Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38362e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          PNbkAedpsBZWjgw1hcaNWJEOIoM6BXFxW/2EojcDfjI=
Subject key identifier:   7C:6D:6E:5C:C9:39:7B:F6:66:92:09:DA:1E:05:9C:8A:CC:07:65:9C
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       22FAEAB53DB200E76D60354DC55BBA4C7F542BDC
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:03 +0000
ROA not before:           Thu 04 Apr 2024 17:34:03 +0000
ROA not after:            Thu 03 Apr 2025 17:39:03 +0000
asID:                     53047
IP address blocks:        177.101.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:ea:b5:3d:b2:00:e7:6d:60:35:4d:c5:5b:ba:4c:7f:54:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:03 2024 GMT
            Not After : Apr  3 17:39:03 2025 GMT
        Subject: CN=7C6D6E5CC9397BF6669209DA1E059C8ACC07659C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:db:6d:0b:b6:0f:65:b5:57:d3:bf:fa:6d:
                    4a:26:1f:1b:a5:6e:b3:28:6f:8d:5f:74:f5:bb:2c:
                    cf:c5:19:80:d6:6a:2d:01:c7:8d:14:69:22:ba:3e:
                    fe:d7:34:ec:10:7e:05:a7:2e:41:65:dc:bb:39:4d:
                    36:63:41:5a:8d:08:39:e6:99:26:97:fd:db:ae:b4:
                    76:aa:ea:74:ad:31:34:4f:a4:62:78:f3:44:f7:76:
                    cc:f1:08:09:4b:1c:07:48:b7:6f:e5:5f:3f:99:17:
                    f9:45:6c:ec:b8:0c:17:b8:76:32:44:c7:4f:4d:19:
                    c2:af:f8:e6:47:c0:03:d4:87:8e:31:d6:21:24:67:
                    29:0f:de:f8:51:59:40:e4:6b:bf:51:b0:a6:30:9a:
                    35:79:35:d9:9d:fe:03:76:30:c7:c7:26:4b:4c:3a:
                    a1:aa:c0:24:be:6a:1c:44:8b:16:6a:da:3c:2e:a3:
                    e6:5e:b4:e8:a4:14:7f:1b:ac:4a:2a:62:22:f3:05:
                    f4:a5:5c:05:fe:a5:f7:23:ae:e0:57:98:ef:9f:ea:
                    b7:7c:26:15:5a:e4:4d:c9:56:ae:ca:e4:5d:de:f8:
                    87:c9:a4:62:cf:f7:8b:98:9a:35:a1:c4:8c:00:3e:
                    8d:e8:45:b3:b9:63:47:49:b2:37:18:9d:b5:05:07:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:6E:5C:C9:39:7B:F6:66:92:09:DA:1E:05:9C:8A:CC:07:65:9C
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:36:78:7d:87:4d:85:79:ff:33:c4:36:e7:89:13:e8:f4:
         74:5a:39:2c:fc:ef:9a:f4:f6:97:bd:63:ac:78:9a:b4:7c:d0:
         5f:9e:44:a3:4f:29:a4:7f:24:79:27:c4:49:f9:f8:e0:c7:e3:
         2a:99:83:17:bb:8b:21:62:91:68:5c:29:0c:57:93:61:43:17:
         ac:34:e5:c2:e8:cc:28:00:10:7c:6a:76:60:0a:3d:75:a4:42:
         61:0f:b7:fe:d3:00:c4:6a:4d:75:b2:ea:cf:8f:f9:d9:45:61:
         36:84:53:04:f3:c5:2a:39:e0:0a:48:5f:c1:dd:07:16:63:7e:
         ae:57:42:99:9e:43:11:82:3a:33:c2:87:76:31:0e:23:9b:14:
         1b:4b:e7:2d:b3:ee:a7:a8:76:26:91:f3:52:69:42:e6:f5:80:
         da:c6:0e:71:64:14:ca:d1:e2:87:5e:a8:4a:d3:d4:1e:a9:d7:
         9a:71:18:44:df:bb:9b:66:98:05:4e:b7:eb:25:56:6f:e2:fc:
         0e:7a:2f:fe:91:84:0a:ad:0d:24:2a:10:32:ce:92:1f:ca:b1:
         36:bb:f5:78:9f:6d:a2:3b:c0:e8:6f:ce:00:0e:5d:43:03:61:
         b6:db:4e:bf:cc:45:9a:ff:a5:46:3d:3a:82:d5:22:df:17:7b:
         23:27:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org