Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3139312e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3139312e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          S6fdCLiMTVw8hI4Wi4uHvTn1crr7lyJMkmMxeDX6wsM=
Subject key identifier:   3A:51:96:9C:D4:F8:89:4E:22:6B:36:5D:1B:19:82:E3:D8:F5:1E:71
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       49EACDB2801E553CD06E3B11D4D53F08F3CB703B
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3139312e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:19 +0000
ROA not before:           Tue 25 Jun 2024 15:16:19 +0000
ROA not after:            Tue 24 Jun 2025 15:21:19 +0000
asID:                     28306
IP address blocks:        177.91.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:cd:b2:80:1e:55:3c:d0:6e:3b:11:d4:d5:3f:08:f3:cb:70:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:19 2024 GMT
            Not After : Jun 24 15:21:19 2025 GMT
        Subject: CN=3A51969CD4F8894E226B365D1B1982E3D8F51E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:bc:a1:d6:6d:e1:12:f9:f8:ce:9e:11:5e:
                    fd:61:64:13:a8:a1:46:8a:3e:ec:c3:5a:de:37:1d:
                    e2:25:a0:a9:37:87:4f:93:30:8e:94:ae:9c:81:11:
                    c8:06:1e:22:2a:ac:0f:7e:99:26:b2:7f:76:7e:d1:
                    cd:4d:73:03:3e:4e:0f:7d:ac:60:89:de:82:ce:6b:
                    a8:6a:bb:4a:4f:c5:f3:85:4c:e7:ce:61:20:65:a1:
                    b1:88:93:c7:8a:6f:3e:29:c8:47:42:12:c8:a7:df:
                    e1:05:59:5a:c6:fc:ac:38:a2:1c:b1:c5:bd:bc:65:
                    40:e1:43:93:5b:49:c5:5d:93:cd:ee:e8:39:62:9b:
                    ea:fd:7a:bf:9e:48:d5:68:ac:aa:ea:f2:94:1a:18:
                    a6:72:d3:3d:f5:47:8e:21:a5:0d:b4:0f:fb:c2:3a:
                    62:cf:a1:ce:98:26:07:4a:c0:21:5d:a5:df:8a:3b:
                    c3:24:85:c8:0c:97:0b:08:dc:d2:28:6f:2d:ae:1c:
                    ba:6a:16:54:d2:b9:13:ea:82:af:8e:39:31:ff:9b:
                    c3:47:04:2a:0a:ba:34:42:df:1c:bc:fa:67:a5:24:
                    2c:8e:7a:dd:bc:ae:f5:4f:23:20:93:f6:8c:24:70:
                    c0:f4:8f:49:df:ff:63:78:66:83:25:96:49:d2:2f:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:51:96:9C:D4:F8:89:4E:22:6B:36:5D:1B:19:82:E3:D8:F5:1E:71
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3139312e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:90:bc:2c:4c:19:44:c7:3b:b1:19:06:ba:ff:d0:bc:d3:6f:
         74:66:a8:19:05:54:b4:29:9a:d6:9b:ed:47:f5:3a:b6:cd:5f:
         75:56:4c:b4:0e:8f:19:92:b4:94:e0:4e:47:f7:b4:be:0b:8a:
         66:4a:eb:89:95:57:52:0c:da:e9:28:9e:d2:4f:ea:db:71:11:
         78:f8:ca:b8:a8:67:a4:4b:f3:cd:36:df:57:6d:b0:c4:3e:0f:
         07:a4:fb:ec:68:f2:3b:37:cf:7e:3f:be:7c:48:16:72:d6:3e:
         44:9e:73:8a:a9:fd:e2:28:79:31:61:b5:5a:52:c0:4c:d7:65:
         5d:bc:80:b6:82:d0:02:58:4a:86:7f:d9:29:79:c1:55:22:18:
         9c:0b:83:cb:64:99:35:d5:41:a1:60:48:83:a8:e6:ee:ba:16:
         9a:9a:bd:35:a5:46:6f:73:44:6f:6b:56:f4:0c:c5:36:67:ed:
         5e:9b:24:18:06:58:2f:73:b6:89:ef:d1:f0:0c:2b:3f:a9:1d:
         92:18:3f:a0:79:86:87:ae:45:b8:68:18:cf:3d:ed:ee:cf:d8:
         fe:b2:ea:30:85:ee:c2:a0:7a:3d:98:07:2a:65:9a:37:29:f0:
         2c:10:d7:ec:d6:bb:34:0b:0e:1f:77:d2:a8:a3:ec:b3:3a:f5:
         bc:15:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:03 2024 by rpki-client on console-ams.rpki-client.org