Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39302e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          bH66fXPvBSXKNMhvKbH6i00MfAToNe5531GuyPHj6qE=
Subject key identifier:   C6:58:B4:AD:50:EA:94:AF:C6:0A:41:E6:B6:FB:87:0C:6C:C3:1F:10
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       043A9BE919BA7E4879849A9DDC41514E41C76C98
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:03 +0000
ROA not before:           Thu 04 Apr 2024 17:34:03 +0000
ROA not after:            Thu 03 Apr 2025 17:39:03 +0000
asID:                     53047
IP address blocks:        177.101.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3a:9b:e9:19:ba:7e:48:79:84:9a:9d:dc:41:51:4e:41:c7:6c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:03 2024 GMT
            Not After : Apr  3 17:39:03 2025 GMT
        Subject: CN=C658B4AD50EA94AFC60A41E6B6FB870C6CC31F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:21:d8:02:ab:19:57:97:28:7d:fa:fe:08:
                    ac:49:16:ce:6b:cd:79:04:95:dc:af:58:5c:94:19:
                    5c:0b:85:ab:12:f4:ba:bf:17:f6:b3:e4:0b:01:a2:
                    57:68:77:1c:a7:bb:86:3d:dc:dc:89:c5:11:60:cb:
                    1f:29:ec:f2:b1:99:49:af:d6:ce:e2:46:47:fd:e6:
                    99:46:43:8a:20:4a:e2:f3:4d:86:0b:3d:30:23:1c:
                    3e:96:3c:ef:c9:3d:ae:89:1a:ff:08:5d:61:07:c9:
                    51:1b:05:13:18:16:81:54:5f:34:d4:94:7d:2c:39:
                    7e:a6:15:30:f6:78:6d:9d:a1:68:1a:7e:1d:7b:96:
                    16:f1:da:a8:f5:a1:03:d2:15:02:9f:06:e2:e7:f9:
                    56:66:0c:05:15:e7:7f:61:30:01:eb:da:42:23:7e:
                    8f:cb:ff:18:6c:9a:8d:d2:35:ad:52:4d:e7:ca:13:
                    60:49:85:82:94:74:b3:d9:7d:33:7f:9f:b2:8d:5a:
                    0b:5c:4c:fc:58:37:55:a7:3c:88:c9:76:23:f6:d7:
                    09:09:7a:04:82:76:17:ea:a6:86:c5:38:45:97:a3:
                    46:9c:41:67:24:e1:ef:0b:a0:95:59:58:e6:e4:33:
                    cf:24:bb:e9:cc:bb:92:47:a9:bc:c1:08:56:2d:57:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:B4:AD:50:EA:94:AF:C6:0A:41:E6:B6:FB:87:0C:6C:C3:1F:10
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:bc:09:14:23:e0:df:19:1a:e8:d7:a2:13:51:61:78:e2:
         7c:f9:46:00:62:a4:c0:30:6f:72:64:53:18:08:32:ba:92:79:
         e5:71:d0:e9:b0:52:60:08:b3:5e:0b:33:2d:f8:d1:46:64:51:
         b6:75:c3:9a:cf:d0:73:d7:5a:92:80:b1:df:97:61:6a:04:00:
         82:4e:44:50:1c:71:31:f7:90:43:84:7e:d1:ca:34:f6:c1:ae:
         63:8f:5a:fe:5a:41:3b:3b:21:1f:5d:81:88:c4:e4:9f:6b:f7:
         c5:22:09:b7:f6:81:e1:bc:2a:36:54:0d:de:e0:9a:07:69:ad:
         7e:cb:f4:4f:76:f4:44:ef:7d:d7:bb:dd:ec:b0:5a:3c:67:b8:
         24:2b:0a:f9:d2:f6:b5:5e:97:49:e8:6f:fe:ce:d3:8b:57:bd:
         cf:ef:fc:77:62:24:dd:37:d9:5b:b9:a2:c0:21:db:30:af:68:
         f4:0c:19:8a:89:f5:0a:13:a6:36:0f:87:89:79:7c:09:e2:31:
         8d:c9:c2:59:db:1c:ac:ac:c3:17:68:8e:82:f0:76:ed:0f:3f:
         90:d5:62:23:49:ab:84:44:7d:91:7f:fc:03:cc:9b:15:fe:b3:
         28:7a:6b:6b:04:9f:26:84:73:7b:55:29:ec:01:c4:c4:cb:72:
         88:c1:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org