Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
File:                     3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa (raw, json)
Hash identifier:          uHsyLr+xZLM6uY9+ZNNiMzgNNK3AUE4L68QtELJ9BMQ=
Subject key identifier:   F4:C0:83:92:AB:19:51:FF:93:00:55:49:D0:C8:E9:F6:1F:9F:AA:B7
Certificate issuer:       /CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
Certificate serial:       42CC74A6D0C16046A6A30E452236002EE2D05BC7
Authority key identifier: F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
Signing time:             Thu 04 Apr 2024 17:57:20 +0000
ROA not before:           Thu 04 Apr 2024 17:52:20 +0000
ROA not after:            Thu 03 Apr 2025 17:57:20 +0000
asID:                     28665
IP address blocks:        177.136.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cc:74:a6:d0:c1:60:46:a6:a3:0e:45:22:36:00:2e:e2:d0:5b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Validity
            Not Before: Apr  4 17:52:20 2024 GMT
            Not After : Apr  3 17:57:20 2025 GMT
        Subject: CN=F4C08392AB1951FF93005549D0C8E9F61F9FAAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:3c:e9:0b:6b:31:a0:bc:dc:1f:b6:a8:69:
                    27:88:98:c3:e4:be:85:1c:2f:1b:c4:a6:ae:ca:7e:
                    f7:ba:0b:0b:b5:9d:2c:3f:84:de:14:01:b2:71:1c:
                    dd:33:c0:1f:77:56:2d:0d:e1:d5:d3:0c:6d:45:4d:
                    6e:b8:19:d8:bc:f8:a1:bd:b7:fe:89:66:0a:62:d1:
                    a2:2f:df:4a:de:0a:da:76:99:ea:f5:4e:1d:de:82:
                    82:43:f7:66:9d:10:8a:2e:4c:93:2c:b1:11:f9:33:
                    96:68:23:4d:f6:dd:19:6b:8c:d7:2a:66:49:39:5d:
                    ad:70:28:f5:8e:99:5b:f0:23:8f:1c:24:56:97:d5:
                    94:d7:de:47:da:21:3d:f2:46:c1:2a:bc:75:e9:14:
                    a2:c8:71:5f:60:af:56:12:2b:fb:f7:4a:2c:37:97:
                    76:ee:6b:e3:b4:a1:ae:7e:22:2a:a1:be:2e:50:d0:
                    97:9d:8a:62:f0:5e:e4:45:9c:ea:ae:fc:c0:4f:61:
                    06:47:8c:83:9a:9b:a9:cd:5a:f0:e6:5a:4a:60:5f:
                    32:b2:bf:61:50:a2:c6:d3:7a:23:4e:b9:22:77:36:
                    04:f9:41:71:6d:9f:95:76:d2:c5:76:44:df:ff:5e:
                    87:98:16:aa:c2:1a:e2:33:22:b2:e4:37:70:75:76:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C0:83:92:AB:19:51:FF:93:00:55:49:D0:C8:E9:F6:1F:9F:AA:B7
            X509v3 Authority Key Identifier:
                keyid:F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:18:c6:fe:56:4a:52:67:ec:f1:2f:e1:dc:97:1c:68:4c:00:
         d3:b9:80:0a:21:36:b7:60:5f:3c:47:9a:f6:e3:06:ec:d9:c8:
         f6:d8:f6:73:b7:19:48:ae:af:ee:05:0f:3f:e8:87:8b:53:bb:
         0d:82:15:86:d4:04:64:5e:56:a2:1a:83:c9:02:be:f5:19:86:
         8d:47:94:13:c1:75:f6:a0:f0:b5:d5:82:3d:ff:5f:05:a4:3f:
         20:b1:de:ec:9a:26:b4:80:0b:b2:04:53:7e:e9:60:e4:16:ff:
         53:25:c7:10:2f:b1:e7:14:27:6d:27:aa:83:9c:cf:f2:54:e3:
         af:47:84:97:dc:52:b1:1d:6b:10:93:33:ad:7a:7e:6d:da:40:
         49:8f:61:a1:ec:de:3b:59:39:d0:8a:2e:f7:55:34:b5:d8:c8:
         64:ab:e6:a9:27:31:07:89:3e:9a:56:21:b3:2d:9c:9c:85:86:
         c0:d9:7c:fe:57:e0:3b:e8:ef:a0:7c:ef:e2:07:08:e4:48:b1:
         1b:9e:aa:14:1d:70:c0:a3:24:c5:3d:0b:fa:90:83:77:c2:30:
         73:c7:dd:82:50:14:52:7f:1b:0a:cf:5e:55:3e:0c:5a:3d:0e:
         ce:52:8c:6b:92:da:4f:e9:df:0b:fc:86:d7:cc:57:36:62:91:
         b2:46:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org