Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/3137372e32332e3137362e302f32312d3234203d3e20323632383938.roa
File:                     3137372e32332e3137362e302f32312d3234203d3e20323632383938.roa (raw, json)
Hash identifier:          bHEjYsEZAG/VbAZbNfYKWteIm+EHNYfGwi3AW9ld1fE=
Subject key identifier:   B1:79:A7:AC:4A:7C:8D:A1:E4:7E:C9:02:5E:C2:7A:1B:72:E3:0E:C0
Certificate issuer:       /CN=55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0
Certificate serial:       78FE580C11D71C20DFADE55D23638B2F78A46B09
Authority key identifier: 55:F6:DA:B4:E4:C7:10:64:21:D4:DB:38:EF:CD:4E:E4:F6:6B:1B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/3137372e32332e3137362e302f32312d3234203d3e20323632383938.roa
Signing time:             Thu 04 Apr 2024 18:11:36 +0000
ROA not before:           Thu 04 Apr 2024 18:06:36 +0000
ROA not after:            Thu 03 Apr 2025 18:11:36 +0000
asID:                     262898
IP address blocks:        177.23.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.crl
                          rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fe:58:0c:11:d7:1c:20:df:ad:e5:5d:23:63:8b:2f:78:a4:6b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0
        Validity
            Not Before: Apr  4 18:06:36 2024 GMT
            Not After : Apr  3 18:11:36 2025 GMT
        Subject: CN=B179A7AC4A7C8DA1E47EC9025EC27A1B72E30EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:55:6e:6d:a6:de:bc:b4:cd:33:67:11:30:
                    ee:47:72:6d:ad:75:e5:c7:78:0e:9b:7f:be:03:cb:
                    5e:9e:b1:c0:70:62:e0:19:8f:d2:02:07:3d:85:70:
                    bb:50:53:60:05:77:bd:70:53:ef:0c:fc:fe:44:29:
                    26:ca:b0:07:30:d9:ea:d0:2e:fc:70:54:51:14:25:
                    b0:e3:2f:a6:c0:d5:ab:b3:59:7c:ec:68:7f:82:68:
                    59:e5:bc:c3:4c:fd:19:91:46:0e:8a:f6:5b:8f:56:
                    c8:60:4e:16:db:c0:66:42:19:dc:f7:de:63:43:0b:
                    48:67:85:cd:3e:ee:d9:0e:34:e9:65:9c:bc:f6:45:
                    c9:37:c4:a8:56:27:ad:53:53:d6:05:fb:5d:27:68:
                    56:67:98:4f:0d:98:2e:ef:23:f9:74:02:63:75:3f:
                    18:3b:c6:b4:a5:cc:37:50:9f:03:28:ca:35:04:29:
                    ff:67:b7:54:08:d3:4d:c8:bc:bd:56:fd:49:cb:f3:
                    56:ac:4d:87:a3:09:ad:74:b2:26:e7:c4:f8:cf:15:
                    95:71:e9:7e:bc:20:15:a3:e7:19:a7:ef:5f:8b:c7:
                    e5:68:b1:8f:ab:56:c0:9b:fd:22:31:d9:0e:1e:bb:
                    ee:af:b5:f5:4f:20:df:da:cb:70:6f:fc:c7:9c:e5:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:A7:AC:4A:7C:8D:A1:E4:7E:C9:02:5E:C2:7A:1B:72:E3:0E:C0
            X509v3 Authority Key Identifier:
                keyid:55:F6:DA:B4:E4:C7:10:64:21:D4:DB:38:EF:CD:4E:E4:F6:6B:1B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F6DAB4E4C7106421D4DB38EFCD4EE4F66B1BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/1/3137372e32332e3137362e302f32312d3234203d3e20323632383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:78:ad:8c:0e:17:0c:91:e8:00:e6:5b:8b:9d:bc:09:8a:
         31:bb:9a:63:a5:d0:64:ac:ce:b3:80:77:db:13:08:9f:97:a9:
         3e:c4:ce:67:a2:5b:34:68:85:46:cd:d9:07:93:b9:87:d0:ec:
         db:6f:59:a8:d4:af:03:2f:bf:5b:0e:e0:cf:da:02:26:64:c1:
         c6:62:b0:3c:f7:24:ae:86:a7:d0:3d:30:a6:f2:95:d5:06:0d:
         82:0a:23:7a:61:49:e4:93:00:1e:c3:35:e1:12:54:55:2e:60:
         4c:8d:8c:e5:92:ac:32:92:a5:ae:28:7c:87:44:84:19:da:31:
         3e:f9:05:72:2c:d3:ce:b6:a9:a9:b2:d1:17:7d:a2:6b:8b:41:
         e4:5a:0a:75:ef:13:a7:48:a5:b6:dc:62:e2:66:fb:ab:cf:e7:
         b2:88:9e:73:1a:2d:80:77:95:19:7e:f0:04:38:de:1d:16:0b:
         bc:5c:68:06:5b:b0:57:7c:d5:c7:29:16:02:7b:b2:22:ca:45:
         24:93:7a:f5:1c:e5:e2:1c:07:36:83:0d:8e:97:8c:64:97:0e:
         b7:45:a2:5c:61:bc:29:8c:5b:2c:5e:3d:e0:ae:4e:1d:88:cf:
         61:19:b3:c8:9f:f3:eb:e6:64:bf:d4:6e:e9:90:e8:5f:e1:67:
         7d:5f:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:37 2024 by rpki-client on console-ams.rpki-client.org