Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39332e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          bBgqhoXWvFEMhUsRWh9eOLspEcVgbgFR1BfPf87X9Ro=
Subject key identifier:   9D:1E:1E:D8:07:82:85:29:F4:1D:2B:39:F2:1B:8C:23:F0:2E:3B:DB
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       41BFA3D688483F7F178061174DC52945F3FA8F7A
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:a3:d6:88:48:3f:7f:17:80:61:17:4d:c5:29:45:f3:fa:8f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=9D1E1ED807828529F41D2B39F21B8C23F02E3BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:9e:c9:36:12:9a:bb:fa:29:13:5e:9c:f3:
                    3f:0e:3c:a7:be:7b:b5:c4:96:0e:72:51:3a:b9:3c:
                    81:21:8a:87:26:60:d5:62:c4:91:63:48:99:0b:90:
                    a2:94:12:1c:c6:d0:4c:77:af:28:dd:3f:ea:4d:12:
                    75:36:2b:d9:4a:35:28:42:22:7d:1c:ec:45:4b:aa:
                    cb:43:cf:4d:c8:b9:05:0a:5a:2f:3b:00:4c:a3:f2:
                    dc:ee:df:6d:8a:5e:88:ae:ae:10:54:e6:6f:26:51:
                    45:c4:c8:57:87:66:47:b8:9b:34:08:25:31:ee:05:
                    19:91:60:8e:e2:07:8e:8c:15:da:d4:c9:74:0b:ba:
                    d8:97:63:69:51:81:11:03:5b:91:52:b9:4e:97:75:
                    73:e8:be:b5:63:34:b3:c3:4d:5e:07:25:65:97:8b:
                    c3:4d:01:81:ba:c0:35:48:64:67:f2:ee:7d:12:96:
                    f1:fc:86:dc:0e:2b:99:89:e8:60:60:d0:8e:f8:91:
                    7a:40:46:5d:2b:13:c1:86:c2:af:47:f5:9a:b4:0e:
                    df:bb:92:78:26:63:b2:ca:b1:46:cb:ca:0d:c1:d4:
                    ad:d8:b2:c0:44:75:95:4d:df:87:16:99:a4:57:a3:
                    c6:b3:ab:c6:c0:1a:80:ea:31:92:87:ff:77:ec:3d:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:1E:D8:07:82:85:29:F4:1D:2B:39:F2:1B:8C:23:F0:2E:3B:DB
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:93:57:f7:e6:c0:56:35:d0:7e:c5:d6:fc:cf:4b:c7:e3:
         07:25:f6:87:59:09:ee:85:41:78:71:e9:ec:ea:f8:1b:b9:08:
         24:20:c2:9f:b9:43:78:14:a2:4f:4a:6f:f8:e4:b2:e9:4b:5f:
         30:1a:00:9e:fa:92:f4:3d:c4:74:db:36:51:b7:a5:51:8c:2f:
         7b:85:b7:55:90:6b:22:36:fe:25:63:d6:27:48:0b:66:24:08:
         85:d2:c1:56:b2:49:d7:c0:e8:e6:06:cb:8b:0d:2e:f4:73:2f:
         9a:99:2f:c6:09:cb:1e:14:10:99:96:dc:b5:7b:cf:7c:1c:f9:
         25:9c:7e:d2:42:fd:92:f8:1c:5b:75:e3:63:79:ec:b5:7f:23:
         50:b6:d9:7e:04:e3:17:b7:28:8f:74:88:44:7b:8e:ea:d8:47:
         2e:52:29:3b:f6:f2:1a:16:45:27:72:e7:ca:ac:90:f6:03:9a:
         77:ea:3f:6a:5e:18:d7:2a:87:fb:39:c4:a1:83:35:0f:8c:00:
         7d:a2:b5:ff:f5:bb:e8:bf:be:bd:21:6a:52:11:41:05:d7:bd:
         fb:de:94:a2:19:5a:bb:9c:9e:98:a1:70:c3:90:7d:bb:a0:a5:
         6e:8f:8c:12:8a:4d:71:f7:76:56:9e:ca:67:d1:3e:2f:2c:7e:
         bc:75:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org