Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa
File:                     3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa (raw, json)
Hash identifier:          uZshLSty49KiNr5Oe/hAeisHwhM4sh8DKx9JzMwT3zY=
Subject key identifier:   AC:D1:00:63:85:26:03:EA:A2:49:C1:89:F0:2C:06:BF:29:81:B0:69
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       6344A3646A2F4646F26DFC679C89A57FFAA648E4
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:28:07 +0000
ROA not before:           Wed 15 May 2024 13:23:07 +0000
ROA not after:            Wed 14 May 2025 13:28:07 +0000
asID:                     262424
IP address blocks:        177.44.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:44:a3:64:6a:2f:46:46:f2:6d:fc:67:9c:89:a5:7f:fa:a6:48:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:23:07 2024 GMT
            Not After : May 14 13:28:07 2025 GMT
        Subject: CN=ACD10063852603EAA249C189F02C06BF2981B069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:a9:f3:1f:85:d9:70:bd:c2:db:a0:ec:f1:
                    0d:5a:16:5c:9a:33:5c:e0:8f:0f:21:b8:16:4e:31:
                    a6:4e:72:9b:c1:11:6a:23:60:d8:25:46:9b:74:1e:
                    0b:6f:e3:be:75:97:1c:95:ac:d3:03:06:fe:1b:cb:
                    c0:16:3c:77:0f:54:c6:5f:98:2c:db:05:13:a8:9e:
                    04:b9:0d:e2:62:43:8f:1b:24:37:bf:c2:54:65:62:
                    0a:ad:a9:2d:17:7c:b8:46:06:a6:a5:b1:fd:d3:fb:
                    d1:4f:3e:fc:6a:d3:1b:8f:9a:a3:84:96:39:36:95:
                    60:61:d3:4a:22:95:3b:bb:a8:97:d2:3a:be:f7:43:
                    b3:66:f8:88:cd:5f:f8:e6:c4:d6:e4:80:62:b8:43:
                    d1:82:e9:6e:cb:15:d4:30:22:01:d2:be:f0:9c:a6:
                    57:12:9e:80:3d:63:8a:43:66:eb:56:de:1d:0d:d4:
                    3a:5b:53:b9:de:b0:4d:4a:d9:f8:fc:9a:b5:9d:d7:
                    70:00:bd:6f:82:05:fd:73:d5:d0:1c:4d:85:dc:df:
                    fe:05:ca:39:00:fa:dc:72:1a:bf:89:4e:37:19:28:
                    92:24:b1:fc:80:37:bd:9e:bd:75:68:7b:fc:7a:57:
                    a2:1f:35:e0:47:34:ba:92:5c:aa:9b:d1:dc:21:c6:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D1:00:63:85:26:03:EA:A2:49:C1:89:F0:2C:06:BF:29:81:B0:69
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:87:4a:ad:4b:56:8c:bf:72:2f:3b:7f:f4:41:87:29:56:0e:
         fa:d3:87:df:b7:31:cd:6d:97:1d:86:d0:60:75:38:2a:93:5a:
         b1:fe:5f:23:b2:e5:7c:e5:27:01:4e:21:39:57:77:be:8d:1c:
         bc:67:05:7b:92:4e:75:5d:4d:c8:89:6e:3f:7a:8e:22:5f:e8:
         7f:9c:43:e8:71:6f:3f:7c:7f:49:bc:44:a5:13:4c:a5:5e:c6:
         83:0f:63:01:c8:0f:5b:88:bb:43:a2:57:1a:bb:63:44:0f:86:
         b1:95:f9:21:72:45:bc:f6:10:79:82:53:f6:a5:21:fc:bf:08:
         37:ce:54:3b:e2:88:ec:4d:24:57:f3:b9:8e:11:b5:23:97:e6:
         04:f1:21:1d:d7:11:06:ef:2f:ac:21:f3:45:7a:09:4f:e8:bd:
         62:1c:44:f5:27:d1:f6:c1:3c:9c:28:4b:a0:42:fd:4c:93:2c:
         12:30:3b:18:5a:3d:69:0f:27:f2:2a:ad:d0:19:1d:c4:d9:0c:
         72:5d:c4:a7:d7:62:19:61:75:4e:36:15:27:53:a0:44:b6:4e:
         c2:a2:3f:c4:0b:05:4e:5b:ab:56:80:c8:e3:b1:cd:4c:78:ec:
         ef:91:3e:e6:af:2e:0e:05:21:55:cc:aa:3c:c2:a9:3e:71:65:
         65:b8:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:20 2024 by rpki-client on console-fra.rpki-client.org