Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38342e302f32322d3232203d3e203532373030.roa
File:                     3137372e37332e38342e302f32322d3232203d3e203532373030.roa (raw, json)
Hash identifier:          qbPkVPa0ZEsQw62D2BW2r1Gmw+Wd2sLTTpIitwpzOCs=
Subject key identifier:   35:03:16:F9:64:11:AB:CD:A8:87:2C:8C:C1:8D:9D:56:1F:4E:75:43
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       302052B438CBC59FEA433B5CDB2EFC7D086F6678
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38342e302f32322d3232203d3e203532373030.roa
Signing time:             Thu 07 Nov 2024 18:18:58 +0000
ROA not before:           Thu 07 Nov 2024 18:13:58 +0000
ROA not after:            Thu 06 Nov 2025 18:18:58 +0000
asID:                     52700
IP address blocks:        177.73.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:20:52:b4:38:cb:c5:9f:ea:43:3b:5c:db:2e:fc:7d:08:6f:66:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Nov  7 18:13:58 2024 GMT
            Not After : Nov  6 18:18:58 2025 GMT
        Subject: CN=350316F96411ABCDA8872C8CC18D9D561F4E7543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:bb:95:08:c1:84:87:ea:8c:f5:19:9a:e7:
                    f5:da:cc:b4:d3:4a:93:c2:05:cd:7a:e4:c1:b5:67:
                    87:94:07:13:de:21:c0:cf:40:9a:90:86:a1:64:f0:
                    25:d8:1e:30:47:18:c3:6b:59:0d:0e:7d:b1:5f:23:
                    16:ba:26:75:cb:05:30:ad:42:cc:19:47:29:c6:ed:
                    63:d4:86:71:0a:62:d5:8e:f9:72:7a:5b:91:01:0e:
                    a5:40:0d:e9:ad:4a:6e:e3:d2:48:be:d6:1b:bf:2f:
                    b8:53:5e:20:97:bb:ff:08:58:46:44:25:8b:76:fb:
                    cb:2e:e4:86:82:9b:41:93:c6:c7:53:14:84:e0:b9:
                    47:cd:fa:8a:a7:9c:d0:ca:72:35:eb:4e:e8:2b:49:
                    2a:c9:f9:bc:ff:15:09:f5:46:fd:39:99:5d:00:5e:
                    68:be:e2:5d:2c:7d:72:2c:73:79:54:46:9d:be:5f:
                    13:e2:3a:2b:84:fb:5a:d1:d4:d9:f0:0d:32:5d:df:
                    5a:b7:0c:38:7e:f1:44:0c:be:2f:e7:fe:60:ea:78:
                    2f:dc:1e:8b:5b:3e:4d:d7:4d:fe:ee:51:2b:55:e5:
                    c6:9f:52:34:7f:57:a3:60:65:ed:e3:93:82:b3:3a:
                    39:98:c3:ed:0b:05:57:d0:cb:e2:6c:7f:36:e6:fa:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:16:F9:64:11:AB:CD:A8:87:2C:8C:C1:8D:9D:56:1F:4E:75:43
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38342e302f32322d3232203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:23:d6:5a:83:5e:d8:f5:90:f3:67:2a:7e:0e:49:2d:f7:
         dd:0e:63:8d:f1:ca:4d:c4:b4:f8:e1:07:69:f9:b0:bd:b9:37:
         94:fe:be:4f:a9:27:44:77:86:f4:61:e8:d2:5b:5f:9d:b5:be:
         16:5a:01:2d:f9:25:4f:09:9c:d7:18:26:0c:66:e9:81:9c:3a:
         49:58:bd:ee:0d:72:67:fb:63:0e:68:b4:39:ff:ab:9a:6f:9e:
         8b:db:50:07:52:ba:58:6f:66:c1:85:6b:bd:a9:af:3d:b0:28:
         fd:49:95:4f:bc:61:25:17:c7:d3:72:9d:a7:91:62:d5:6d:97:
         d1:23:42:ab:87:c8:5c:17:81:73:5a:a1:b0:f8:38:15:b4:df:
         d8:5c:80:21:f4:f5:5f:a1:3c:f1:19:17:72:b8:7a:cd:90:66:
         ec:08:99:08:6f:a9:5d:37:88:91:3f:3d:0d:3c:ec:b9:b6:a6:
         54:08:8f:c2:d8:5c:98:ec:fc:36:32:61:5c:f6:31:96:c5:6d:
         59:41:a1:53:b2:54:59:5c:0e:07:68:b7:10:26:a2:03:5e:c7:
         26:8f:e7:26:34:2e:4a:09:cc:90:e7:4f:ee:2d:df:50:cc:f5:
         b5:af:d1:14:c3:49:ad:4a:71:ee:bf:9c:30:75:8a:99:c0:d7:
         5e:b7:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:52:01 2024 by rpki-client on console-fra.rpki-client.org