Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32322d3234203d3e20323730393531.roa
File:                     3137372e33362e36382e302f32322d3234203d3e20323730393531.roa (raw, json)
Hash identifier:          c4+pvIPHISOcpC4UCmMa+0w+eZR/hRPZoKvkl6I4mCI=
Subject key identifier:   4F:09:E5:4B:CC:E2:A2:83:C2:84:67:28:D0:23:9A:C0:D6:1D:75:03
Certificate issuer:       /CN=5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0
Certificate serial:       5027C0CC71F93B1B5C58F94A65425F60EC507E05
Authority key identifier: 5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32322d3234203d3e20323730393531.roa
Signing time:             Mon 23 Sep 2024 16:57:34 +0000
ROA not before:           Mon 23 Sep 2024 16:52:34 +0000
ROA not after:            Mon 22 Sep 2025 16:57:34 +0000
asID:                     270951
IP address blocks:        177.36.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:c0:cc:71:f9:3b:1b:5c:58:f9:4a:65:42:5f:60:ec:50:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0
        Validity
            Not Before: Sep 23 16:52:34 2024 GMT
            Not After : Sep 22 16:57:34 2025 GMT
        Subject: CN=4F09E54BCCE2A283C2846728D0239AC0D61D7503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:48:48:ea:c9:ca:b9:4f:72:6f:fd:9b:de:
                    c2:32:61:36:95:26:55:06:89:77:59:4b:f0:98:23:
                    e7:f0:73:45:f4:be:06:d9:fa:78:f0:29:af:d0:94:
                    3b:c2:94:aa:0d:79:6a:46:cb:81:a3:1b:54:ae:73:
                    a6:1d:2a:f7:4e:90:0a:76:7e:dd:7a:74:01:8e:a2:
                    ca:76:a3:60:bc:ab:7b:36:b0:78:3b:fc:8f:8f:69:
                    d3:e8:f9:5f:be:0c:1c:f4:25:95:da:fa:04:5e:e6:
                    ec:76:25:ce:e0:c9:22:b9:a0:5b:a9:db:3d:14:e9:
                    76:e9:71:92:42:b8:8f:92:61:c5:b1:8c:8a:c9:2e:
                    f7:3e:00:b3:89:11:21:41:0a:93:3c:ad:ce:26:d1:
                    05:37:b7:b3:6e:c2:c7:50:e8:7d:52:a1:91:cf:34:
                    c0:c7:b8:0c:bc:63:d9:61:8c:5f:89:e6:52:c0:23:
                    fd:77:b9:fb:c3:46:3d:b1:b0:f0:d2:5e:87:3c:19:
                    cc:28:c1:4d:84:ac:c5:bb:02:45:88:33:33:c6:f0:
                    41:6a:a6:18:8a:d0:8f:0c:41:6b:8f:7e:d5:75:9e:
                    01:ed:2d:f7:6a:5e:97:11:c8:a5:e0:c1:85:7b:02:
                    67:2c:3f:9a:57:d0:87:5a:62:51:38:37:0e:77:9e:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:E5:4B:CC:E2:A2:83:C2:84:67:28:D0:23:9A:C0:D6:1D:75:03
            X509v3 Authority Key Identifier:
                keyid:5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32322d3234203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:fd:c3:53:fe:ac:be:47:17:20:48:5e:63:f4:ea:9b:8a:
         f7:93:3d:79:95:33:42:2a:60:7f:44:17:a5:de:be:6c:08:74:
         25:3d:e8:ae:55:3d:23:54:0c:64:cb:21:2c:0d:01:f2:82:69:
         47:d2:ec:18:a8:8d:e6:cf:ac:f2:84:a0:9d:05:b7:3f:25:d7:
         36:bc:07:25:08:ff:bd:9b:45:dc:31:90:e8:cb:26:85:69:88:
         5c:ae:86:c9:9e:d1:56:7c:46:53:c8:c2:44:de:c2:6f:95:90:
         80:85:37:80:b3:59:37:7f:db:c5:04:10:82:c3:c9:96:3e:df:
         e2:89:62:43:45:7a:8b:32:b4:e2:4f:c2:4d:0e:42:a2:69:f2:
         37:30:b2:28:fe:25:e1:bf:52:41:87:41:33:ea:a0:98:c5:14:
         1f:63:93:6f:ba:25:23:a8:86:b2:f3:e0:ea:08:33:34:0e:89:
         c6:94:c8:b8:2e:70:99:07:91:c5:55:f9:4e:27:28:c3:25:1e:
         25:04:6a:d6:c6:d9:c7:cd:40:2b:44:64:f3:8d:eb:04:4f:6a:
         14:42:ab:91:73:d1:a7:83:f5:48:ec:3f:02:62:9b:d9:8c:eb:
         a8:dd:28:5c:d4:74:37:18:2a:ba:73:43:9d:ec:d9:ac:8d:62:
         03:1b:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:58 2024 by rpki-client on console-fra.rpki-client.org