Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38392e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          dC3WKeFgS+v8YKAwktiL8deNyNhKSaNHi1+yfZMtRxA=
Subject key identifier:   1F:71:BB:82:59:EE:94:E8:E9:B4:CC:A3:4D:84:E7:6B:F8:36:CF:39
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       3A584D75038A1C2F7B903013D84D292ABEADD3B9
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:02 +0000
ROA not before:           Thu 04 Apr 2024 17:34:02 +0000
ROA not after:            Thu 03 Apr 2025 17:39:02 +0000
asID:                     53047
IP address blocks:        177.101.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:58:4d:75:03:8a:1c:2f:7b:90:30:13:d8:4d:29:2a:be:ad:d3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:02 2024 GMT
            Not After : Apr  3 17:39:02 2025 GMT
        Subject: CN=1F71BB8259EE94E8E9B4CCA34D84E76BF836CF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:dc:35:1b:16:4c:72:58:31:ef:31:5f:16:
                    65:85:8c:75:42:95:57:24:2b:72:03:bf:9c:c7:51:
                    44:b0:71:49:4a:a8:27:7a:b4:3d:7b:b4:ed:7d:ba:
                    71:19:91:9b:3d:88:86:99:46:ac:32:fb:51:80:49:
                    c3:08:6d:be:c2:39:2c:c9:10:04:b8:8d:eb:88:a9:
                    9d:a4:dd:c3:33:5d:92:0e:e4:71:3d:4b:a6:2e:9d:
                    3b:5f:9e:d5:86:0b:15:73:e0:90:ed:70:38:66:4a:
                    80:70:8f:81:8c:09:46:7d:86:c9:73:66:5b:9a:c1:
                    54:cb:9d:05:30:fb:b3:69:c0:f7:3d:00:c2:96:92:
                    26:b2:54:8f:be:f4:ea:0a:df:cf:76:a0:88:7e:46:
                    cf:04:91:ef:3e:de:cd:6e:f4:6a:b5:9f:d4:9e:70:
                    84:11:4c:00:a6:dc:a7:7f:95:af:b5:3e:89:79:71:
                    be:b0:6e:25:f7:b2:d5:f1:70:23:0f:ed:6c:d1:9b:
                    41:76:3f:04:59:a8:00:01:2d:1b:0b:3e:31:2f:4f:
                    cb:e6:13:29:72:40:2b:ee:af:be:e9:3a:e2:1f:d1:
                    19:04:ac:cd:50:45:05:6c:03:fc:f6:04:b8:36:6b:
                    ee:06:3f:3d:94:e5:21:43:8c:41:36:4a:3a:2a:19:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:BB:82:59:EE:94:E8:E9:B4:CC:A3:4D:84:E7:6B:F8:36:CF:39
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:11:17:79:6d:a9:a5:d1:a8:35:e7:ec:4b:09:8f:60:36:4c:
         bf:7b:1f:39:d7:07:fd:fc:07:26:cb:75:f6:a1:e6:00:93:c1:
         96:33:52:eb:03:43:41:03:21:60:2c:0b:90:d2:a5:30:39:22:
         04:df:e5:dc:51:93:50:be:cb:c1:c4:d2:77:4a:79:d0:89:77:
         4e:97:5b:d9:cb:c3:4e:fa:8f:38:ce:b5:f6:f8:23:50:32:1e:
         38:5d:22:e2:8e:bd:b1:ef:e9:d7:67:0d:b1:fd:b1:bc:a1:7c:
         cb:02:6f:bc:6d:de:50:dd:fb:db:3d:c5:5a:e3:1c:f0:b5:7e:
         b3:93:b0:f1:2b:21:95:0b:3d:96:6a:3b:e3:5c:15:21:3d:aa:
         13:77:02:19:07:3f:3a:8d:f7:f6:f1:5e:d0:41:76:6a:a3:d5:
         84:65:c5:d7:20:a0:62:98:b6:a0:a6:6b:f1:25:c5:59:62:4d:
         81:41:77:3b:4f:67:2c:5f:23:71:0f:29:1f:c1:b2:09:0b:73:
         58:8e:2a:8d:85:00:ee:80:20:03:da:e6:3b:a6:50:c1:cc:28:
         ce:ab:11:ac:73:23:20:5b:42:7b:4b:c0:6d:6b:cb:dd:bf:c6:
         ea:55:35:60:ed:fc:36:b8:bc:63:b8:b1:d2:5a:d2:23:81:9f:
         46:88:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org