Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa
File:                     3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa (raw, json)
Hash identifier:          LXoTQNtzW3ehmiUf5mBNE6J9GtRW9V3i0nAopFsV6ws=
Subject key identifier:   66:38:21:90:9B:D5:1F:2F:F0:E0:93:0D:C8:D1:86:6A:C8:4D:3C:2A
Certificate issuer:       /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial:       7ECE58BE1C8FC92F8E0722E3CCCCEB0E189C91D4
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa
Signing time:             Thu 25 Apr 2024 13:11:49 +0000
ROA not before:           Thu 25 Apr 2024 13:06:49 +0000
ROA not after:            Thu 24 Apr 2025 13:11:49 +0000
asID:                     263129
IP address blocks:        177.155.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl
                          rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 20:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ce:58:be:1c:8f:c9:2f:8e:07:22:e3:cc:cc:eb:0e:18:9c:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
        Validity
            Not Before: Apr 25 13:06:49 2024 GMT
            Not After : Apr 24 13:11:49 2025 GMT
        Subject: CN=663821909BD51F2FF0E0930DC8D1866AC84D3C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:12:ad:96:36:24:c8:12:5b:b5:44:cd:c8:
                    a8:36:f4:b4:07:ed:a0:dc:c3:55:89:72:a3:19:d4:
                    9e:e1:90:d5:3f:c6:95:98:55:52:87:48:33:9a:5d:
                    fa:05:3f:72:00:67:9c:5d:b0:24:14:a9:c1:45:1b:
                    44:a8:ad:e0:6b:65:f3:a4:3c:15:0a:27:97:47:52:
                    af:08:8a:aa:05:0d:76:25:3c:16:6c:3a:fc:49:27:
                    5f:6a:37:2e:51:81:86:a6:01:46:35:07:90:0d:ad:
                    be:5b:c0:ed:2d:45:59:61:4e:69:12:61:e4:58:85:
                    01:98:27:4f:36:6c:c3:d0:d3:c1:a9:b1:46:fe:e1:
                    b5:3a:c3:c6:bf:bb:72:0b:a5:d3:a6:9c:d5:82:56:
                    5b:82:d1:84:d6:c3:77:ca:8e:62:aa:c4:31:02:fe:
                    18:d4:6e:0c:1c:61:5a:6a:06:c2:86:71:13:3e:b4:
                    fb:b9:02:fa:05:8e:ef:48:44:d7:00:33:65:b7:2e:
                    a4:0e:46:ac:f2:06:97:4b:20:8a:e0:fc:28:3b:a9:
                    eb:fb:f1:b6:50:e5:98:b7:03:02:a1:73:eb:04:ef:
                    b1:a1:ac:39:18:7c:37:c4:0b:6f:92:95:00:c1:8b:
                    10:9c:fb:02:ba:39:c2:d4:8b:e8:b9:cd:f3:0e:be:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:21:90:9B:D5:1F:2F:F0:E0:93:0D:C8:D1:86:6A:C8:4D:3C:2A
            X509v3 Authority Key Identifier:
                keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:1d:2f:45:fc:d1:0f:ec:a7:dc:b6:da:a1:f3:35:9a:77:
         64:7b:84:b1:31:b7:25:c0:b0:b7:9c:75:b5:41:97:27:c5:9a:
         bf:74:e4:f4:b6:d9:8f:30:10:74:ff:04:d9:d8:79:66:f9:87:
         f3:d8:c7:90:d7:1e:0a:58:3b:59:98:9b:c9:27:61:6f:ff:df:
         f8:2d:42:fb:22:0f:2e:7f:5f:f8:a7:22:44:96:14:11:42:03:
         73:28:3f:f5:27:03:e2:85:48:63:4c:4f:fc:1d:fb:95:96:9f:
         2b:d6:38:29:b9:a3:16:7d:bb:eb:46:e4:93:ad:79:81:de:d0:
         47:6b:1d:8e:13:c0:1d:88:03:e5:63:2c:5c:dd:72:e2:f3:ac:
         bb:df:ad:c3:0e:af:ef:9a:72:37:97:8c:02:04:eb:16:20:a0:
         59:50:1e:63:27:44:f3:e6:dc:07:ce:54:9b:3f:49:f9:95:57:
         cc:df:85:19:d7:db:21:df:ff:b9:6c:9b:f7:d3:fa:29:0f:5a:
         46:4c:6d:70:9a:06:51:0f:96:03:50:d8:3c:fa:de:2b:26:88:
         76:8d:85:7e:31:85:fe:ce:0b:56:77:b9:68:6a:f9:e7:8c:57:
         eb:3a:97:39:8f:f0:bf:db:0b:e1:8d:36:45:37:56:77:88:73:
         99:3d:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:27 2024 by rpki-client on console-fra.rpki-client.org