Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e3130312e31362e302f32302d3234203d3e203533303436.roa
File:                     3137372e3130312e31362e302f32302d3234203d3e203533303436.roa (raw, json)
Hash identifier:          YeSNvYvqBCjMEoK+Q/NJDOiZCK53JOBBsKlvXOvwRh0=
Subject key identifier:   84:7B:44:E8:92:31:72:DF:3D:32:1D:29:9B:DB:79:8E:79:84:5F:C1
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       51D2AE8F5214CEC42E8D31741D04F68EFC5E99E8
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e3130312e31362e302f32302d3234203d3e203533303436.roa
Signing time:             Tue 04 Jun 2024 14:33:32 +0000
ROA not before:           Tue 04 Jun 2024 14:28:32 +0000
ROA not after:            Tue 03 Jun 2025 14:33:32 +0000
asID:                     53046
IP address blocks:        177.101.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d2:ae:8f:52:14:ce:c4:2e:8d:31:74:1d:04:f6:8e:fc:5e:99:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jun  4 14:28:32 2024 GMT
            Not After : Jun  3 14:33:32 2025 GMT
        Subject: CN=847B44E8923172DF3D321D299BDB798E79845FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:04:ef:5e:c1:04:73:a2:b1:a1:0e:9d:a3:
                    4e:4e:40:a1:e9:ad:82:47:27:94:99:47:bb:d3:19:
                    e2:d1:e2:fb:48:ed:dd:ed:9d:34:5e:29:9b:30:51:
                    72:c0:01:c5:03:6d:6e:d0:14:f9:f3:38:06:87:38:
                    da:10:aa:54:e0:21:8f:ca:03:27:90:b1:5b:c1:f9:
                    b0:2e:b0:e7:14:a1:1a:0a:4c:90:36:d6:db:8f:9d:
                    b4:b5:8a:7c:77:d3:28:a7:8d:a0:3f:ec:a2:94:35:
                    3b:29:42:5a:a0:59:88:6f:c0:1d:62:c5:90:90:22:
                    fb:5f:45:f0:4e:ae:c2:a4:26:31:98:23:33:0a:f1:
                    c5:85:e3:e0:69:42:3d:24:8b:7a:23:00:a9:a2:4b:
                    f2:44:b6:e3:86:6d:36:6b:c5:f1:e5:70:70:a7:19:
                    00:b4:f9:ff:ac:8f:50:68:da:a0:72:12:4e:f1:b5:
                    67:22:c5:87:4e:46:89:4b:07:da:2e:ef:5c:86:56:
                    b5:a1:0c:c5:d4:bc:79:57:b4:33:87:95:30:2b:ea:
                    4e:cb:fd:33:72:e5:0a:10:b8:9d:62:50:f5:a0:b4:
                    0e:18:a6:db:51:ac:a9:55:7c:41:99:01:6a:08:38:
                    9d:f8:20:00:b4:4e:0e:4f:b7:82:03:a0:03:0a:de:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:44:E8:92:31:72:DF:3D:32:1D:29:9B:DB:79:8E:79:84:5F:C1
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e3130312e31362e302f32302d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:34:39:69:f7:42:fa:29:a6:65:87:7d:2d:99:8b:f5:a7:b5:
         d8:22:b7:fc:4c:c9:ce:48:32:db:aa:14:58:e2:08:84:1c:7c:
         0d:23:3e:8c:6c:4b:d6:e7:0d:20:a5:25:32:c7:e4:52:14:8c:
         84:c5:78:42:c1:db:4e:35:90:db:31:a6:95:49:1f:ed:41:cb:
         8e:b8:fd:77:aa:32:54:c2:ee:15:62:ee:f7:33:be:b7:6a:9c:
         0f:eb:57:4b:77:4b:8f:3f:d6:f4:6f:a3:ec:fe:2b:42:93:d5:
         3e:de:5e:53:ca:67:4f:1a:9b:0c:da:33:69:5b:47:67:5d:22:
         28:9c:c0:d7:39:4d:89:8d:fb:c1:00:f1:8f:f2:eb:46:cf:a4:
         16:a7:7c:ba:b3:5b:52:d1:be:24:fe:0d:19:95:96:f0:13:60:
         76:96:b7:f4:eb:63:5e:db:4f:be:06:47:3f:be:04:e7:48:ee:
         41:27:59:32:4e:1e:65:20:70:f9:19:97:c3:be:c3:0e:cb:8b:
         17:e5:ef:6a:c3:27:1e:fe:80:b8:6f:44:26:2f:74:35:27:e7:
         a5:dc:2b:20:b1:95:f4:6d:23:ba:97:c8:a7:88:71:75:89:9e:
         65:7f:63:0e:8d:61:e3:6c:10:e8:23:e3:02:f9:29:11:96:7e:
         52:f7:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:36 2024 by rpki-client on console-ams.rpki-client.org