Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
File:                     3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          aoaX4szbfnG9epEBVdVYiUo6GAphqKnwip4/wGP+g4g=
Subject key identifier:   78:1F:55:74:4F:39:56:BC:24:61:80:FE:68:C2:C0:18:85:E4:8A:90
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       76469A629D669445610878D2A34B384F4A1D96BA
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:41 +0000
ROA not before:           Mon 25 Nov 2024 16:58:41 +0000
ROA not after:            Mon 24 Nov 2025 17:03:41 +0000
asID:                     28667
IP address blocks:        177.184.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:46:9a:62:9d:66:94:45:61:08:78:d2:a3:4b:38:4f:4a:1d:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:41 2024 GMT
            Not After : Nov 24 17:03:41 2025 GMT
        Subject: CN=781F55744F3956BC246180FE68C2C01885E48A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:1b:5e:78:b3:58:f2:f1:97:2b:f4:36:0a:
                    77:74:e6:32:89:d0:43:2c:c5:98:0a:29:8c:9b:71:
                    0d:0d:82:91:b5:65:a5:93:7c:50:f9:34:22:b3:e7:
                    6b:49:ed:fa:82:11:96:ed:5c:a1:db:c1:f6:94:31:
                    6d:8d:22:c7:e4:d6:bd:45:d7:2a:93:fa:3e:06:ce:
                    e0:13:7b:dc:51:42:07:33:1b:bc:d2:8e:bb:12:7a:
                    98:bb:ad:78:08:53:00:17:ce:ed:29:d0:ad:79:fe:
                    7b:08:68:5b:31:d9:fe:c3:fe:b6:61:89:23:ff:07:
                    71:70:d1:50:3d:4c:50:19:35:c5:a5:eb:9a:46:6c:
                    18:66:12:3b:99:9d:82:d6:33:e7:c8:bb:60:40:0a:
                    bc:bc:a5:92:25:34:14:16:a4:d4:9a:90:09:48:86:
                    4c:ff:9b:4f:ae:74:31:35:6e:cb:22:1f:00:36:dd:
                    6c:44:e5:9d:6d:5a:40:2b:8f:8f:03:6f:08:78:c4:
                    50:7a:09:ce:76:dd:c6:d1:59:33:d4:38:7a:20:61:
                    9e:d6:16:11:6c:eb:3a:cd:eb:bf:2e:e4:ca:6d:4d:
                    d7:cf:6c:07:03:f4:9e:25:90:80:86:c0:d4:2e:01:
                    80:ab:c9:27:14:b0:47:ea:72:6e:5f:4d:83:45:f6:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:55:74:4F:39:56:BC:24:61:80:FE:68:C2:C0:18:85:E4:8A:90
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:99:4b:65:e1:26:fa:ce:0b:7b:4a:82:8f:aa:12:9f:98:cf:
         36:a7:c4:da:47:0b:36:5e:5c:a0:e0:da:4c:4b:fe:22:01:06:
         e1:34:fc:79:d4:a8:05:d0:a6:97:91:eb:ed:ea:11:99:e8:06:
         e4:be:be:80:e2:6c:e7:3c:8e:ea:73:a7:12:6a:d4:a1:91:9f:
         5a:74:8e:d5:50:9b:e5:7c:6b:78:de:02:45:cd:aa:10:46:48:
         92:d3:34:40:65:51:ea:7b:af:3a:d7:83:0c:8d:6c:c8:3f:b4:
         c1:26:38:d4:6b:8f:b0:3b:51:2e:0b:05:87:32:6e:66:de:17:
         53:73:ae:81:71:80:ba:e9:42:cc:33:56:f9:f3:ed:85:01:95:
         08:08:b8:15:eb:66:10:80:39:d8:9c:c1:6d:2f:03:61:04:eb:
         d7:4e:d0:a0:89:af:c9:62:2e:1a:c3:c2:5f:79:9b:a3:b0:2b:
         5b:b5:7c:3c:24:23:b1:3b:a2:83:e0:c7:1c:e0:96:87:c8:76:
         95:e6:ef:ef:11:fe:19:48:72:e9:bb:92:75:03:93:96:67:00:
         75:5d:18:16:a1:95:c4:b0:d3:f7:16:15:6c:a8:a1:49:57:81:
         e8:7c:5b:d2:04:d6:0e:29:06:f3:be:53:a5:58:ac:b9:b5:45:
         b6:02:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org