Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232372e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3232372e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          jR+Qdi1WJ5HyIx5cBqdFUxtmPbMZMGGQmnHGyRDphdY=
Subject key identifier:   52:D9:E9:06:6B:F7:9C:D7:EC:53:5C:74:37:65:B1:D1:F2:CB:61:A7
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       7354E553A98E07166346562E8404D014D5B3BAF8
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232372e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:07 +0000
ROA not before:           Wed 03 Apr 2024 21:09:07 +0000
ROA not after:            Wed 02 Apr 2025 21:14:07 +0000
asID:                     262313
IP address blocks:        177.105.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:54:e5:53:a9:8e:07:16:63:46:56:2e:84:04:d0:14:d5:b3:ba:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:07 2024 GMT
            Not After : Apr  2 21:14:07 2025 GMT
        Subject: CN=52D9E9066BF79CD7EC535C743765B1D1F2CB61A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:e2:f0:b8:69:90:d0:51:c8:0b:15:7b:f8:
                    fc:87:d7:4c:01:5d:3a:00:e5:fa:06:61:a8:3d:a0:
                    f7:6f:a9:9f:3c:bc:f4:e3:31:97:9f:32:b8:af:20:
                    43:b4:a4:0d:20:04:ad:4f:14:15:41:1d:3c:22:08:
                    38:62:22:4d:74:90:14:21:27:30:b6:64:14:15:b0:
                    62:d4:01:8a:b9:03:0d:44:71:d9:b2:97:d0:3d:da:
                    4e:52:5f:aa:f3:9b:40:19:0a:34:96:ee:02:7a:f3:
                    d6:ad:f6:6d:45:83:ae:bb:98:13:a7:9a:92:ac:45:
                    03:8b:e9:8e:4a:7a:f5:4c:f5:70:56:58:e9:a1:32:
                    b5:8b:be:55:f1:8b:b0:b5:3b:32:23:fb:fd:2f:d7:
                    cc:49:3a:77:a6:82:27:6a:09:f9:58:85:e7:fb:67:
                    22:8d:7e:a4:36:34:64:a4:0a:6b:10:04:97:0a:f2:
                    e1:77:6e:10:a2:41:67:70:30:fa:f5:d8:06:b8:b0:
                    4a:38:ce:a2:47:08:f0:58:0f:ec:c4:d6:10:a3:0f:
                    b8:4a:45:80:40:33:f7:e9:af:2b:a7:8f:ed:07:26:
                    59:da:76:66:b7:b6:fd:29:ba:c1:5f:06:65:79:37:
                    d3:ce:9d:f0:9f:cb:b4:2d:2d:b6:4e:f3:e7:a5:0e:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:E9:06:6B:F7:9C:D7:EC:53:5C:74:37:65:B1:D1:F2:CB:61:A7
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232372e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:de:cf:9a:68:cc:ab:fc:c4:b4:b0:c1:97:e6:9a:c4:de:b2:
         d3:24:b8:01:12:dd:0a:c4:ec:e6:ee:80:a5:30:99:3f:09:16:
         70:3a:e9:89:d5:bf:fe:f3:c5:2a:6e:12:08:b7:05:51:d9:95:
         fa:ed:56:5f:83:91:e3:48:a8:83:45:12:26:2a:db:53:0f:eb:
         c6:3b:5e:c5:cb:b7:dd:67:a6:df:a0:5b:31:1c:81:3e:fb:dc:
         fd:c3:c8:60:06:01:2e:04:a4:ac:ea:fb:dd:d5:93:d5:6a:c1:
         65:51:cc:5b:a9:db:a0:5c:1b:f4:72:e1:86:39:b4:a9:a1:be:
         86:2c:63:15:76:bc:94:6e:d8:0a:29:d4:a7:e5:94:3d:90:c1:
         bb:14:a7:d9:68:8b:03:7f:a9:7a:72:af:26:d4:9c:c3:07:6c:
         a0:78:4e:dc:df:b0:4d:af:9c:96:98:14:63:1a:7a:a6:5e:fd:
         00:28:0d:01:ec:7e:f2:a5:ed:e9:2e:97:fb:b2:8d:3d:bc:70:
         28:17:15:b2:c1:42:4d:4b:3f:f4:e4:df:d2:67:c1:54:43:18:
         28:28:b3:12:e7:1d:58:0a:64:ee:c0:1a:4e:be:c2:b3:bb:81:
         1a:ab:1b:11:f2:9f:9c:88:e7:2f:ab:cf:55:30:a1:46:ab:ff:
         5c:a3:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org