Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e31322e302e302f31382d3234203d3e203238363635.roa
File:                     3137372e31322e302e302f31382d3234203d3e203238363635.roa (raw, json)
Hash identifier:          QMHJRfUrbcsJiAOj5t5SvOEK3UsFa6XF2GHd89XYZLg=
Subject key identifier:   CB:4E:FB:3E:2C:E7:09:D0:95:D3:67:14:F8:C3:AB:6D:AC:3D:90:6E
Certificate issuer:       /CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
Certificate serial:       5BFA0DCD2BADFAFB4E054A3330B0DA58C070F694
Authority key identifier: F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e31322e302e302f31382d3234203d3e203238363635.roa
Signing time:             Thu 04 Apr 2024 17:57:20 +0000
ROA not before:           Thu 04 Apr 2024 17:52:20 +0000
ROA not after:            Thu 03 Apr 2025 17:57:20 +0000
asID:                     28665
IP address blocks:        177.12.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fa:0d:cd:2b:ad:fa:fb:4e:05:4a:33:30:b0:da:58:c0:70:f6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Validity
            Not Before: Apr  4 17:52:20 2024 GMT
            Not After : Apr  3 17:57:20 2025 GMT
        Subject: CN=CB4EFB3E2CE709D095D36714F8C3AB6DAC3D906E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:1c:2b:31:08:6e:46:e4:14:1a:72:10:0b:
                    f8:5c:01:89:2d:03:0e:01:30:fa:8f:43:38:f1:86:
                    e2:f5:c0:32:81:27:b3:6a:6b:b1:1f:e3:83:7f:ef:
                    39:19:fb:9e:2a:7e:74:d0:49:d6:b3:7b:47:3c:37:
                    7a:99:2d:54:e5:87:90:82:2c:b1:7b:6e:06:4d:62:
                    52:c4:1c:76:a2:e8:d4:a0:dd:49:82:76:34:9a:dd:
                    ff:35:58:ef:87:80:e9:3e:36:bf:19:ce:09:99:34:
                    14:be:6c:cd:24:a2:23:a1:37:a8:d5:43:5d:56:06:
                    30:2f:8a:c4:cc:52:27:f9:6a:12:07:d5:c4:f7:8b:
                    4d:31:2c:3a:f2:16:f4:62:67:fd:7c:3a:3e:f9:86:
                    cf:6b:bb:16:40:cd:82:e8:d8:78:a6:32:99:65:95:
                    ca:43:2d:3c:ce:45:66:ef:66:3c:ae:4f:6d:61:47:
                    d4:7e:64:97:63:06:67:93:c4:1c:56:d7:b4:f9:41:
                    86:37:a8:1a:41:80:8e:d4:b2:e8:09:39:8b:3f:9d:
                    f3:83:27:96:f7:2e:6e:3f:87:ba:5f:40:f9:8b:51:
                    1e:f1:04:56:a4:39:4c:b3:4d:cd:91:a8:40:27:b8:
                    02:c0:29:e3:b4:a4:ec:97:c0:c8:da:7a:74:d2:ca:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:FB:3E:2C:E7:09:D0:95:D3:67:14:F8:C3:AB:6D:AC:3D:90:6E
            X509v3 Authority Key Identifier:
                keyid:F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e31322e302e302f31382d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:86:5a:6e:40:95:22:a8:8e:6d:73:08:56:8c:8e:f0:29:95:
         46:3d:8f:3b:51:7c:41:f9:07:2d:00:89:e5:77:e0:b1:1f:74:
         8a:5e:20:03:c2:c5:12:e4:a3:fe:04:e4:4f:57:66:7e:f0:bf:
         c7:54:9e:dc:15:28:fa:6e:e2:db:e1:3d:55:35:53:d1:5c:14:
         be:6d:74:2e:cc:74:5c:00:23:1f:3d:36:c7:c9:b3:99:22:43:
         43:20:10:c3:dc:6f:8b:47:1d:58:13:45:6f:6f:e4:38:86:e2:
         4f:de:7c:e5:0d:fb:e7:3b:1d:ad:e9:55:6b:c7:41:d3:75:6f:
         99:c2:49:4a:9c:03:77:8a:9a:67:a1:13:25:5f:09:d5:b7:00:
         8b:5f:a4:bc:3b:31:3d:1d:09:bd:9f:5c:69:e6:e5:b9:41:d6:
         ab:63:26:9f:48:91:97:3b:b0:07:e5:34:53:9f:a0:d3:71:de:
         50:23:e6:98:ed:f5:0a:9f:46:18:30:e7:00:72:d1:33:9c:d2:
         ce:86:b8:ad:35:24:e5:e8:5c:4b:bb:f8:72:1e:69:50:2a:ad:
         47:a8:9d:40:db:a4:10:71:1f:46:81:ca:d1:e3:a5:7b:9f:ed:
         8a:22:f2:e9:24:27:32:03:94:9c:02:12:c5:72:e4:31:c5:83:
         c4:31:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org