Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa
File:                     3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa (raw, json)
Hash identifier:          kwMJ6/VwPwBiesoKD7paNo/QF4y3qGZVk9tPfHZZRwY=
Subject key identifier:   27:61:19:DA:7E:E9:5F:0A:01:B2:42:B2:90:2A:4B:A0:A6:DB:32:A8
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       7D73A136D02DBBC959B74DBAFD32C23976608883
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:50 +0000
ROA not before:           Thu 04 Apr 2024 04:32:50 +0000
ROA not after:            Thu 03 Apr 2025 04:37:50 +0000
asID:                     28210
IP address blocks:        177.131.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:a1:36:d0:2d:bb:c9:59:b7:4d:ba:fd:32:c2:39:76:60:88:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:50 2024 GMT
            Not After : Apr  3 04:37:50 2025 GMT
        Subject: CN=276119DA7EE95F0A01B242B2902A4BA0A6DB32A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:6b:6b:ec:b6:58:31:1c:34:46:64:1c:94:
                    28:3e:4d:65:07:24:d3:74:8a:fd:cb:52:a3:3e:90:
                    92:00:d1:3a:11:9b:d2:b4:9a:56:2f:8c:69:83:41:
                    e2:57:6d:4e:f5:5a:df:5b:31:3c:9f:0e:57:8d:7b:
                    ab:81:2a:5c:84:c5:14:b7:a0:19:a9:92:8a:b6:be:
                    68:85:13:6e:2b:d4:d2:3d:27:b6:b1:36:e5:ce:28:
                    43:0c:32:6e:26:af:04:01:92:57:e5:52:68:45:4b:
                    52:fd:fa:18:27:a8:47:5b:b3:73:d7:f5:32:9d:ea:
                    13:09:e7:0d:bf:1d:c0:b4:e8:14:81:05:1b:99:49:
                    0f:91:06:60:51:2f:72:73:bd:d0:36:46:7d:e1:e5:
                    db:64:f7:01:0e:75:7c:ae:de:80:62:92:c9:9f:ef:
                    8e:76:14:49:5d:20:f6:50:46:cf:71:03:f0:2b:b0:
                    45:05:2b:8d:8c:c8:7e:67:27:32:64:60:69:75:3e:
                    58:7f:b1:cb:46:95:5a:60:f0:16:6e:b6:eb:84:8c:
                    ad:3c:f8:1e:3c:a6:f4:86:d2:da:46:47:82:a5:42:
                    7c:aa:41:69:cb:37:fe:63:3f:11:7e:47:68:ab:25:
                    ea:d3:d8:15:d5:e9:a1:b1:1e:d1:68:bf:d8:78:49:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:19:DA:7E:E9:5F:0A:01:B2:42:B2:90:2A:4B:A0:A6:DB:32:A8
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:2f:78:9c:85:cf:b4:2e:2e:d6:ec:9d:ad:f3:74:b8:e0:
         d2:e6:90:70:d1:41:8d:4f:1e:86:ef:23:32:65:e0:35:89:04:
         42:c6:6a:7e:cf:a0:e0:55:81:5a:70:f8:da:75:89:2c:57:37:
         e4:6f:42:ca:59:40:5a:5e:c6:7c:ae:ed:14:7e:86:be:c4:9c:
         2a:7d:68:db:21:c6:b5:c0:80:63:34:b7:d1:22:9b:ce:ca:db:
         09:40:68:6c:fa:88:9b:fa:1e:9f:4d:42:d9:a2:96:38:b5:06:
         ce:99:bd:37:e6:cf:4b:cc:85:70:75:21:ee:e3:12:3d:a1:25:
         63:3b:4a:7d:55:41:89:b9:4a:1f:8c:5f:19:19:ad:e5:e8:d1:
         80:58:c0:36:11:b1:3f:c6:cd:8f:55:21:db:cf:ba:2d:f6:bb:
         f2:5c:f4:a4:e6:24:d4:19:a3:54:4d:85:04:1a:d3:47:4c:22:
         bc:0d:a1:00:95:44:ef:29:83:9a:a2:8f:7c:45:a0:b9:6b:00:
         04:c1:8f:ee:65:9f:8b:09:da:98:41:03:b1:5b:bf:86:2b:75:
         9e:ae:d9:ac:29:38:79:8a:b2:f3:f4:28:9b:a7:9d:01:1a:6b:
         23:59:60:4b:22:43:ef:82:13:37:48:ee:b1:a2:92:e3:da:8b:
         47:3c:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:30 2024 by rpki-client on console-fra.rpki-client.org