Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa
File:                     3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa (raw, json)
Hash identifier:          FbSQwpHjuT15k6T9i4LZIR9ObYYOmcgMoNips6jjMUc=
Subject key identifier:   A3:98:44:7C:7F:09:5E:34:A2:47:36:76:7F:D7:D3:14:FF:30:41:B7
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       342408C7E04F42168B3384DE0A5FDCB6C023DDCC
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa
Signing time:             Thu 04 Apr 2024 19:28:17 +0000
ROA not before:           Thu 04 Apr 2024 19:23:17 +0000
ROA not after:            Thu 03 Apr 2025 19:28:17 +0000
asID:                     263396
IP address blocks:        177.125.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:24:08:c7:e0:4f:42:16:8b:33:84:de:0a:5f:dc:b6:c0:23:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Apr  4 19:23:17 2024 GMT
            Not After : Apr  3 19:28:17 2025 GMT
        Subject: CN=A398447C7F095E34A24736767FD7D314FF3041B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:49:a6:f5:3c:a8:ba:f0:d8:40:69:15:52:
                    fe:7b:7e:e5:fc:73:65:c7:91:16:a9:4f:a0:5c:dd:
                    d9:eb:37:90:40:11:8b:42:94:f2:20:79:6f:04:48:
                    da:83:32:11:26:4c:4e:f8:5d:3d:82:e8:43:54:fa:
                    a0:2f:2d:60:a6:e6:07:d4:4f:dc:5c:a7:4b:f9:0f:
                    9e:fc:1d:6f:d2:b9:a2:12:57:e9:5f:0f:37:77:9c:
                    e5:fd:f7:fd:2f:87:eb:65:6b:d1:f7:b9:46:09:17:
                    09:5f:33:b6:ac:16:dd:a7:36:ed:89:f6:41:65:d6:
                    f8:9a:8f:47:7e:24:aa:e8:3d:6b:da:d0:87:c5:ce:
                    bc:a5:c9:0d:cc:82:f6:3a:e9:b2:20:29:57:c9:dd:
                    f4:c7:ec:ba:1b:c5:7a:b7:0a:88:be:9c:b9:f5:d5:
                    e8:db:96:e8:c0:1c:93:a2:4a:68:d1:db:b4:10:7a:
                    1b:1f:2e:11:d6:03:13:51:7a:46:11:03:c3:9a:87:
                    c9:83:71:cd:61:8f:94:5a:7a:21:ea:5d:9c:a4:15:
                    e0:89:4d:e6:3b:9b:97:dd:4b:76:30:f9:25:5a:cb:
                    f3:9e:0d:43:5b:57:aa:f9:87:dd:b5:11:a5:be:0a:
                    58:e1:03:e8:99:a8:56:be:1b:30:e1:19:b3:3f:5a:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:98:44:7C:7F:09:5E:34:A2:47:36:76:7F:D7:D3:14:FF:30:41:B7
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:75:f8:db:44:41:4d:3d:ca:68:4c:bc:bd:52:b3:72:39:
         b1:71:3e:d1:eb:8c:b9:b7:ca:29:c4:0b:b3:a1:2a:2b:a1:db:
         a8:36:7a:81:71:9b:ad:fb:bb:03:94:76:a6:76:12:28:f6:a0:
         66:1d:ca:8b:49:69:cd:58:9e:b2:53:24:b6:30:85:fe:04:a1:
         a2:c9:e5:29:d7:d2:e9:b4:d1:91:dc:91:70:1c:94:35:85:5f:
         af:a4:07:50:51:fc:2b:39:31:35:7e:11:2d:37:43:f1:6d:b6:
         75:5c:d0:5d:e9:82:f1:c2:58:ea:52:36:fb:f5:52:45:c5:99:
         d1:72:b2:65:88:b9:62:24:7f:ec:54:5d:ef:76:9d:3a:eb:2f:
         c2:29:cf:c4:12:86:3f:7e:2a:ca:71:c8:de:db:96:56:0e:55:
         af:47:02:78:05:48:0f:4a:15:61:97:73:48:1c:61:ed:33:2c:
         96:47:8f:a6:15:71:76:cd:0a:ff:63:96:02:75:fa:55:3a:21:
         02:fd:19:ca:e2:6e:2b:7a:fa:24:2c:ee:3e:73:e0:f1:b2:3e:
         a8:2e:87:f8:e5:5f:25:8f:c7:d0:6d:11:6e:c1:25:00:75:5a:
         a1:8c:24:8b:17:ce:aa:d7:45:70:d5:bc:52:3f:f4:f8:fb:eb:
         74:7e:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org