Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          e+Goy6MtK1VdHQa8+Q9XEDmMWq64RnNgOqbPrtOReio=
Subject key identifier:   61:63:A7:E7:46:75:0B:98:0A:CD:51:63:86:72:A6:FA:5C:0B:3D:64
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       0131447E8494599792D8FC56EEE1DB1F2145029F
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:05 +0000
ROA not before:           Thu 04 Apr 2024 17:34:05 +0000
ROA not after:            Thu 03 Apr 2025 17:39:05 +0000
asID:                     53047
IP address blocks:        177.101.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:44:7e:84:94:59:97:92:d8:fc:56:ee:e1:db:1f:21:45:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:05 2024 GMT
            Not After : Apr  3 17:39:05 2025 GMT
        Subject: CN=6163A7E746750B980ACD51638672A6FA5C0B3D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:a2:0a:71:b8:c2:54:d8:e5:08:7b:b4:db:
                    15:10:7d:c8:a3:75:0a:8c:31:be:da:ef:a0:8b:d8:
                    69:a7:e5:c2:06:35:4e:d6:b4:e6:92:e4:2a:3d:c2:
                    4a:c1:c2:5f:68:6f:bf:21:b2:6b:d4:0b:92:a5:53:
                    cc:d2:20:cc:6b:06:10:96:5e:74:cf:7a:29:d3:22:
                    ec:12:79:eb:9f:18:a3:b3:9a:a8:36:f4:15:36:14:
                    89:dd:f7:ae:7a:7d:aa:57:40:91:13:e6:cb:39:8f:
                    9a:ac:ac:3e:42:76:d4:48:7a:07:7a:d0:90:7a:75:
                    23:68:68:db:cf:f5:5e:dc:31:73:5d:db:f6:67:1e:
                    fb:ef:c1:68:6c:70:4a:2a:aa:86:43:56:cb:4c:97:
                    65:91:5c:ef:97:f6:4e:a7:57:99:04:8b:ba:c6:18:
                    7e:30:cd:b5:69:88:00:5f:ef:2e:26:e5:38:47:0c:
                    d7:d7:ff:31:89:97:8d:6e:78:90:28:e0:33:f0:db:
                    27:d5:03:5a:fe:f1:6f:1f:1f:b8:af:5a:ef:9a:02:
                    f3:91:e1:07:08:6d:e7:af:ed:76:fe:c1:41:d2:d6:
                    98:9b:31:f1:04:69:a0:68:cd:8e:1d:38:88:8f:65:
                    fb:21:69:8f:a3:de:d3:41:17:ed:c6:3b:21:d6:d6:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:A7:E7:46:75:0B:98:0A:CD:51:63:86:72:A6:FA:5C:0B:3D:64
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:7e:73:39:05:17:3d:b3:44:21:14:46:5c:b9:f9:5e:30:
         48:e1:95:15:c8:c5:16:06:39:fa:74:19:56:82:50:8f:98:76:
         23:5a:59:9d:21:2b:b0:3a:2e:32:85:3e:74:66:73:dd:8f:a4:
         c0:72:48:4f:40:9e:91:be:f8:5c:61:d1:e0:fe:fb:b0:d5:6f:
         f5:9f:9f:7f:79:2c:bb:a1:10:c0:3d:c7:1a:e9:3f:4a:3c:11:
         34:25:4c:94:35:7b:00:61:f1:69:e1:4f:51:0c:da:f3:1a:99:
         02:d1:ab:61:09:a1:f6:0b:5a:4e:05:cc:2b:a0:c0:ee:85:3a:
         a4:c9:2b:03:13:1a:0e:50:d5:7c:6d:ed:d4:35:e5:6d:f6:d8:
         48:f0:26:45:0e:1b:c0:dc:42:19:7d:fa:97:13:da:61:80:60:
         fd:c2:1f:84:a2:8e:02:31:a8:ab:c2:fe:8d:4d:01:df:e8:a6:
         18:73:00:d6:16:ae:70:39:50:f3:61:6b:17:02:ce:19:71:bf:
         9e:28:d2:61:6c:ed:42:a8:fd:5d:4d:6b:cc:b2:53:b3:08:e3:
         cf:07:69:d3:b0:73:ca:e4:42:fa:b5:04:98:44:c9:9d:e3:6a:
         47:fc:35:7a:85:55:39:e1:ac:a8:3f:a3:5f:ed:1b:7e:85:71:
         46:87:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org