Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          p35iPRO8an1leLY5JU6W3Cjst0BWO5/5OsxHumKTuC4=
Subject key identifier:   ED:6F:C3:12:CD:AD:01:4D:08:03:DF:88:71:BB:78:41:7A:80:FE:32
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       671BE756FE21FFBE17C0738FCF0A3B984B6C89E8
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:e7:56:fe:21:ff:be:17:c0:73:8f:cf:0a:3b:98:4b:6c:89:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=ED6FC312CDAD014D0803DF8871BB78417A80FE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:81:f9:01:a9:8e:47:40:04:ce:57:11:7b:53:
                    03:13:9f:43:e1:9a:fa:eb:f2:88:46:6b:2d:62:3a:
                    52:48:19:20:37:0e:a6:a8:b1:c6:b3:3c:1e:07:42:
                    5a:b8:da:92:50:37:79:ba:90:07:3c:c5:a1:e2:7f:
                    a8:96:74:85:2d:1a:84:68:47:0e:64:15:1f:37:74:
                    d3:86:c3:23:9b:6b:ee:a3:63:76:6e:79:3c:aa:58:
                    30:dc:ee:08:db:ae:98:a0:b5:81:bc:c2:a8:d5:e6:
                    b0:71:8f:81:b7:6c:f0:53:da:be:09:20:33:dd:73:
                    86:7d:7d:13:88:55:98:d6:b1:16:91:f8:29:3a:08:
                    e4:7d:f3:b9:cd:ef:71:57:77:23:3d:d1:b2:58:76:
                    9a:e0:62:30:27:90:91:41:e7:7b:0b:d4:40:51:d4:
                    a6:7e:c8:67:94:2f:c8:fb:7f:6c:ba:38:50:ac:1a:
                    60:9d:ec:43:3e:e9:aa:c7:4c:23:13:14:9b:fc:8b:
                    80:e9:0e:98:d5:6d:21:7e:ae:47:b3:25:9b:0d:cf:
                    df:9c:a1:57:3d:28:f7:d6:19:2f:87:fe:02:37:a8:
                    7c:15:ab:37:9a:ca:c8:83:6c:4b:44:a1:dc:a7:09:
                    37:5b:7c:b6:81:eb:35:fa:93:95:b3:71:bf:6f:8e:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:C3:12:CD:AD:01:4D:08:03:DF:88:71:BB:78:41:7A:80:FE:32
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:38:89:6e:1a:22:32:4c:a6:8f:a0:5a:6f:2b:30:8e:33:
         a1:9f:96:f2:7f:be:14:81:36:37:40:08:68:92:2f:12:a5:0d:
         9a:c7:a8:88:61:28:a4:4c:7a:12:02:6d:6c:60:22:02:58:62:
         d5:14:0a:cd:fb:44:b1:b2:0c:45:a0:39:7d:3b:47:d6:34:ed:
         35:1f:78:42:cf:e4:e8:8c:12:cf:72:0e:6f:48:7c:c3:e8:59:
         b3:ae:45:f3:d2:b3:82:ac:9c:0b:d5:f4:c1:5a:d8:5d:4c:36:
         95:f8:0a:fd:1e:a4:1a:6f:5e:12:f9:91:52:a9:2d:90:3c:c7:
         f8:21:c0:c9:c7:23:4a:37:c5:de:97:2d:5e:6d:ae:00:a1:d0:
         f8:d6:fb:2a:f8:08:3f:40:e2:96:2d:2d:c2:64:b5:5c:7d:ab:
         55:e7:52:ab:e5:ab:6e:c4:30:6a:8b:1a:51:a4:76:9f:bf:6d:
         17:92:f2:38:2b:54:25:71:2a:c4:14:c9:42:d4:e8:5a:be:54:
         3b:e2:ff:02:b6:bd:b7:a0:d4:cf:2a:35:45:63:52:ef:5f:44:
         c1:31:db:90:d9:a4:1a:a7:18:e8:7a:96:ec:73:b2:4d:21:5d:
         c0:48:53:cc:67:25:f7:b2:22:01:f8:54:70:6e:21:fb:77:f9:
         b5:2d:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:33 2024 by rpki-client on console-ams.rpki-client.org