Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32312d3234203d3e203533313235.roa
File:                     3138372e3130382e3132302e302f32312d3234203d3e203533313235.roa (raw, json)
Hash identifier:          7dvPlM0b7DwGjjyuGSd8Zd+XWZkqKOhdPe5Z/f3wHTg=
Subject key identifier:   5A:5F:C3:36:0D:5E:1C:A8:42:DC:6D:D3:7F:B6:4B:08:BE:9C:B4:FF
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       6D9E20AEF58D753DFAC6924F5917059663D3F843
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32312d3234203d3e203533313235.roa
Signing time:             Thu 11 Jul 2024 11:58:28 +0000
ROA not before:           Thu 11 Jul 2024 11:53:28 +0000
ROA not after:            Thu 10 Jul 2025 11:58:28 +0000
asID:                     53125
IP address blocks:        187.108.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:20:ae:f5:8d:75:3d:fa:c6:92:4f:59:17:05:96:63:d3:f8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:53:28 2024 GMT
            Not After : Jul 10 11:58:28 2025 GMT
        Subject: CN=5A5FC3360D5E1CA842DC6DD37FB64B08BE9CB4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:6b:c9:a3:f9:93:ae:56:ad:52:c6:6d:76:
                    fd:71:60:9c:36:27:c1:38:ea:4e:40:66:b5:6a:3e:
                    29:df:52:93:b9:3c:1e:0e:f0:57:4f:df:0f:af:59:
                    7e:ba:ec:9f:a6:1d:29:f1:cb:d9:90:18:71:01:b5:
                    c0:fe:4f:14:25:d5:98:d4:64:e3:11:8d:18:04:05:
                    7d:f6:e3:c5:c3:d5:b5:9e:dd:3d:9f:49:c4:17:2a:
                    2b:e1:6f:4a:6d:37:a3:09:8e:00:95:ad:f2:95:c9:
                    ba:68:02:6c:62:0c:97:d8:a3:a4:d0:49:89:49:63:
                    87:bd:65:5c:5f:3c:e4:4a:6f:af:a2:77:88:b0:9a:
                    17:6e:f4:4b:15:9b:e3:6c:c5:d1:0f:0c:3a:72:ae:
                    15:6c:7a:da:99:1e:31:c5:e7:ec:80:27:c1:fa:ab:
                    28:17:f6:b2:4b:89:20:c5:2d:fd:ee:54:44:23:7e:
                    2a:df:ee:d1:50:8c:4f:be:be:30:45:a4:ab:c3:55:
                    7d:8f:e9:90:07:e2:31:dd:ee:a6:3f:cc:24:8c:cb:
                    da:cb:42:ce:75:a6:c3:46:d5:86:2c:9f:5b:3d:d4:
                    cd:9f:ab:c0:59:b1:34:1c:2d:26:bc:cd:41:4f:e5:
                    db:07:6f:1b:0b:ce:1a:1b:c2:21:37:1b:6c:0c:f3:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:C3:36:0D:5E:1C:A8:42:DC:6D:D3:7F:B6:4B:08:BE:9C:B4:FF
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32312d3234203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:33:c4:03:67:bc:18:5b:49:27:02:72:22:59:2c:b2:6a:91:
         aa:b7:31:59:a7:58:a6:ca:c5:c5:4d:b7:41:b9:9f:0a:96:32:
         c4:b8:e6:71:80:76:9e:7f:49:97:71:5a:a3:63:e6:8f:ca:27:
         38:e8:bd:0b:8f:7e:3e:19:01:ee:db:7c:23:fa:6c:6d:a9:b0:
         78:49:2a:33:46:44:e8:31:51:12:4a:33:b7:d7:ea:48:97:bd:
         87:e6:4b:d4:ba:1d:a5:1d:af:f1:04:9e:f0:03:77:d2:49:42:
         a2:80:32:fd:5d:c0:dd:fe:83:05:46:13:8d:84:80:e5:82:ef:
         21:83:ad:a0:04:10:2b:c2:c7:d1:35:72:80:f9:b6:c8:63:d7:
         6d:87:5d:0f:24:53:27:91:1d:a5:15:ad:05:54:39:e4:52:cd:
         bb:73:28:b6:d8:31:d1:34:fd:d0:9a:3c:e1:57:47:4e:50:aa:
         b6:9d:e2:50:d6:3b:97:bf:ef:9a:13:34:39:51:cb:ff:8c:69:
         b2:5d:e9:67:61:d7:1a:2b:6a:a0:6b:9d:9a:db:ac:cc:34:7c:
         43:02:2e:54:a2:51:0b:4a:a6:40:3b:f5:b4:d4:d2:6d:d4:ae:
         8e:95:a1:21:3e:bf:c7:8d:33:2c:9d:b4:aa:5e:2b:36:e9:d5:
         5f:64:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org