Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          v8iqF44t8N1ThyM43zz892Frg4+O1ucxXSquM/b1viY=
Subject key identifier:   39:56:C4:98:1F:B7:68:EA:0B:94:E6:24:92:60:96:48:5E:E2:5B:35
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       26F97AB31AEAC879664BB9B0D6C916211C22634E
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:01 +0000
ROA not before:           Thu 04 Apr 2024 17:34:01 +0000
ROA not after:            Thu 03 Apr 2025 17:39:01 +0000
asID:                     53047
IP address blocks:        177.101.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:7a:b3:1a:ea:c8:79:66:4b:b9:b0:d6:c9:16:21:1c:22:63:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:01 2024 GMT
            Not After : Apr  3 17:39:01 2025 GMT
        Subject: CN=3956C4981FB768EA0B94E624926096485EE25B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:bb:08:34:da:31:d6:c9:75:de:71:1c:ba:
                    5d:b4:e3:aa:ca:6f:f1:2b:ff:1c:1b:2a:f6:24:c0:
                    85:e7:e9:7a:bd:51:95:a9:41:ed:c7:60:4d:6f:09:
                    81:a3:ad:e1:11:83:57:46:ae:4d:87:45:e0:51:a8:
                    3f:71:39:07:40:91:71:3d:2c:c3:1c:0d:b2:1e:8d:
                    91:48:b7:16:ca:c7:0f:2c:83:2e:d9:a6:ee:b0:c0:
                    47:4c:26:f3:b1:24:78:14:1a:3f:76:eb:8f:6c:82:
                    52:33:d7:c9:22:15:0d:a3:80:ce:43:d1:38:7f:29:
                    a9:5d:76:21:b9:9e:aa:0f:53:b6:19:7a:6a:ef:ae:
                    31:4a:b8:5d:39:30:2c:d4:dd:40:f7:ec:50:6b:53:
                    d1:63:eb:a3:c2:35:02:65:a8:4b:e5:b2:2c:c5:53:
                    13:bf:ba:ff:a5:d5:ec:81:7b:d7:2c:01:8e:c7:c2:
                    9a:74:a0:0b:0e:53:74:37:1b:25:a2:60:ee:e7:73:
                    23:da:95:8f:2f:58:6d:79:18:77:5c:95:aa:af:b9:
                    54:96:fc:dd:72:1c:45:34:68:5d:e1:8d:5c:5f:1d:
                    12:0c:b7:4b:0c:d2:aa:62:a6:98:82:da:1b:a9:19:
                    49:ca:47:84:40:33:3b:fc:68:75:1b:5c:c4:a5:90:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:C4:98:1F:B7:68:EA:0B:94:E6:24:92:60:96:48:5E:E2:5B:35
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:62:02:72:1b:e0:d6:00:30:5e:7e:d9:47:67:e8:fc:e3:
         0e:38:79:8e:6f:1c:58:cc:40:d9:34:63:cf:57:71:07:06:13:
         0f:f4:d5:9f:91:54:b5:01:60:eb:47:28:ba:0b:e3:e3:1e:69:
         d4:da:60:6f:b9:ac:f4:e8:a7:12:9f:59:82:56:f2:72:7f:3a:
         48:bd:9c:4c:0c:f2:58:fb:77:3e:83:e5:6f:8d:fd:73:db:6a:
         cc:db:b1:0a:19:54:1c:31:34:58:2a:1b:4c:8d:d0:29:80:47:
         50:40:92:d2:be:8f:4b:1b:9a:8e:97:e3:28:d2:78:ff:6d:d2:
         8d:87:40:54:55:98:7e:e4:50:1e:a3:3c:0a:4e:b6:35:30:2c:
         2f:cb:f9:20:71:72:b2:1b:f9:27:d0:e3:e4:ee:5b:96:bc:d9:
         cb:bc:bc:05:f4:0d:4d:b1:29:59:ad:66:37:ff:ec:31:aa:66:
         79:2e:ba:3e:ef:d3:27:19:72:53:96:3b:83:74:37:9e:d1:b8:
         29:18:c7:1a:10:7a:72:dc:10:05:98:35:7c:09:82:26:dc:db:
         84:44:e8:0f:89:ff:4f:22:9b:72:26:c0:d4:f5:1a:78:cc:f9:
         e9:cf:b7:3b:85:62:7f:6b:05:19:be:46:79:f3:58:8f:b2:97:
         c9:9b:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org