Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132312e302f32342d3234203d3e203532383532.roa
File:                     3137372e38362e3132312e302f32342d3234203d3e203532383532.roa (raw, json)
Hash identifier:          EhAfwPWuuzKNlDD+zTqRsp38LkjBgJYzdfINZRGDTvU=
Subject key identifier:   CC:A7:9F:94:5A:3D:BB:38:60:B0:1D:7A:08:2C:2E:05:F8:59:04:C3
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       441AE9AA44DBA8E94E34E7A9B5C9A99D912F43E7
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132312e302f32342d3234203d3e203532383532.roa
Signing time:             Wed 03 Apr 2024 19:47:04 +0000
ROA not before:           Wed 03 Apr 2024 19:42:04 +0000
ROA not after:            Wed 02 Apr 2025 19:47:04 +0000
asID:                     52852
IP address blocks:        177.86.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:e9:aa:44:db:a8:e9:4e:34:e7:a9:b5:c9:a9:9d:91:2f:43:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Apr  3 19:42:04 2024 GMT
            Not After : Apr  2 19:47:04 2025 GMT
        Subject: CN=CCA79F945A3DBB3860B01D7A082C2E05F85904C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:3a:7c:ab:3b:44:9e:4e:51:fa:aa:6c:52:
                    2d:17:71:3c:87:4f:1e:34:05:e1:5a:93:af:1b:aa:
                    79:e3:94:01:47:eb:0d:5b:95:c5:9a:1d:1c:18:55:
                    3b:91:27:2d:3c:84:ce:47:29:56:c7:4c:4a:ca:45:
                    e6:e8:ee:ca:f6:48:d9:e9:b0:eb:4b:d4:42:90:35:
                    04:ca:2c:a9:39:e9:8e:d4:80:39:f9:6a:d0:1b:a9:
                    c8:ac:b0:18:c7:4c:99:29:3f:1b:2e:31:cb:88:65:
                    c2:29:59:7b:de:f5:aa:1c:92:7e:c0:6c:cf:e7:7e:
                    e6:8a:c8:1a:a3:2c:25:be:4e:a6:75:63:85:05:e7:
                    d0:b3:ff:66:74:fc:cc:a1:30:a0:b8:bc:15:6f:3c:
                    2e:ab:ad:36:d5:17:0c:17:17:39:b9:35:ce:82:c5:
                    09:11:e8:51:ca:96:16:3d:a1:bf:55:ff:48:e5:a4:
                    31:47:06:78:cc:09:61:42:a8:a4:a8:3a:30:23:1f:
                    8a:50:d3:a6:21:18:ff:57:f1:0e:90:4a:ec:f9:bc:
                    72:da:cd:3c:0a:68:30:1f:7f:b1:f6:ed:f7:12:66:
                    71:db:e0:49:9b:6d:be:cb:a7:27:34:75:0f:7f:d8:
                    cc:18:57:a3:fc:55:a4:ad:1e:ec:ea:6e:6f:58:93:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:9F:94:5A:3D:BB:38:60:B0:1D:7A:08:2C:2E:05:F8:59:04:C3
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132312e302f32342d3234203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:9e:c3:e6:76:48:56:77:db:04:ec:37:ab:78:01:54:95:
         0f:c9:74:b1:f8:87:7e:f1:4e:9a:2f:6d:dd:c8:56:10:e2:29:
         3c:18:f4:73:89:20:d3:0a:36:ad:dd:48:42:db:07:91:29:ef:
         e9:71:75:86:c6:96:26:09:f8:0b:e3:30:90:7d:3b:a9:a1:55:
         ba:66:73:f3:ad:94:0d:1d:69:59:86:8b:04:2b:0c:db:f3:c6:
         32:c6:1f:7f:d7:8f:e1:0f:46:7e:b4:33:a7:1e:0d:36:94:ff:
         3a:5d:ca:e3:c6:54:22:86:06:3c:da:86:d8:a8:8c:ff:41:c4:
         39:d3:a4:58:de:d2:b7:25:2f:6a:ac:21:57:50:b5:cb:86:b1:
         8e:70:da:a2:ab:6d:18:fe:41:60:22:d5:27:a8:43:9e:64:a4:
         99:a5:b6:79:a1:f1:04:c0:21:8b:eb:24:8d:7a:70:92:d0:79:
         90:e0:c4:fe:ae:96:df:69:3b:3d:7f:2e:a1:48:bf:3a:69:36:
         e0:16:2f:dc:7d:fa:2b:02:9b:39:e8:8e:d7:26:53:23:08:7c:
         da:69:a1:98:d7:d6:7c:cd:f3:35:a3:41:a9:96:f9:ad:e4:3b:
         16:93:a9:bb:b1:d9:9d:22:c6:17:45:6c:1b:11:cb:a5:5a:c8:
         f9:b5:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org