Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3332203d3e20323632343437.roa
File:                     3137372e35342e31362e302f32302d3332203d3e20323632343437.roa (raw, json)
Hash identifier:          hPAMqVOtZFOqX/+kGjnqAgd30rJR3zETy3r20AMp1Jk=
Subject key identifier:   46:B8:EE:29:8B:86:48:BD:0C:CE:1C:40:73:E3:3A:2C:96:1F:78:D1
Certificate issuer:       /CN=178EFDFED7D3672FFE70C27C33096B56E2951202
Certificate serial:       63F004EBE93C90EF59D987ADB9EBBC80255A2BC6
Authority key identifier: 17:8E:FD:FE:D7:D3:67:2F:FE:70:C2:7C:33:09:6B:56:E2:95:12:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/178EFDFED7D3672FFE70C27C33096B56E2951202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3332203d3e20323632343437.roa
Signing time:             Tue 12 Nov 2024 14:56:09 +0000
ROA not before:           Tue 12 Nov 2024 14:51:09 +0000
ROA not after:            Tue 11 Nov 2025 14:56:09 +0000
asID:                     262447
IP address blocks:        177.54.16.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/178EFDFED7D3672FFE70C27C33096B56E2951202.crl
                          rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/178EFDFED7D3672FFE70C27C33096B56E2951202.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/178EFDFED7D3672FFE70C27C33096B56E2951202.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f0:04:eb:e9:3c:90:ef:59:d9:87:ad:b9:eb:bc:80:25:5a:2b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178EFDFED7D3672FFE70C27C33096B56E2951202
        Validity
            Not Before: Nov 12 14:51:09 2024 GMT
            Not After : Nov 11 14:56:09 2025 GMT
        Subject: CN=46B8EE298B8648BD0CCE1C4073E33A2C961F78D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:26:6d:d6:e1:ce:4b:d8:7a:75:1b:28:34:
                    85:af:e9:da:97:31:e8:b2:53:7f:98:31:be:e9:27:
                    b5:59:78:3c:94:b5:a8:3e:05:35:4f:80:33:c2:a1:
                    4a:7f:1d:15:41:23:63:24:e7:e1:f6:f7:98:cf:7d:
                    7b:08:29:b4:5a:95:39:ea:19:ed:2b:9b:d1:11:a7:
                    fc:98:ab:1e:66:8e:51:36:f9:5f:c9:cd:88:de:99:
                    0e:08:7b:0c:de:10:ab:00:44:c4:78:d5:36:08:55:
                    9d:e2:9c:18:65:5c:57:21:b6:0d:ed:6c:a4:50:ef:
                    2b:35:e2:39:6f:5c:f9:fe:28:3a:8f:89:1f:0d:1e:
                    11:44:ec:15:94:98:af:0d:df:ab:03:f4:b4:92:3e:
                    d6:d2:89:03:49:7f:62:94:57:dd:46:85:01:ec:0d:
                    ef:f0:70:80:44:f4:ec:82:17:0b:26:4a:dc:8d:ae:
                    ea:d5:74:b9:20:68:16:68:f3:32:5e:df:51:f4:e5:
                    e1:69:5a:95:1a:7b:35:a0:b0:3c:28:99:82:a9:59:
                    56:aa:c7:c5:40:18:96:34:f4:23:18:1e:21:1e:66:
                    23:d3:60:08:2d:70:31:22:78:ed:c8:17:58:37:30:
                    88:f3:8c:be:41:14:d8:e6:12:43:54:59:98:3f:6f:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:EE:29:8B:86:48:BD:0C:CE:1C:40:73:E3:3A:2C:96:1F:78:D1
            X509v3 Authority Key Identifier:
                keyid:17:8E:FD:FE:D7:D3:67:2F:FE:70:C2:7C:33:09:6B:56:E2:95:12:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/178EFDFED7D3672FFE70C27C33096B56E2951202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/178EFDFED7D3672FFE70C27C33096B56E2951202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3332203d3e20323632343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:94:de:a9:78:24:e7:71:3a:0d:e4:64:03:75:97:28:30:
         43:51:b9:d4:22:24:37:d5:42:9d:cc:9a:1e:77:ec:27:71:b3:
         e6:8c:d5:bc:c8:ff:3a:0e:b0:0b:86:9e:fc:dc:76:63:21:6e:
         cc:00:e2:ee:80:54:c6:bd:b5:7a:61:e8:f1:1d:72:39:bd:5a:
         7d:24:5d:57:c5:21:09:d2:46:12:8d:32:47:40:63:48:56:e2:
         5a:00:88:cf:00:72:f5:b0:19:17:29:52:f0:50:69:58:75:d7:
         1c:b6:b8:22:e3:40:ea:04:53:30:3b:33:96:93:de:bc:21:77:
         ac:37:cc:b1:ea:1b:ee:cc:02:4f:ed:b3:a2:15:69:a3:a8:c8:
         80:b1:9f:6b:0a:40:8a:81:66:c2:9b:4f:8d:dd:13:1a:9a:27:
         a7:9e:96:0b:d8:c9:6c:df:1a:69:61:38:d3:7a:c8:e1:41:b2:
         2e:0d:11:ec:73:02:65:71:62:ad:84:4e:2e:c9:5a:3b:6b:c3:
         c2:0a:2e:c7:93:03:81:4e:a0:f6:bf:dd:5f:6c:2d:d6:1e:32:
         0e:15:24:0a:4e:ad:ea:b5:5f:3f:11:58:90:e3:24:a7:cb:ad:
         a2:71:37:1e:d4:30:2d:c4:b1:d6:91:70:67:c5:88:72:d9:7e:
         93:b6:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org