Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          mN0/iJPMN9oHBmLLyCQSaIgasEhuFM2LxyjX+Tu+Vdk=
Subject key identifier:   85:44:DE:F7:2C:22:97:CE:25:E8:7F:D2:44:C1:AB:0C:6B:89:2E:23
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       332F9E9DB0D994A4F5F92C5DF22418ACCA23CEF4
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:28:18 +0000
ROA not before:           Wed 15 May 2024 13:23:18 +0000
ROA not after:            Wed 14 May 2025 13:28:18 +0000
asID:                     262424
IP address blocks:        177.44.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2f:9e:9d:b0:d9:94:a4:f5:f9:2c:5d:f2:24:18:ac:ca:23:ce:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:23:18 2024 GMT
            Not After : May 14 13:28:18 2025 GMT
        Subject: CN=8544DEF72C2297CE25E87FD244C1AB0C6B892E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:d0:0c:d1:9b:ec:65:83:61:f8:f9:86:92:
                    c2:67:c0:0d:ca:c1:ca:a8:e0:bd:d3:a5:d7:88:e3:
                    4b:dc:c2:4b:b7:58:25:ab:fd:79:a3:4e:79:49:20:
                    e8:64:83:72:64:69:74:2c:be:f0:e6:43:3a:6d:92:
                    41:5d:66:eb:e0:76:be:61:ae:9c:78:f4:82:9f:84:
                    07:c3:0d:3d:86:f6:08:25:20:3d:43:f5:31:f5:c1:
                    67:66:48:e0:94:58:c7:e3:55:58:68:3d:0f:ce:08:
                    59:2a:f0:96:12:31:58:66:51:64:36:0b:ad:56:50:
                    0f:32:2b:d3:b6:89:5e:05:6f:10:07:8b:f8:ab:dc:
                    c2:b3:38:53:11:7a:42:f6:e4:a8:1b:ba:b4:d1:02:
                    2e:b3:c9:41:12:ec:20:fb:35:d0:de:3a:ff:02:a9:
                    75:dc:5f:57:43:fe:83:79:d5:2e:23:99:09:ab:95:
                    72:76:a8:eb:1d:d2:95:08:d7:90:7a:b2:cf:11:be:
                    01:43:a9:f4:8a:2f:ea:02:3b:ee:13:4a:fb:a6:31:
                    6e:13:b3:1c:d5:68:7a:bb:e6:b9:ca:1d:26:b1:48:
                    ee:18:40:ec:50:d6:5f:7c:d4:3d:ad:7d:8c:b1:a9:
                    d6:d5:a9:0b:d4:ad:f3:77:7c:8f:61:0f:8c:c0:90:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:44:DE:F7:2C:22:97:CE:25:E8:7F:D2:44:C1:AB:0C:6B:89:2E:23
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:a4:dc:d0:44:cc:8c:32:f8:10:d6:18:25:58:89:6a:4b:
         b4:c9:3b:5a:c8:46:f9:2c:3c:43:0b:5f:58:ee:3a:d9:dc:c3:
         27:b0:de:e5:e1:ba:7d:9f:71:a1:36:8a:e6:79:cb:67:1d:a6:
         89:2d:6c:c2:8f:62:af:80:f5:6a:ca:70:e4:d5:47:bc:ff:ce:
         43:a7:53:5b:04:e8:a5:f0:c7:1e:50:37:78:df:56:e5:ac:07:
         2d:dd:53:cf:ef:ad:28:34:af:b2:03:86:2f:68:d3:0c:19:76:
         41:70:d5:b8:c6:f8:89:0f:db:94:6f:c6:ff:bf:96:27:53:df:
         9b:3b:c2:a2:d9:d6:52:58:98:a1:2a:52:99:f5:71:0a:0a:36:
         e3:c7:1f:97:ff:0c:99:c9:3d:c6:c5:24:a7:b8:f7:91:68:a1:
         92:8a:5a:3d:e6:7c:fe:fa:44:a5:40:1b:3b:15:13:7d:f0:f8:
         50:d4:dc:e1:f2:50:3a:ad:c3:e2:3a:f3:b8:b6:f2:60:df:8c:
         87:d8:b0:b0:ee:0b:4e:db:a1:71:38:77:bf:7d:03:dd:c6:67:
         02:3b:59:9d:1e:aa:2f:7b:b0:2d:d2:e1:0e:b9:b9:6c:6a:7b:
         7b:d7:d7:86:7d:4d:d9:ea:29:7f:e6:30:46:8b:9e:f9:7e:0f:
         09:fc:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:13 2024 by rpki-client on console-ams.rpki-client.org