Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa
File:                     3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa (raw, json)
Hash identifier:          BxUiJwEINOvRmXkIR+FhnGBLMQ9Gb6SkL3RJXnOclks=
Subject key identifier:   F6:A5:71:0D:B0:F2:41:B3:B0:D8:6D:7A:0B:9F:87:0B:13:BD:45:2A
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       5FEA94867F6D2897B6F2458EBC334A2464A6FDDE
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:07 +0000
ROA not before:           Wed 03 Apr 2024 21:09:07 +0000
ROA not after:            Wed 02 Apr 2025 21:14:07 +0000
asID:                     262313
IP address blocks:        177.105.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ea:94:86:7f:6d:28:97:b6:f2:45:8e:bc:33:4a:24:64:a6:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:07 2024 GMT
            Not After : Apr  2 21:14:07 2025 GMT
        Subject: CN=F6A5710DB0F241B3B0D86D7A0B9F870B13BD452A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:b9:40:e2:af:2e:3a:aa:54:e0:42:d2:de:
                    7d:cb:26:c8:05:73:63:68:a7:bb:11:2e:94:de:06:
                    36:50:3b:63:81:db:63:1b:da:d2:c4:52:b0:bf:cb:
                    2a:05:2c:08:3f:2f:ce:87:bd:b8:41:9f:14:7b:f1:
                    e5:19:ce:d7:07:e6:35:d4:4d:9c:f4:6d:58:e5:e6:
                    8a:4e:5c:ea:d4:0f:18:c0:5d:43:ae:44:8b:f1:41:
                    80:c1:24:ab:43:38:64:89:03:6e:f6:33:9c:65:52:
                    67:17:68:1f:5c:81:c4:63:17:4f:15:55:1e:9a:b6:
                    f3:1d:71:9e:c2:e4:15:83:32:0c:a4:ec:f3:54:43:
                    fd:fa:c8:73:bc:30:64:7f:d4:bf:c0:2d:7c:eb:ca:
                    94:1a:a2:e2:cb:b4:c7:1a:c8:84:1c:40:9c:a6:95:
                    6b:6d:cf:40:e8:d5:5a:9f:70:10:8f:2e:c2:b6:ee:
                    9a:fd:ff:28:8c:c0:aa:76:b0:87:84:0b:5b:0b:37:
                    c0:35:fe:b7:99:ec:d4:f3:de:86:89:95:43:12:4e:
                    7d:1e:9e:28:f5:2d:db:90:db:9b:e2:18:ca:e2:da:
                    ee:a8:d0:62:9a:3f:f8:4b:99:2d:b8:53:b1:0a:76:
                    b0:97:75:b8:d2:a9:4d:99:af:df:85:78:02:42:d4:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A5:71:0D:B0:F2:41:B3:B0:D8:6D:7A:0B:9F:87:0B:13:BD:45:2A
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32322d3232203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:f8:fb:66:14:d1:aa:43:3e:c0:2e:87:7a:1c:05:d6:b3:
         5d:c7:9b:7b:05:dc:57:18:c7:a8:05:47:9a:8b:d7:7a:dd:47:
         b6:66:ef:cb:3c:b5:9f:73:84:d7:a3:55:d5:a0:31:85:12:b9:
         68:b4:57:b3:0e:9e:29:59:03:33:4c:31:ef:79:f0:47:70:fb:
         80:69:6c:a9:64:7b:a4:7c:38:9c:ec:3b:43:57:f9:52:51:10:
         be:bd:60:ea:d5:1b:9c:64:e6:89:a6:07:c3:a9:93:f4:5a:7a:
         0b:0f:53:32:08:79:c0:ed:42:fd:d2:26:54:3e:01:1e:25:5b:
         9c:48:2b:e0:4a:2b:50:5a:96:ef:77:4e:99:8c:d9:08:14:cd:
         6e:9b:54:09:17:96:60:b2:e3:fa:3f:42:ce:56:84:28:0d:6a:
         40:16:fa:1f:4a:19:7b:65:ea:67:10:7b:27:8f:65:73:49:5d:
         88:a7:c6:aa:46:8a:2a:45:be:6b:48:60:15:1c:4f:e2:be:99:
         c0:a3:64:59:63:a0:f3:c4:e7:e8:b6:6b:cd:21:88:be:d9:63:
         fc:bd:89:36:17:92:73:21:45:c9:be:f6:39:04:2d:30:45:90:
         c5:16:78:88:ac:dc:2e:20:74:52:43:91:62:38:03:28:f6:44:
         8e:2d:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org