Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38332e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          1fZn8lTCEhjB5LD6o2rTSAmd4J2yKBT0xdshTXrkQh0=
Subject key identifier:   4B:86:14:8C:FA:6D:8E:4C:56:45:7F:1B:28:83:6B:56:16:48:C2:E4
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       44F86D6E379A96DE6C7306FEAD1C7E8418BECEAC
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:05 +0000
ROA not before:           Thu 04 Apr 2024 17:34:05 +0000
ROA not after:            Thu 03 Apr 2025 17:39:05 +0000
asID:                     53047
IP address blocks:        177.101.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:6d:6e:37:9a:96:de:6c:73:06:fe:ad:1c:7e:84:18:be:ce:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:05 2024 GMT
            Not After : Apr  3 17:39:05 2025 GMT
        Subject: CN=4B86148CFA6D8E4C56457F1B28836B561648C2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:17:ad:bb:55:7e:4c:c9:d0:8c:dc:46:f9:
                    5a:0b:78:e7:b5:53:fd:ff:60:c1:50:b7:3b:d6:94:
                    76:cf:ac:78:1a:c9:13:8e:29:1e:ae:0d:bd:e7:6f:
                    7e:fa:ff:e0:b5:fc:8b:8c:1e:90:a6:bb:94:a2:cd:
                    aa:42:00:1f:7a:03:26:a8:48:b3:22:33:78:03:ec:
                    85:7c:4f:c3:30:4e:08:00:f2:50:4f:c8:6d:09:c4:
                    eb:9a:f5:f4:ed:7f:c0:af:9a:99:7c:19:b1:36:02:
                    5e:1b:d3:8f:6c:b3:6f:5a:74:86:05:c6:11:47:9a:
                    e3:fb:85:76:44:67:99:8f:bd:4b:e5:25:f5:84:b0:
                    1d:68:5d:87:53:69:56:1b:5d:4f:6d:b7:9f:e6:48:
                    f4:ab:26:47:73:3b:33:5a:e5:6c:f3:0d:28:6e:14:
                    d3:85:d1:15:4d:01:c0:21:fe:76:b1:99:10:96:a5:
                    8b:16:be:44:30:d1:9d:ee:c0:06:fd:da:54:d9:bb:
                    9e:fe:f9:aa:39:a9:c1:99:cc:89:98:7a:e1:1c:4e:
                    47:9a:d6:dd:39:13:b4:65:37:ce:df:8c:a7:05:e4:
                    cb:2c:cd:2e:ce:9d:f2:af:44:04:f8:32:4b:16:60:
                    ec:31:39:c0:72:de:dc:bf:13:51:38:c0:99:95:67:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:14:8C:FA:6D:8E:4C:56:45:7F:1B:28:83:6B:56:16:48:C2:E4
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:03:e3:a4:22:e5:ca:cb:c9:d2:b9:35:43:0f:16:e2:bf:
         94:bb:e3:74:db:a5:c7:d0:4c:85:3b:bb:e2:72:66:34:59:91:
         02:cc:61:78:43:52:d1:d7:ca:f1:17:93:3a:ca:fb:31:34:85:
         28:f0:e1:f8:b8:bd:30:fd:b1:10:b1:04:f1:98:06:a1:95:d9:
         d1:5e:b4:6b:f7:d7:57:79:6b:f7:9a:e6:f6:cc:9a:4c:1b:1c:
         18:27:ca:5c:17:79:e8:49:71:54:85:8b:34:57:57:49:d6:3f:
         bf:0a:57:0c:76:3c:e6:1a:ff:dd:b4:7c:1a:f6:62:65:ac:f1:
         f6:8d:79:b8:ee:37:32:17:d2:ce:80:c9:ae:58:4a:6f:af:94:
         79:a3:b5:7d:66:eb:fb:a5:72:5c:77:11:15:72:83:67:ec:b5:
         5a:ff:2d:a8:aa:26:90:29:4c:29:29:7f:df:4e:7c:eb:86:d8:
         64:45:74:d0:b8:1e:46:1c:ae:fc:84:12:d1:29:5a:a0:00:e6:
         4e:a2:50:8a:cb:8a:ea:e9:20:ea:d9:62:ce:e6:b0:fd:d7:46:
         f3:3c:19:33:3d:bf:c8:2d:19:0e:05:67:e8:f0:c1:36:92:e1:
         96:4a:aa:65:46:e2:70:98:11:d9:41:55:24:4d:a9:e1:e6:54:
         80:07:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org