Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          LI7L9iKV30Z4upDXxchboGzNL6j9TeY7LnICz44Y2Vs=
Subject key identifier:   AD:1C:F7:9F:C6:A4:D7:66:45:2F:0C:37:67:A9:C6:74:DC:18:BC:14
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       5C17678B0CDF7F837EA97239ABEB57B582176338
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 03 Apr 2024 19:18:34 +0000
ROA not before:           Wed 03 Apr 2024 19:13:34 +0000
ROA not after:            Wed 02 Apr 2025 19:18:34 +0000
asID:                     61602
IP address blocks:        177.124.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:17:67:8b:0c:df:7f:83:7e:a9:72:39:ab:eb:57:b5:82:17:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Apr  3 19:13:34 2024 GMT
            Not After : Apr  2 19:18:34 2025 GMT
        Subject: CN=AD1CF79FC6A4D766452F0C3767A9C674DC18BC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:b5:4f:2f:85:28:91:66:5d:5c:e2:f0:89:
                    e5:43:3f:9a:14:a8:15:99:92:14:01:42:f5:25:b2:
                    28:a1:70:3a:ef:a5:39:55:ec:5c:8c:12:d4:ed:35:
                    fa:6f:26:53:be:a3:ec:24:9e:40:59:25:e4:98:fc:
                    30:51:71:a7:32:3d:d4:68:44:8b:99:94:81:71:a0:
                    6f:c8:b2:6c:c6:e3:8a:37:6d:e6:62:a9:94:5b:96:
                    72:ba:f2:03:74:03:50:ad:b5:ca:7b:9b:13:10:de:
                    1b:71:18:95:b3:0a:26:cd:ad:f2:54:31:54:2b:36:
                    01:c7:b9:dc:63:c2:9b:99:b4:20:c8:f1:e7:6a:f0:
                    f6:fd:31:d5:f8:6e:0d:a9:ea:fc:7b:05:94:55:c5:
                    49:81:dc:ce:53:05:0f:75:12:52:61:63:9d:c7:d1:
                    11:7c:5a:e6:5f:87:1f:bd:be:5b:46:d6:cc:e8:7f:
                    04:3a:fa:0e:0a:f7:68:1a:89:c8:db:4a:2f:b6:03:
                    ed:40:53:67:c7:47:b4:a3:62:17:96:22:e9:0f:fa:
                    36:9d:cb:c1:63:a2:77:44:94:bd:4e:22:5b:25:1a:
                    9a:2e:c8:0d:26:0a:4b:96:e1:37:5b:a5:ea:eb:23:
                    da:f6:41:f4:0f:37:97:07:95:6b:00:3e:55:bf:6f:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1C:F7:9F:C6:A4:D7:66:45:2F:0C:37:67:A9:C6:74:DC:18:BC:14
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:40:f1:ec:2a:0d:d9:ef:f6:b2:f7:2d:52:2b:f1:fd:fb:7a:
         63:68:96:b8:d6:85:31:5d:28:33:83:47:d0:f6:da:82:46:d3:
         b8:a1:e8:97:05:bc:b1:53:51:e1:9a:7f:10:e4:c7:9e:7d:23:
         f7:f7:fe:e0:df:9f:9d:6e:28:1b:20:64:ba:4b:a6:c2:ba:d5:
         cd:be:5e:54:32:8c:45:a8:db:c8:2f:73:ea:a7:dd:34:86:1b:
         1e:4f:e8:f2:92:4f:f0:32:28:b3:40:89:9c:e7:62:19:69:df:
         70:fc:62:be:b6:16:50:3e:63:99:45:b9:0f:42:f7:2e:49:87:
         15:9d:53:11:91:da:cd:76:b5:2b:95:b8:12:09:73:15:86:99:
         39:73:14:52:2c:e8:e3:db:8a:6b:2a:52:fa:3e:38:e3:36:b7:
         c1:b0:0e:a0:c2:e0:bc:69:08:e7:33:ca:81:ec:7e:fc:72:40:
         64:1a:f7:ec:38:26:ec:f4:99:4c:71:36:a1:d4:d9:96:39:44:
         47:36:75:15:8a:a6:78:cc:d8:d3:04:cd:68:ba:f3:e9:aa:90:
         9e:4f:b9:4e:3a:6b:40:6c:af:72:a2:ba:42:ec:15:61:fa:e3:
         2e:bb:c2:cb:3c:e2:1e:78:7c:ec:96:d7:73:91:f6:fc:bd:8f:
         f4:86:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:30 2024 by rpki-client on console-ams.rpki-client.org