Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39352e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          hIL3meZM7q65QEK9fSS+EKjH3EnY9bgknDd/i5s5AMw=
Subject key identifier:   E0:8B:F1:04:2E:04:4C:B2:FC:0E:4C:28:E0:58:23:BF:89:A5:99:F7
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       5F5E1B3AA21EFAD70F0E7EB73A326FE17CA703AB
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5e:1b:3a:a2:1e:fa:d7:0f:0e:7e:b7:3a:32:6f:e1:7c:a7:03:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=E08BF1042E044CB2FC0E4C28E05823BF89A599F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:25:63:2f:2a:93:36:1b:73:56:14:5f:3c:
                    c9:4b:d8:d0:d3:6d:13:32:00:00:6c:38:24:82:9c:
                    1d:0b:3a:af:08:86:ad:40:1f:70:e7:41:15:41:30:
                    03:14:c1:9b:89:60:79:34:56:78:5f:26:89:23:02:
                    1b:76:31:95:7b:3d:b8:a3:83:0b:d8:7c:f3:71:ca:
                    9f:36:f1:8c:cc:35:00:7d:8a:7e:37:ee:1d:05:4f:
                    6b:91:c2:08:a3:f2:04:ec:0c:c7:3c:69:d9:61:3a:
                    10:4f:b9:35:6c:f6:5c:96:3e:72:13:8b:63:04:00:
                    fd:9a:f4:75:87:5f:58:96:98:5c:5e:47:b3:9e:91:
                    29:39:e0:b8:ba:73:96:ee:8e:96:08:e3:82:86:3c:
                    40:a7:a8:09:7d:bd:d7:63:47:ea:4a:69:b1:e1:8c:
                    e0:ce:8e:4b:55:4f:e9:47:e6:56:04:55:69:dc:e6:
                    80:cf:4a:05:8b:b9:53:bc:ed:14:4a:89:67:30:49:
                    d6:9b:90:e2:39:da:be:77:12:57:6b:14:c0:48:01:
                    41:e1:dd:7b:cb:03:64:35:a8:c4:7e:f6:a8:78:f5:
                    f4:20:41:2b:e1:00:b8:aa:62:dc:43:5e:56:e9:26:
                    96:dc:83:a3:05:5b:8d:fa:58:68:ba:4a:fb:68:24:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:F1:04:2E:04:4C:B2:FC:0E:4C:28:E0:58:23:BF:89:A5:99:F7
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:b7:3a:05:dd:88:3a:d6:3c:a6:84:8b:3b:68:cd:49:33:
         7b:f1:46:dc:38:4f:90:15:11:f7:23:21:64:77:ab:fe:55:cf:
         5f:67:c6:ef:fa:75:65:fc:8a:98:0c:cd:ae:e6:2e:3c:c8:24:
         be:73:f0:94:6f:d7:64:d2:aa:4f:25:9d:a8:c1:1a:b0:98:d8:
         a7:b1:16:2f:23:dc:33:9a:d8:e1:47:10:e4:4e:fa:c5:25:36:
         75:a2:df:0c:cd:25:fd:5f:4c:f2:1d:51:ce:f3:ec:1b:c7:dc:
         87:23:ff:f0:42:50:1e:3b:35:b2:51:c6:f6:e8:fd:dd:4c:f5:
         aa:41:76:99:b4:cc:0a:c6:5c:b2:61:eb:18:16:a9:7a:b5:20:
         73:f1:d8:8d:26:e0:c4:92:e0:db:cf:09:5c:25:ff:b2:d9:c1:
         83:bb:9f:32:ed:93:17:b9:03:ec:ad:81:64:cd:43:f7:e6:c7:
         03:a6:11:df:04:2d:e2:25:72:9e:8c:9e:97:4b:ff:33:b7:aa:
         e0:73:48:5c:fc:ff:db:ea:32:de:2e:38:11:92:3f:d6:23:da:
         be:77:a1:5e:58:75:4d:48:14:03:a2:33:c0:1d:79:7c:6b:38:
         2d:2e:f5:4c:fc:68:50:b4:ca:fb:dd:e0:a8:5f:14:6e:e1:4a:
         e0:b6:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org