Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3234203d3e203238323534.roa
File:                     3137372e37312e31362e302f32312d3234203d3e203238323534.roa (raw, json)
Hash identifier:          a6flQ9PKSl/GwPxyDFUbRjtGHMZaOVjDouiGiA+CS9k=
Subject key identifier:   DD:6B:71:F4:99:F8:91:B9:0D:1F:11:67:08:AA:35:4F:3C:35:13:EF
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       7936842605135B58BF566939BE616773E5342761
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3234203d3e203238323534.roa
Signing time:             Thu 16 May 2024 18:58:36 +0000
ROA not before:           Thu 16 May 2024 18:53:36 +0000
ROA not after:            Thu 15 May 2025 18:58:36 +0000
asID:                     28254
IP address blocks:        177.71.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl
                          rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:36:84:26:05:13:5b:58:bf:56:69:39:be:61:67:73:e5:34:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: May 16 18:53:36 2024 GMT
            Not After : May 15 18:58:36 2025 GMT
        Subject: CN=DD6B71F499F891B90D1F116708AA354F3C3513EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:ee:81:f3:5b:b7:d8:9d:d6:34:27:12:b3:
                    d2:f3:70:a9:c6:6b:cb:48:c7:1d:29:02:a3:4b:78:
                    5a:0e:8e:26:be:3e:69:88:4b:c7:7d:7f:21:0c:32:
                    3d:70:46:6b:82:64:6f:63:2b:72:9b:ec:56:8a:26:
                    65:51:94:05:af:5f:99:15:b8:9c:fa:1f:46:39:09:
                    31:b0:78:7a:1e:64:d0:7b:35:93:cc:c7:24:07:8a:
                    c7:45:68:15:c4:a7:76:8b:75:78:56:43:57:9f:39:
                    aa:79:65:00:3c:c9:93:54:e3:8e:13:a6:f6:a1:2f:
                    63:d0:24:5e:66:79:c8:53:08:27:da:73:ae:ef:05:
                    1a:49:5a:51:dd:5c:8a:64:ca:7b:f4:a7:cf:35:21:
                    d8:6f:ed:b8:61:bf:7f:cb:b5:21:57:d1:eb:0f:ac:
                    b1:36:59:3f:a1:85:22:3a:39:0f:e9:85:ab:da:65:
                    72:43:87:b9:a9:4b:dc:28:e0:1a:9b:d5:75:3f:a4:
                    82:7d:a9:e1:28:0e:c7:9f:65:a0:3d:9f:a9:26:29:
                    35:3e:4f:af:c9:fb:ff:7e:0f:57:65:60:0e:3a:71:
                    29:cc:64:2c:be:65:96:7c:00:e6:06:11:df:88:e9:
                    0c:5f:20:55:32:24:fb:12:81:8f:39:07:32:70:62:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6B:71:F4:99:F8:91:B9:0D:1F:11:67:08:AA:35:4F:3C:35:13:EF
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3234203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:07:1c:8a:2c:6c:39:ff:07:66:b0:10:1c:c2:a3:c7:61:
         80:96:f1:3a:b6:4b:57:ef:c0:76:37:fd:d5:8e:2a:9a:fd:67:
         e7:43:d8:68:7e:c6:96:02:23:0a:45:77:62:1b:00:52:99:90:
         fc:5e:0a:0c:e0:3d:c1:b8:35:92:c3:e6:5c:0f:80:1f:9b:ac:
         89:fe:90:da:3d:1c:25:01:f2:02:bd:71:08:5a:0e:17:95:46:
         3e:a1:90:d7:e8:94:bf:2b:12:17:92:43:3a:95:58:44:fe:10:
         f0:6e:4d:59:c7:68:cf:c1:2b:b9:32:37:01:e0:c8:1c:52:5c:
         04:43:d9:57:e5:06:c0:2e:06:87:cb:2c:46:7d:35:d9:70:71:
         a2:6a:90:d0:1c:23:4b:7f:49:d0:cd:9c:26:38:36:6b:34:55:
         e3:db:8b:19:5e:31:d6:2e:2c:d5:ce:6d:dd:77:54:7f:06:9e:
         8e:b2:fc:68:45:86:33:15:0d:7b:3a:6f:50:47:44:88:7a:0a:
         44:58:82:67:a3:97:b8:e6:a5:f8:73:ad:e8:79:25:d8:c3:5d:
         ca:6d:f7:17:4e:f6:f8:ee:49:da:e4:a1:d6:3a:a6:05:49:ed:
         ba:9f:8d:68:5c:62:d7:7b:06:08:12:cb:d2:65:2a:63:96:1b:
         cb:71:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:32 2024 by rpki-client on console-fra.rpki-client.org