Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e39362e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          +PRe1uWfUiIDjK/LJJpE3bJrLAymOP4D47hLnBvl8pM=
Subject key identifier:   BB:80:61:42:F9:5A:9B:DD:9D:AD:3E:D3:B6:CE:F6:53:33:88:ED:B1
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       5035ABDF9F699698625467C2BD981CCAFCBB60A9
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa
Signing time:             Fri 08 Nov 2024 18:29:55 +0000
ROA not before:           Fri 08 Nov 2024 18:24:55 +0000
ROA not after:            Fri 07 Nov 2025 18:29:55 +0000
asID:                     28146
IP address blocks:        177.75.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:35:ab:df:9f:69:96:98:62:54:67:c2:bd:98:1c:ca:fc:bb:60:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:24:55 2024 GMT
            Not After : Nov  7 18:29:55 2025 GMT
        Subject: CN=BB806142F95A9BDD9DAD3ED3B6CEF6533388EDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:33:6c:14:6d:45:08:0a:c6:eb:5a:fd:c5:
                    5e:41:c0:f0:3b:bd:72:0c:cb:fa:51:f4:e4:b8:d3:
                    ac:32:98:87:6d:e8:b5:0d:a8:36:5f:78:a6:60:71:
                    3f:13:20:b8:03:39:1e:a3:5d:34:b2:8b:8b:3f:9d:
                    3d:a3:57:2f:4e:d6:62:04:9a:72:f6:b3:66:52:f6:
                    f3:e9:77:ec:0b:ec:4d:32:92:ad:3f:8b:00:e9:00:
                    01:47:c7:3a:2a:1e:f3:bb:d3:e6:c7:f4:f9:b6:58:
                    eb:8a:17:8e:ea:33:98:61:51:25:f7:b4:fa:a4:95:
                    ee:23:38:95:ba:c6:60:57:f1:9f:74:02:99:cc:e2:
                    c2:80:83:e1:3c:07:d5:aa:d5:61:96:bb:1a:1f:58:
                    27:6e:94:e2:7d:b1:44:46:f3:d8:3b:52:33:cd:32:
                    71:43:ea:55:81:11:27:ec:e7:43:73:68:f6:a0:11:
                    38:2d:32:43:69:e4:5d:75:ed:6c:53:1e:f1:8c:89:
                    5f:9f:07:cc:55:29:85:5c:a5:f3:1e:ec:ad:e2:9e:
                    bf:7c:4d:b3:32:66:b6:c7:d7:9e:fd:96:5b:78:84:
                    8c:6c:d0:57:32:b9:39:7f:c1:7a:8c:a0:25:f5:d3:
                    53:9e:3f:75:65:c0:b6:4a:b3:f5:fb:77:8a:e5:62:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:61:42:F9:5A:9B:DD:9D:AD:3E:D3:B6:CE:F6:53:33:88:ED:B1
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:85:04:fc:18:f0:c3:6a:ee:ca:67:21:85:60:c0:e9:3f:62:
         97:77:9d:f3:5b:6d:ff:99:eb:4b:2c:8f:89:12:2f:e3:f4:8d:
         0d:24:b8:55:9d:ed:f4:40:e1:33:c7:d1:54:65:45:ab:a1:93:
         ac:c7:d7:e1:ca:12:44:18:00:9a:ad:07:62:dd:ce:d1:03:63:
         ff:a3:0d:98:f5:3e:4e:19:f8:47:82:5c:fd:84:71:04:8b:f1:
         be:5c:c4:20:aa:db:75:e1:a2:09:42:3e:57:8d:28:dc:2e:8f:
         36:40:3e:0d:ce:1b:cd:07:19:c8:e6:46:d4:2f:a4:90:c7:04:
         89:9b:9f:a2:a8:d5:2b:8a:96:46:64:3c:b9:ef:b0:d4:96:c3:
         ad:72:40:6c:49:90:c0:37:31:fe:e2:49:c3:1f:c2:70:43:85:
         73:eb:02:08:22:98:4f:ce:ce:c1:39:61:de:18:2b:98:c5:ec:
         c5:69:38:a0:5c:7a:aa:e0:8e:1f:13:4c:47:16:68:3a:67:2d:
         11:f2:0f:dd:6f:f4:3e:7a:60:98:55:2b:d6:1f:a8:b9:c3:ef:
         be:b0:d2:45:14:04:00:a9:16:b0:e6:06:ba:63:09:9d:7f:e0:
         2a:71:02:46:6f:7c:ba:e8:45:6c:d8:12:9e:e0:fc:df:63:b3:
         b2:cb:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:37 2024 by rpki-client on console-fra.rpki-client.org