Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          XZrvCu09rWrEKsp3GLjjcX5QBe+OJ2iNmydMhU6Bpwo=
Subject key identifier:   19:40:9E:F3:9D:64:4D:C0:44:11:D4:31:A4:F0:CB:1A:0F:20:36:52
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       42800B52A59E1FFF6B50EC906B620DB4525EE0CD
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 03 Apr 2024 19:18:34 +0000
ROA not before:           Wed 03 Apr 2024 19:13:34 +0000
ROA not after:            Wed 02 Apr 2025 19:18:34 +0000
asID:                     61602
IP address blocks:        177.124.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:0b:52:a5:9e:1f:ff:6b:50:ec:90:6b:62:0d:b4:52:5e:e0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Apr  3 19:13:34 2024 GMT
            Not After : Apr  2 19:18:34 2025 GMT
        Subject: CN=19409EF39D644DC04411D431A4F0CB1A0F203652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:e3:09:e7:a1:7d:32:6c:36:46:68:e6:9b:
                    ea:f9:ba:e8:1c:27:e3:4b:3c:08:c2:3a:2a:80:65:
                    a5:0d:8b:d5:ad:5f:21:fd:00:ca:ed:03:9e:f6:e5:
                    00:a4:4c:17:70:d5:c7:51:7f:c8:7b:70:5e:d2:06:
                    92:7c:f6:1e:34:61:8c:13:ad:eb:97:03:76:25:c9:
                    01:2d:27:2f:43:d2:8d:8b:f0:36:4f:5c:3d:64:5b:
                    65:95:82:b2:30:10:1b:fb:f8:08:e5:eb:e4:97:55:
                    cb:4c:20:58:81:c8:ca:bf:ed:3d:0e:6a:f1:15:06:
                    a2:90:5b:ed:06:0d:f5:bb:94:06:0f:b8:e8:21:92:
                    46:06:f9:b8:ea:73:3e:f0:b8:5a:44:04:b6:a0:2b:
                    db:79:a6:39:c9:8f:68:35:b4:30:38:fb:f6:e0:e4:
                    5f:8b:a0:86:2a:a6:58:70:5f:52:2c:b0:6d:8e:1e:
                    9b:37:50:76:ca:87:71:ff:ae:d7:f8:45:8e:36:e5:
                    5f:79:89:8a:53:22:ab:b0:e6:61:46:fa:24:fe:96:
                    86:2e:05:c3:89:3d:dd:ac:92:e4:db:32:23:53:8a:
                    aa:c7:7d:5a:1f:4a:cd:6e:79:19:f3:e5:62:0a:5a:
                    fc:2c:13:ec:80:af:7b:2c:0c:19:25:a5:6f:35:f1:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:40:9E:F3:9D:64:4D:C0:44:11:D4:31:A4:F0:CB:1A:0F:20:36:52
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:d5:a5:88:7b:56:b0:4f:18:9d:fb:ec:97:db:ea:b0:7d:
         25:9e:df:31:8e:0d:99:e8:99:cf:4a:58:19:31:31:5a:2c:17:
         6c:6c:2a:5d:4c:50:13:46:75:05:68:60:40:1d:90:a0:88:c9:
         52:9f:f1:b5:39:fe:3e:ec:96:16:74:81:34:1b:24:e4:86:a0:
         9a:a2:ef:ef:15:42:ad:70:6b:ae:2d:e1:fc:1b:6a:7d:9d:ae:
         de:e3:43:22:64:04:43:10:67:1e:fb:60:ce:75:a7:ac:b1:82:
         90:fa:07:62:43:71:a0:ea:ab:14:a0:1d:5e:71:a0:2e:ca:02:
         02:98:13:f8:73:98:ee:c3:79:0b:86:2a:41:8a:a1:89:64:04:
         1b:4a:ed:b8:ec:9a:30:14:e5:55:73:5a:80:c7:6a:d7:4f:08:
         a9:eb:82:00:c1:4e:3d:29:99:0b:72:f0:2c:e1:d0:64:28:61:
         bb:1d:ee:2c:c8:31:51:57:f2:25:6e:82:a0:76:bb:f1:bd:5d:
         5d:24:64:95:db:84:25:84:77:73:d3:5a:83:98:7c:b4:b5:b5:
         d5:d4:3e:a8:11:19:0b:3f:41:2d:ed:93:3a:58:77:ab:16:fe:
         1d:0b:c2:e2:a5:e3:f8:39:9d:b8:57:2e:1e:97:cf:59:13:38:
         2f:07:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:02 2024 by rpki-client on console-ams.rpki-client.org