Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38322e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          4IZvO3227P/ptTGy8vn6H97HeK/1eYXDMrBfrFmfJDw=
Subject key identifier:   C2:69:DF:52:46:7D:C6:2C:A5:34:AB:8B:39:3D:AB:92:A5:11:21:1C
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       467F675D2377C04FAA5A85CD76796573E3A4F6FD
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:67:5d:23:77:c0:4f:aa:5a:85:cd:76:79:65:73:e3:a4:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=C269DF52467DC62CA534AB8B393DAB92A511211C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:36:76:72:69:86:66:44:eb:ad:e8:6f:47:
                    41:a4:56:e1:bd:17:fe:a3:dc:2d:13:90:a4:09:ac:
                    df:1b:ec:be:e5:65:f3:a2:8f:80:42:71:53:2e:b0:
                    18:11:0a:80:a8:ea:10:c6:7d:36:3b:48:19:a9:42:
                    b1:ef:c2:e5:b7:2f:6c:ca:86:68:ab:96:4d:f4:c4:
                    93:8f:11:d5:58:20:3d:65:dc:b9:ec:17:80:26:27:
                    26:bd:d3:ae:ed:41:4d:37:22:ea:23:21:80:20:c4:
                    2a:b5:bd:7b:dd:bb:da:f1:62:a3:21:2e:94:5b:00:
                    65:ef:22:3b:42:4b:c4:b3:ff:5b:ce:75:d1:14:9a:
                    c5:32:ad:a5:77:f5:f1:91:64:9d:91:3b:5d:48:35:
                    f0:c8:bd:db:e7:cb:aa:26:53:91:37:5b:37:87:cc:
                    a9:26:d4:d5:98:33:73:c9:0b:10:9f:f2:70:5d:e3:
                    39:7d:ce:69:c6:70:81:d1:af:29:4b:9b:69:4f:c8:
                    20:b5:6d:75:5e:c2:79:ef:03:b1:96:a3:b1:68:95:
                    66:de:4f:10:49:6b:2e:6b:37:49:08:e9:b9:94:ae:
                    e0:1d:aa:1f:20:8e:2e:44:04:55:0e:66:09:0e:cb:
                    7e:5e:40:4a:f4:c8:15:57:06:4a:93:ff:ff:f2:d0:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:DF:52:46:7D:C6:2C:A5:34:AB:8B:39:3D:AB:92:A5:11:21:1C
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:96:0d:24:95:42:0e:8a:13:7e:e0:f8:a7:72:38:33:e2:
         cc:e4:05:44:34:60:1c:3a:28:0c:39:7e:69:fe:b2:5a:ec:4b:
         ce:16:1b:1a:64:cb:77:a0:53:a3:c4:00:63:01:fa:9e:81:cc:
         50:d5:da:5d:ec:ff:74:4e:26:0d:45:76:9b:77:b9:a0:44:ab:
         be:f2:3e:e8:eb:d6:36:d5:11:66:0e:bf:57:e3:e0:a8:bc:46:
         c2:0f:58:07:23:86:91:76:fe:dd:7e:f3:7e:9d:cc:92:4f:68:
         9c:39:dc:39:a2:a2:00:8f:79:c7:4c:44:8c:c2:cc:d1:5e:72:
         b7:72:47:45:25:94:1f:62:36:98:50:b2:a0:55:af:02:4a:c2:
         72:38:a3:a8:b0:98:b4:9a:55:6b:62:6c:00:7e:3c:c4:35:3e:
         9e:b2:e7:4f:5d:01:29:3a:4c:3c:e3:a2:2c:2d:ec:02:d8:4f:
         36:ff:3a:1d:ab:4b:52:f1:61:7a:53:32:42:2f:ba:97:29:56:
         af:9e:a2:01:89:cf:da:00:a4:5e:33:42:43:87:7b:b0:28:fc:
         76:d8:34:8f:a0:82:0b:fe:0b:a7:b0:e9:43:d8:d5:e4:04:76:
         7c:23:c7:cd:9c:3a:19:7a:ca:87:d9:cb:2a:52:63:bb:79:ff:
         ec:1f:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org