Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          1GkdMlU/FvAyW4othzZhwQelX4VrlaNFjw/kZuR0pPQ=
Subject key identifier:   DA:21:B2:94:C8:FE:AF:97:EF:26:AC:CB:35:4E:75:EC:3E:9E:E6:44
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       1D3B4DD417FDECACA5BD49098243373193C23B32
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:01 +0000
ROA not before:           Thu 04 Apr 2024 17:34:01 +0000
ROA not after:            Thu 03 Apr 2025 17:39:01 +0000
asID:                     53047
IP address blocks:        177.101.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3b:4d:d4:17:fd:ec:ac:a5:bd:49:09:82:43:37:31:93:c2:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:01 2024 GMT
            Not After : Apr  3 17:39:01 2025 GMT
        Subject: CN=DA21B294C8FEAF97EF26ACCB354E75EC3E9EE644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:9d:0b:58:30:ef:97:49:8c:8e:b9:d0:e0:
                    ed:bf:72:6f:c9:4a:af:bb:69:46:76:86:06:a2:ff:
                    ba:e5:2c:c6:73:3c:e0:d3:ce:00:05:43:fa:d1:f0:
                    6b:9e:12:9f:5a:85:3d:33:80:76:f3:d7:72:6a:da:
                    7b:36:01:57:75:8e:04:78:31:d1:71:20:12:0a:b4:
                    cb:66:01:b4:42:49:92:31:a0:a8:7e:22:0f:26:e5:
                    67:a8:7b:6b:9e:8b:22:fe:57:91:c9:dd:93:de:e7:
                    ce:c7:0e:5b:9f:4a:24:1d:d4:24:c0:16:bc:fd:6a:
                    15:df:27:9c:5e:e0:44:33:13:81:2c:d5:51:47:16:
                    97:48:2f:66:f8:a4:0b:37:0a:ff:86:99:9c:09:fa:
                    fd:16:a0:6e:0c:b3:f2:79:11:ed:60:d0:3b:68:aa:
                    f8:04:09:4c:10:a1:34:90:f3:f7:54:b3:c0:aa:78:
                    36:0f:3a:d9:58:5e:b6:cd:05:8c:a7:ef:09:20:d8:
                    4e:55:76:08:ea:3b:49:5c:e9:60:e6:f3:8d:e5:06:
                    46:e1:43:75:5e:c8:0b:d8:89:15:18:34:b5:52:e9:
                    8b:54:e9:0e:ff:84:7c:a6:4d:57:3d:5e:6d:c7:30:
                    d1:b6:f1:8f:9a:6d:a0:75:c6:ea:70:35:dd:c6:34:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:B2:94:C8:FE:AF:97:EF:26:AC:CB:35:4E:75:EC:3E:9E:E6:44
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ad:a9:0f:34:d5:e8:b5:28:2b:84:b4:7d:8f:a4:c2:a2:3a:
         98:93:9a:57:65:0a:a4:f4:be:37:52:26:3b:56:20:e5:05:4b:
         04:01:3c:39:ca:da:c2:de:1d:05:43:2e:92:6c:de:d1:18:50:
         44:dd:35:9d:ed:10:4a:69:53:82:99:b2:5c:4a:aa:eb:33:d5:
         7f:18:79:b4:be:4e:f0:6e:17:c8:9e:9c:ab:6f:e7:38:bd:d3:
         2a:da:82:3e:2c:77:95:aa:a1:43:0b:2d:15:94:d6:ae:b9:06:
         b7:f7:14:c8:46:84:b7:46:4f:31:b7:6d:2c:e2:27:e6:e6:2f:
         3e:4a:b5:b5:f1:58:50:1e:09:a5:8f:6e:78:76:89:7d:3f:65:
         dc:97:bb:70:a6:33:50:02:8f:88:7c:86:04:08:7b:19:96:20:
         97:44:2a:18:4e:ce:3b:cd:75:d1:80:b1:a3:a0:86:ec:63:e8:
         93:05:7d:79:b1:35:0e:43:ad:5a:70:59:3f:11:53:5d:88:6e:
         87:32:76:33:58:34:1e:80:f5:55:a1:d2:5d:b8:63:7b:59:d9:
         66:bb:ca:a3:c9:c6:05:09:35:69:b3:e4:89:a1:52:36:91:4c:
         58:52:35:0b:2d:85:ef:95:95:6a:a9:60:37:5a:87:e9:ee:4a:
         a4:1f:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:33 2024 by rpki-client on console-ams.rpki-client.org