6c:41:ef:f3:0b:5d:
         82:69:51:ef:76:f9:3a:8d:f3:69:97:2d:2e:d3:d6:32:7b:fd:
         46:15:a5:05:de:27:0f:30:17:0b:da:5b:71:72:65:0b:89:80:
         b6:29:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org