Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32332d3233203d3e20323632333133.roa
File:                     3137372e3130352e3233362e302f32332d3233203d3e20323632333133.roa (raw, json)
Hash identifier:          /HTQnyuHsouoc0YD4oCIZQSM8/2xvNn5jKQtdzJEQRY=
Subject key identifier:   AC:D4:9F:B9:53:F1:8D:85:73:35:25:90:4C:5A:A8:44:BB:F2:D8:46
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       30D4E67CAB889A3113B917BF9308408D2422A4DC
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32332d3233203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:08 +0000
ROA not before:           Wed 03 Apr 2024 21:09:08 +0000
ROA not after:            Wed 02 Apr 2025 21:14:08 +0000
asID:                     262313
IP address blocks:        177.105.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:e6:7c:ab:88:9a:31:13:b9:17:bf:93:08:40:8d:24:22:a4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:08 2024 GMT
            Not After : Apr  2 21:14:08 2025 GMT
        Subject: CN=ACD49FB953F18D85733525904C5AA844BBF2D846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:2e:51:a7:77:2a:64:d4:03:56:a8:7c:a0:
                    19:c0:9c:97:30:bc:30:9c:f3:e3:64:5a:29:94:be:
                    e2:6c:56:35:83:89:4d:e7:95:7b:22:b4:2b:b7:c0:
                    b8:bc:c1:f3:6f:81:5c:bd:f8:52:9e:cb:80:d3:53:
                    0a:18:d9:bc:0d:7f:b7:b5:2f:bd:2a:00:b4:cd:c4:
                    28:55:f6:f8:f4:62:04:dd:f8:90:ad:43:0d:98:94:
                    ae:f6:c8:6a:94:30:60:45:61:19:45:d2:e0:7d:cd:
                    29:26:53:4f:a9:02:e1:b6:d1:9f:ff:99:b3:3e:9a:
                    73:ff:ca:31:00:d6:b0:0f:46:c9:b2:2a:83:fe:d7:
                    7d:ae:ba:ec:53:19:c7:03:ac:1e:80:da:60:e0:93:
                    30:c8:31:77:da:40:c6:f3:2a:ae:5e:68:77:41:e5:
                    95:0d:3e:67:ce:b3:8e:ae:9d:58:1b:71:65:19:f6:
                    8e:4b:0d:a8:99:df:65:e9:06:bd:5a:a4:b0:53:41:
                    e1:29:5f:d7:d0:b9:c7:ff:be:da:a2:a0:d6:67:cc:
                    07:c0:9d:63:fc:0f:b0:c0:73:e8:6d:14:2f:97:f5:
                    22:68:58:7a:5c:e1:fc:02:b4:3a:0a:53:c9:10:9e:
                    2c:77:07:7b:4b:a9:7b:5b:ca:57:98:e8:39:0f:21:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:9F:B9:53:F1:8D:85:73:35:25:90:4C:5A:A8:44:BB:F2:D8:46
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32332d3233203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:47:da:b2:cb:26:62:cb:2c:41:11:06:7b:4d:d6:3c:53:
         de:8c:f4:36:df:a6:cc:68:e6:9c:7e:73:2a:f5:d6:58:a8:af:
         14:76:9e:b7:a3:68:22:a4:c5:15:dd:74:42:91:30:88:8b:8e:
         8d:1b:49:6f:4d:19:63:08:90:68:62:aa:c9:7e:df:ff:fb:e3:
         23:47:32:d0:19:52:0e:59:90:dd:82:de:f4:a2:3a:ad:65:d4:
         c7:f0:33:2c:ee:48:8d:82:d5:8e:77:78:86:37:6a:e5:2c:15:
         dd:f9:a2:9d:47:98:a6:f2:48:e2:98:18:10:47:bb:ad:0f:e6:
         00:c3:6b:c6:68:ba:a0:c1:e4:cd:fa:57:5b:09:e7:6b:a1:28:
         d2:87:ee:9e:24:ac:f1:bd:ff:81:77:c5:41:d0:0a:0f:b5:9e:
         26:f8:92:a2:00:97:6f:16:28:61:a5:00:3e:db:48:3c:21:c1:
         6e:03:a6:d4:7a:81:ce:2c:b7:36:0c:ee:84:94:13:29:9b:f9:
         4d:84:6b:b3:e3:bb:85:fe:96:74:b3:be:b1:12:c1:ed:69:f6:
         a4:2e:12:06:db:f8:17:0d:e6:1e:6a:14:00:d4:e2:38:fb:26:
         e8:e1:f7:e5:f3:95:94:be:db:48:76:b8:17:1e:31:74:6f:e6:
         22:ad:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org