Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3134302e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          G/2CUehFDbpRfjgDZzQvQsL+ut85/C+TGu9wGG03eQU=
Subject key identifier:   56:86:76:E3:74:AB:E9:44:79:8F:92:57:3E:B4:92:9D:1B:5B:2C:F3
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       7E4638E1CEA8CB5526A964000988B8BDA10D15E8
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:28:13 +0000
ROA not before:           Wed 15 May 2024 13:23:13 +0000
ROA not after:            Wed 14 May 2025 13:28:13 +0000
asID:                     262424
IP address blocks:        177.44.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:46:38:e1:ce:a8:cb:55:26:a9:64:00:09:88:b8:bd:a1:0d:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:23:13 2024 GMT
            Not After : May 14 13:28:13 2025 GMT
        Subject: CN=568676E374ABE944798F92573EB4929D1B5B2CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:d4:bc:79:71:61:5e:29:1d:18:8b:81:8c:
                    f7:58:2e:ce:9e:f3:50:e2:fc:32:e9:f0:79:eb:aa:
                    61:a1:ed:8c:e8:5d:8e:e9:af:4a:4e:0e:c1:01:74:
                    a5:17:54:b0:bb:b5:53:1a:09:84:46:35:9f:23:3e:
                    a2:ad:38:6d:67:17:a7:2d:0c:f9:d9:69:b5:ed:cb:
                    d2:b2:59:7f:bc:d4:65:0b:df:23:24:ae:68:1f:a0:
                    ae:aa:0b:9f:c2:2c:ee:f5:e1:2c:2f:86:ea:8b:ed:
                    20:e6:92:f2:32:7f:84:78:f7:62:b0:07:1d:6c:2d:
                    aa:0d:c1:ad:88:5e:21:ff:a2:62:ce:ca:a4:d8:b5:
                    d9:3c:7b:dc:03:9b:36:3d:3d:b5:e4:97:c6:56:8f:
                    7b:87:21:1d:6c:d4:0d:aa:2d:6d:ff:6a:7a:b5:0e:
                    de:9a:a1:85:2c:70:3d:1a:b5:bb:9f:78:54:a8:47:
                    be:8b:74:ca:37:fc:06:20:40:a4:45:10:4c:00:1c:
                    0a:cb:5b:93:46:7a:6f:90:b8:26:73:88:f1:95:d6:
                    7a:80:58:89:e1:c8:99:86:ef:37:16:86:2f:18:05:
                    a2:5f:98:29:4a:f5:20:84:25:08:35:c3:21:db:ec:
                    5b:21:da:9c:1d:6f:5e:21:44:2a:94:61:16:89:67:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:76:E3:74:AB:E9:44:79:8F:92:57:3E:B4:92:9D:1B:5B:2C:F3
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:01:f4:31:77:43:3c:ae:d6:c0:2d:6d:37:95:3d:f3:35:
         e1:a6:55:9c:cd:fc:ad:c8:1f:e4:82:34:0d:5f:20:c6:12:a3:
         51:8c:6b:6b:60:fd:b9:c5:dd:1f:e7:a0:ef:83:53:0a:0c:ee:
         bd:8d:bc:fb:6c:b3:4c:15:e6:1e:7e:7a:62:41:0c:a6:88:a7:
         34:bb:50:2c:61:28:55:5a:69:26:72:d6:34:06:2c:24:a4:c1:
         7e:c2:5e:a8:f8:19:37:16:55:73:1c:2a:53:58:6b:b3:59:16:
         d9:bd:df:26:30:f4:dd:40:f4:04:e1:c6:de:40:af:51:d5:1e:
         cb:08:25:49:94:ef:e0:6a:af:8f:24:51:a2:75:b4:e4:5d:cb:
         01:d6:f4:26:1a:21:88:f8:12:68:44:a6:d5:b9:43:5e:7b:8b:
         e8:be:74:e0:0f:0f:f1:3e:b1:bb:f8:86:b7:5d:55:92:86:80:
         39:2f:ab:1d:1a:9e:58:69:bc:59:c9:88:a1:12:03:87:ef:2a:
         82:59:b2:8d:e2:c2:ba:d3:43:02:ae:8b:2b:d4:8e:ae:35:b0:
         c8:34:00:d6:4f:b6:a7:a6:ee:70:2c:a4:81:6d:e6:91:78:7f:
         07:c0:e0:6f:cf:5a:3b:d6:65:67:0b:fc:e0:91:7a:61:8b:1c:
         c7:4f:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:52 2024 by rpki-client on console-fra.rpki-client.org