Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133392e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133392e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          ARj9E3Ld8J0/FgiT9SSwDktlFmYVL/M5aT+A4jcoCnI=
Subject key identifier:   8E:6A:63:24:CB:F0:FE:36:3A:7F:AB:5C:10:FE:1D:6C:1A:E5:9C:B3
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       4E576F230F7FB794307590340EF48143B686F70A
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133392e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:59 +0000
ROA not before:           Wed 15 May 2024 13:22:59 +0000
ROA not after:            Wed 14 May 2025 13:27:59 +0000
asID:                     262424
IP address blocks:        177.44.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:57:6f:23:0f:7f:b7:94:30:75:90:34:0e:f4:81:43:b6:86:f7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:59 2024 GMT
            Not After : May 14 13:27:59 2025 GMT
        Subject: CN=8E6A6324CBF0FE363A7FAB5C10FE1D6C1AE59CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:5d:c6:c3:2a:47:2b:91:d6:4a:14:8f:c4:
                    63:5f:06:34:56:ff:58:22:97:3a:07:9c:d4:44:db:
                    6a:a8:b5:9f:0e:26:dc:e5:56:c4:27:0f:dc:23:88:
                    ff:89:dc:6a:87:1a:5b:a2:d5:a7:28:c2:f3:73:e3:
                    d7:dd:13:52:71:2b:98:b6:58:63:04:48:1c:47:8d:
                    f2:e3:89:17:e7:c2:08:30:f8:33:ae:5d:75:fb:b0:
                    fe:e6:70:3e:f4:06:c0:1a:3b:de:78:d3:df:28:1f:
                    9c:61:44:ba:91:c9:02:fe:43:96:c5:66:5d:20:bc:
                    39:fb:50:37:37:cc:9d:0c:a4:9b:bd:58:b0:c8:54:
                    36:ae:21:b4:56:96:05:0e:55:64:81:91:a8:f4:f0:
                    1b:58:93:2b:b3:6b:d4:c1:05:2c:28:a3:8f:98:4d:
                    4f:6f:da:e7:e9:7e:8a:fc:8b:49:0b:33:f3:eb:59:
                    17:81:07:7c:6e:10:8e:a0:09:c7:f0:7c:91:79:22:
                    b4:5d:15:7d:bf:1d:d4:a0:db:78:c0:02:57:67:cd:
                    eb:c2:b8:5e:2b:bd:d3:aa:11:7a:6a:2c:1b:bb:aa:
                    e5:5f:01:e4:4b:73:66:42:09:28:af:5c:e4:d1:a3:
                    fb:af:50:ab:9b:1c:12:48:c1:87:c7:34:ac:e7:08:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6A:63:24:CB:F0:FE:36:3A:7F:AB:5C:10:FE:1D:6C:1A:E5:9C:B3
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133392e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b9:a4:88:8d:57:76:f4:d6:5d:1b:e3:5a:1a:e1:f9:c1:38:
         d4:2c:3a:5d:4d:9d:2c:7a:7c:4f:ea:aa:5e:85:39:96:e7:b1:
         56:86:40:db:04:2a:1b:17:c3:a1:e9:35:cd:23:2d:1a:86:f8:
         04:7d:5b:ef:86:2a:ad:d0:ec:7c:9e:6a:0d:a9:24:0a:8a:ac:
         8b:12:95:5b:7c:f1:c3:f6:8d:85:64:6a:e5:f7:b6:58:df:ca:
         78:fd:ae:1c:7d:27:70:44:30:a0:66:67:b8:bf:ed:c6:70:09:
         f3:6c:e0:19:9c:b5:4c:5b:33:35:1f:a5:06:cf:f3:f8:20:2b:
         d0:7a:d6:51:47:2c:b8:5f:a2:80:72:50:fc:cb:05:da:77:52:
         73:5a:72:63:b5:21:cf:b7:e9:1d:3d:eb:d2:b4:29:3c:2a:f4:
         c8:7c:27:ed:8d:94:e6:53:98:b2:7c:41:0c:e1:47:53:59:31:
         5d:58:54:3e:5a:e3:8e:30:f3:b1:69:d0:b1:ca:e7:de:d0:1f:
         6e:a8:09:16:96:ac:09:16:f8:20:75:06:c6:70:67:80:6b:21:
         16:bd:1d:38:7c:7e:1a:3f:b6:fc:4b:17:18:64:8e:89:cc:1c:
         69:1f:dc:51:f9:a1:2e:ae:9e:23:2f:76:b6:27:ea:8d:03:a7:
         f1:2a:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org