Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38322e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          HVsJRJTXQV+snk4Y21MZM4n5KptKyRjiGEtQzaEKctc=
Subject key identifier:   7A:26:56:29:A1:59:73:4D:43:0E:99:F0:F9:EC:B5:10:17:1E:DF:92
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       48A4B69F02BE75C2AF83D8996AA04849D200334E
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:02 +0000
ROA not before:           Thu 04 Apr 2024 17:34:02 +0000
ROA not after:            Thu 03 Apr 2025 17:39:02 +0000
asID:                     53047
IP address blocks:        177.101.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a4:b6:9f:02:be:75:c2:af:83:d8:99:6a:a0:48:49:d2:00:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:02 2024 GMT
            Not After : Apr  3 17:39:02 2025 GMT
        Subject: CN=7A265629A159734D430E99F0F9ECB510171EDF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:a5:80:49:c2:a4:75:71:ff:17:c2:92:ec:
                    cc:31:45:bb:4c:41:0a:bd:ba:f5:f1:47:f5:de:ec:
                    61:94:59:b8:ac:86:b5:3d:5c:01:08:d5:6f:2c:7a:
                    59:07:49:96:41:77:8a:15:37:79:69:fb:c0:e9:9c:
                    6e:dd:f4:98:b1:00:1d:f8:19:5f:12:ec:54:e1:f7:
                    2a:06:69:53:b4:0b:55:5c:ca:51:b8:72:70:2b:ac:
                    ac:1e:97:9b:69:f1:da:5f:6c:c8:c7:b0:09:80:1d:
                    0d:7e:e4:a1:68:27:e3:5c:63:94:a4:17:7d:80:d3:
                    a6:1f:28:df:d2:23:fd:39:68:76:f7:05:24:77:09:
                    d1:41:52:b0:64:47:fe:d4:8e:3d:38:84:4b:63:e1:
                    a3:d3:37:5e:32:11:36:f4:1f:86:5a:a8:8c:01:48:
                    d1:b1:16:5a:2a:8f:ed:c5:b8:1a:3b:2f:00:c4:b4:
                    e4:a9:1b:bb:72:2c:9e:40:f8:a5:ad:e9:e3:78:a7:
                    f3:89:a2:1d:25:ef:24:8f:7c:0d:f3:8a:36:c6:69:
                    63:99:72:03:da:a8:f2:a1:ce:35:68:b9:bd:84:b9:
                    b9:f5:b1:34:c1:6b:5c:54:13:7a:5b:cf:c7:25:0b:
                    85:fc:2d:16:e2:18:e0:5d:25:93:76:d6:e9:43:a5:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:56:29:A1:59:73:4D:43:0E:99:F0:F9:EC:B5:10:17:1E:DF:92
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:ae:bc:53:88:19:44:e3:5d:fc:aa:b9:83:e4:f8:05:37:
         dd:f4:1a:22:1f:79:e1:11:4d:e9:e9:54:b3:0d:1b:09:9f:01:
         e2:35:d6:57:96:c6:e0:e0:58:c1:b7:48:f9:c9:53:8f:7a:0c:
         49:55:7c:3d:e1:50:79:68:e4:73:9b:14:05:58:9a:c6:98:20:
         1e:20:c1:c7:ed:df:b7:81:db:fc:6c:cb:1b:34:69:2d:03:3a:
         ea:d9:7a:b3:2c:4b:40:90:84:f2:9c:ce:48:2e:d6:47:59:2f:
         4e:7c:c2:f1:d0:c4:2a:76:9a:f2:56:f6:ed:aa:65:3b:d5:00:
         7a:7e:91:58:6b:81:2d:4e:8f:6a:f8:45:20:ef:6a:d4:fb:55:
         bf:22:19:21:30:c6:02:26:4d:4b:76:e6:5c:e8:d4:41:20:8d:
         99:cc:51:0d:05:7b:c4:b8:0d:33:0b:ec:a5:06:5d:40:22:4c:
         0a:73:16:0b:41:35:84:63:45:4e:ce:b8:a3:a8:51:4c:bc:54:
         f7:aa:ed:df:b5:7b:42:9e:b0:6a:37:97:de:df:6b:f8:df:91:
         00:ce:d2:04:6e:ba:b7:5a:46:d0:ec:23:c6:f1:f4:08:05:56:
         24:35:5b:48:8b:4c:c5:e6:d7:d7:85:73:c7:ee:96:43:3c:b0:
         05:a2:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org