Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (raw, json)
Hash identifier:          P2U8UWR2BoV6cbP8mfpZnYyfHnEszb7+zuGAsnjOe5E=
Subject key identifier:   E8:14:B0:0D:A1:A8:B3:F7:6C:28:DA:90:DD:14:11:1D:E8:F7:3F:90
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       05D0FDD4E9CA7C1F84E82C6E0FC8AB21AC2F809D
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
Signing time:             Thu 04 Apr 2024 19:28:16 +0000
ROA not before:           Thu 04 Apr 2024 19:23:16 +0000
ROA not after:            Thu 03 Apr 2025 19:28:16 +0000
asID:                     263396
IP address blocks:        177.125.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d0:fd:d4:e9:ca:7c:1f:84:e8:2c:6e:0f:c8:ab:21:ac:2f:80:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Apr  4 19:23:16 2024 GMT
            Not After : Apr  3 19:28:16 2025 GMT
        Subject: CN=E814B00DA1A8B3F76C28DA90DD14111DE8F73F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:5b:75:83:91:f5:b6:96:6d:34:79:27:7d:
                    06:7f:b5:d7:15:50:59:9b:ce:67:3d:3f:23:71:46:
                    b7:4f:1c:a1:fb:d7:99:15:f3:6a:76:5b:e3:22:75:
                    06:be:9a:43:3f:6a:4e:53:68:76:78:61:bd:94:7d:
                    26:10:6e:f8:75:3a:d8:8f:89:43:76:77:80:4c:80:
                    7c:b6:da:91:94:64:d6:d7:c0:8a:80:86:69:74:9f:
                    53:c0:72:5d:4c:af:a5:f0:28:88:b6:43:f7:3a:45:
                    ff:25:a8:e4:2a:8d:f7:3e:67:43:6b:05:a9:c0:f4:
                    60:a8:2f:be:78:72:67:d8:c9:cb:d4:e0:60:39:72:
                    39:f4:38:df:6a:fc:5e:f7:6e:ad:7d:94:1a:58:51:
                    e3:dd:5b:4e:d1:87:96:26:91:40:3b:c8:19:2a:95:
                    33:0f:66:54:84:64:ea:90:b8:d5:4f:26:76:ad:98:
                    f3:15:7e:28:dc:59:2d:c5:a5:e0:9c:6e:c3:d5:1c:
                    2f:91:2d:dc:c8:a3:06:04:a7:c3:b2:89:c8:f8:39:
                    10:7d:41:40:e9:75:b7:a0:da:2f:9c:37:a1:37:f8:
                    71:30:8f:91:ab:2f:ff:05:2a:bc:a3:66:b4:f4:e2:
                    d2:78:0b:c3:f0:a4:0a:4a:03:17:03:93:cb:48:e2:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:B0:0D:A1:A8:B3:F7:6C:28:DA:90:DD:14:11:1D:E8:F7:3F:90
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:3b:7d:c8:c4:d3:97:74:5a:34:a9:a9:73:be:72:ee:3f:54:
         51:be:5f:e2:38:f4:1d:28:ba:f9:c2:58:3f:7e:8f:57:38:a8:
         fc:05:39:9b:e6:d5:d6:d3:03:42:36:e0:58:1e:a8:34:c3:ce:
         c6:d3:e6:92:e6:6a:19:93:7f:cf:3c:ae:0c:ac:18:e4:1b:32:
         2a:ca:56:df:40:01:27:4e:06:76:3c:03:58:b0:51:c8:4c:14:
         8b:d2:75:cf:58:ce:f3:ad:62:7f:09:d3:3b:fe:b1:12:de:92:
         35:51:3b:03:b2:18:94:65:75:ab:c9:10:38:8a:8f:37:95:bb:
         40:2b:54:8b:d9:05:22:56:50:72:ed:28:c2:09:bc:d8:30:50:
         a2:1b:ec:62:ba:f3:d6:d8:b2:3a:24:71:63:28:57:f3:ed:c5:
         89:1b:a0:97:ba:46:52:62:a2:1e:85:68:a1:dc:bd:c5:90:9d:
         2d:2d:38:1a:83:e1:98:d9:f5:fc:0d:ec:b1:ce:9b:4e:0d:ee:
         da:7e:81:c8:7e:4a:4f:42:e7:e5:aa:fe:72:8a:e9:1b:9e:f1:
         40:18:85:c6:8b:4f:7c:bc:3e:51:48:14:be:c1:c0:96:e2:29:
         5f:c1:08:67:dd:4e:25:9e:37:ac:26:4c:d2:a3:30:03:e6:7f:
         82:9b:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:46 2024 by rpki-client on console-fra.rpki-client.org