Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
File:                     3137372e36362e33322e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          EN+60DCGHv6tjqlfbaZApPGpNYt8KJyH3v2LKfY1F1c=
Subject key identifier:   05:CF:71:9B:AD:23:E6:AC:B7:55:39:5D:3B:E4:5A:88:28:08:3C:F0
Certificate issuer:       /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial:       50AEC5A40D6578F0FE49C7F96FC4CEC4C3DB4500
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
Signing time:             Thu 25 Apr 2024 15:10:59 +0000
ROA not before:           Thu 25 Apr 2024 15:05:59 +0000
ROA not after:            Thu 24 Apr 2025 15:10:59 +0000
asID:                     52999
IP address blocks:        177.66.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:c5:a4:0d:65:78:f0:fe:49:c7:f9:6f:c4:ce:c4:c3:db:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
        Validity
            Not Before: Apr 25 15:05:59 2024 GMT
            Not After : Apr 24 15:10:59 2025 GMT
        Subject: CN=05CF719BAD23E6ACB755395D3BE45A8828083CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fe:aa:c3:35:62:e4:48:e2:78:e9:50:42:f9:
                    61:02:18:d8:16:3b:6b:16:42:48:dd:13:3a:f0:fa:
                    08:dc:a3:a5:05:ad:a2:17:c4:8a:19:5b:b9:5a:37:
                    6f:a1:39:34:8b:5e:ae:de:5b:58:28:7d:b0:d7:da:
                    dd:ce:43:5d:b7:29:80:de:4a:47:2e:57:32:df:bf:
                    db:5a:91:9b:57:8b:b9:0a:d0:a9:e8:71:3e:72:6d:
                    27:b6:c6:75:c1:18:13:ef:98:1a:2e:17:c9:62:68:
                    e5:79:2e:ed:94:d8:25:6c:02:63:be:91:cc:81:c2:
                    6b:82:d8:05:65:0d:33:40:8a:19:e2:85:2f:cb:bb:
                    6d:df:c4:61:c6:78:a5:42:8d:62:7a:97:d5:13:ea:
                    99:f6:0d:2b:60:68:f1:68:4f:5f:94:76:97:5d:be:
                    d0:25:da:b8:11:27:cf:ca:b1:dc:b6:ad:ff:86:1f:
                    9c:3e:13:70:82:f0:11:02:5b:fe:0b:ee:16:2c:42:
                    9f:e2:b0:34:e6:55:75:e5:b4:75:c3:f6:c4:74:a1:
                    e2:b0:03:e7:ec:2f:cc:b5:db:6b:68:11:25:e7:4a:
                    e4:01:d8:1e:62:7c:f3:07:df:63:40:ae:ba:37:79:
                    81:7d:19:a4:fb:98:49:9b:98:ec:64:02:ce:cc:e5:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:71:9B:AD:23:E6:AC:B7:55:39:5D:3B:E4:5A:88:28:08:3C:F0
            X509v3 Authority Key Identifier:
                keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:b6:a0:ae:cb:dd:cb:9e:ed:b6:b0:b8:f9:06:be:cf:8b:
         ab:78:d0:2f:d8:cf:88:dd:72:0b:18:1e:96:40:9d:f2:55:9c:
         62:cf:0a:a2:95:22:3f:93:10:1f:78:e5:fd:ca:ec:56:6b:eb:
         fa:1c:7f:92:ef:52:54:09:87:14:0b:06:cb:9d:f4:56:e8:5e:
         88:99:e1:d1:7d:fa:93:f8:9d:d8:03:5a:e0:2e:68:29:4d:cd:
         23:f4:58:f1:35:b7:34:7e:29:3c:a1:86:d2:f8:0d:df:c2:f5:
         af:6a:16:c6:0d:1f:09:49:91:33:7f:6c:ef:9d:40:4d:b6:32:
         6e:cf:6f:c6:29:07:29:da:f1:37:8b:73:0d:34:3d:90:b3:66:
         f5:12:6a:e0:d5:30:a6:e1:d3:4c:8f:eb:c5:b6:04:26:01:0a:
         df:a0:22:b4:b2:00:ab:a4:0f:73:39:3c:4f:c8:07:a9:b7:2a:
         76:c8:99:0c:a4:4f:2e:6c:91:ea:e7:87:84:8f:03:69:45:ac:
         7f:76:d4:51:5c:55:b3:18:a3:ec:72:86:68:00:df:b6:77:b1:
         fb:15:54:7b:e3:b5:90:00:12:b2:bc:84:14:20:ab:82:01:97:
         28:56:b5:5f:10:db:77:06:bd:9c:03:21:74:a9:58:1a:cc:69:
         44:4b:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:35 2024 by rpki-client on console-fra.rpki-client.org