Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          c2y0SCAGa60XhrVEU/oqnPCl/vv0Ac/3cE/Z7cR/c+A=
Subject key identifier:   D5:10:4D:29:18:AB:68:BB:26:F8:4E:1E:5F:1F:BD:4E:8D:A3:F8:4B
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       03F3F742B5400D4C9C7DA99CFC9DBE51B15EAFE8
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:02 +0000
ROA not before:           Thu 04 Apr 2024 17:34:02 +0000
ROA not after:            Thu 03 Apr 2025 17:39:02 +0000
asID:                     53047
IP address blocks:        177.101.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f3:f7:42:b5:40:0d:4c:9c:7d:a9:9c:fc:9d:be:51:b1:5e:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:02 2024 GMT
            Not After : Apr  3 17:39:02 2025 GMT
        Subject: CN=D5104D2918AB68BB26F84E1E5F1FBD4E8DA3F84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:e6:3c:37:e8:ea:b4:43:23:48:6d:a7:5a:
                    dc:fa:db:90:3f:78:62:3c:65:e5:c2:50:d8:ac:d2:
                    74:db:88:fd:c1:33:75:55:b0:b8:fb:0c:2c:61:d3:
                    36:90:ac:8b:54:a6:d1:38:ab:0f:58:6d:d5:47:bc:
                    6a:42:08:ba:d0:4b:2b:56:e3:06:ed:23:bd:0e:72:
                    50:e1:20:c9:e8:f8:e2:8f:bd:20:cb:49:76:19:ba:
                    cf:53:dc:5b:a1:4f:ce:f8:89:e7:ae:98:a2:cc:ef:
                    93:68:2b:60:77:d2:82:48:b6:0c:32:00:28:7f:03:
                    26:5a:a9:36:71:b9:58:10:04:3c:be:2a:0d:22:c8:
                    fa:bc:ca:ee:26:1e:54:d3:9c:60:6f:25:5a:15:fa:
                    ee:53:36:cf:f6:15:5e:67:2a:09:5c:9b:ae:9b:0f:
                    7e:0e:d8:42:40:15:6d:86:27:58:9f:3d:09:5b:fb:
                    e4:05:b5:ba:21:c4:51:60:a0:f3:f9:f9:8a:ae:f1:
                    29:67:77:c0:81:2d:c3:60:07:48:ef:94:62:99:da:
                    83:c1:bb:38:61:2e:6e:fa:7d:97:81:f7:36:11:6d:
                    e7:77:6c:db:1a:30:79:cb:5a:6b:d0:ed:8d:ea:38:
                    f5:3e:95:d1:dc:79:79:73:4a:d5:a2:33:b0:7f:05:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:4D:29:18:AB:68:BB:26:F8:4E:1E:5F:1F:BD:4E:8D:A3:F8:4B
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38302e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:82:55:a2:79:0d:2d:14:c8:f8:06:77:96:b7:c5:8c:ff:
         87:eb:71:ba:9c:1d:13:9e:75:a2:f3:fb:5a:5b:57:ca:22:d5:
         a4:1d:c5:ec:bb:c2:3b:71:48:be:62:ed:0c:a0:84:a2:c2:e4:
         13:38:8a:dd:4e:67:8a:f2:13:20:2d:da:5e:f7:d9:12:4c:0f:
         63:74:ac:eb:87:36:7b:8a:9e:a1:b4:45:3e:d8:10:d2:5d:33:
         8f:a3:b2:7d:f4:c8:f1:66:62:01:fc:e4:56:d9:a2:65:92:1e:
         34:50:9c:5e:3a:36:fa:4a:2f:29:5d:64:a3:fd:57:03:e8:35:
         cb:2f:90:f4:3c:bc:5e:29:b3:07:9a:48:80:69:8b:08:40:b6:
         e3:58:f2:41:2d:cf:c3:9a:6c:a6:84:2e:8a:27:10:e7:80:67:
         9a:9a:58:6b:66:59:d4:ac:00:f6:d2:ba:49:26:3d:86:a1:30:
         29:71:c8:10:51:bb:76:e1:05:9e:2f:ae:7c:88:ee:bb:e4:c1:
         e2:c9:31:b7:ec:e4:ad:ed:99:61:0c:3a:cb:49:e7:1c:8e:06:
         93:17:c7:02:f3:6c:6c:09:63:e9:ab:aa:a7:33:ed:d3:57:9b:
         a6:b5:a8:04:4f:ff:d3:46:08:b6:0e:d5:26:b7:32:22:d2:6f:
         b3:b7:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org