Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
File:                     3137372e3133372e33362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          yV/62F6OXjHx9nTuQNQ4lFYFHB4OoOlgbihWBRlRod0=
Subject key identifier:   7F:5D:79:02:C7:81:79:75:88:78:48:85:88:00:71:E7:6D:BC:8C:25
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       7E536C870E8BF1F8A7187C9CAA4D44AC7C97856F
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:44 +0000
ROA not before:           Thu 04 Apr 2024 04:32:44 +0000
ROA not after:            Thu 03 Apr 2025 04:37:44 +0000
asID:                     28210
IP address blocks:        177.137.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Jul 2024 11:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:53:6c:87:0e:8b:f1:f8:a7:18:7c:9c:aa:4d:44:ac:7c:97:85:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:44 2024 GMT
            Not After : Apr  3 04:37:44 2025 GMT
        Subject: CN=7F5D7902C781797588784885880071E76DBC8C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:dc:bf:f6:b1:eb:02:2a:b0:51:ca:12:9f:
                    15:00:47:4d:3e:43:b0:56:16:22:31:00:2a:19:1e:
                    0d:d9:93:96:61:4b:1a:a7:69:57:47:9c:19:47:f5:
                    df:d6:9e:98:b3:4c:28:3f:65:e8:34:7b:30:a2:6e:
                    1c:07:49:57:9f:1f:0f:00:d0:78:5f:3c:17:80:cb:
                    02:72:b3:6e:2a:7a:e4:fd:f6:87:2f:41:02:ff:10:
                    2a:5d:89:7d:97:fa:46:b4:1d:ed:00:4d:6f:54:bd:
                    d6:64:13:c0:db:c4:8d:e2:71:75:23:f2:b8:98:d8:
                    16:2c:b5:37:63:ef:65:f2:54:77:cc:f7:32:d6:bc:
                    dd:86:82:cb:2f:0e:4a:00:a0:7b:73:59:ae:4a:d2:
                    47:8f:15:e9:06:da:3a:f4:57:83:2f:d3:2f:4e:26:
                    46:79:3f:ac:86:51:5b:74:03:7a:f2:9b:4b:89:81:
                    b1:a4:77:c5:16:ff:12:9c:46:b8:9c:1f:7f:ed:44:
                    2f:30:b1:83:9f:52:08:10:ff:82:04:45:a0:c2:db:
                    4b:24:5d:96:54:c9:23:d7:63:7b:93:26:c1:1f:34:
                    4d:e3:16:22:f4:1d:6e:b6:40:5e:af:88:be:b2:67:
                    30:42:e2:f8:b2:9d:cc:ac:b1:81:99:87:dc:e6:eb:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:79:02:C7:81:79:75:88:78:48:85:88:00:71:E7:6D:BC:8C:25
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:43:7e:2e:05:32:b4:6a:e9:a7:39:a5:19:99:3a:67:1a:
         ff:a4:b9:43:55:da:55:39:ce:3f:9e:54:c8:12:62:3b:d3:cf:
         60:8d:b7:0f:8c:32:87:a9:c3:5c:83:85:f0:af:91:8b:46:81:
         41:4b:be:2a:0b:7a:78:01:49:08:b0:ba:ee:a8:68:18:fe:7d:
         7a:ad:e1:cb:f1:bf:69:30:b8:33:b9:64:e4:de:19:54:bc:60:
         a4:d5:6c:fa:06:4d:e0:6e:c0:e8:47:07:a2:eb:8d:2d:41:d0:
         05:b8:93:d0:94:7d:05:cf:2c:bf:05:17:ee:78:3d:e4:43:97:
         73:38:74:52:76:1f:d2:d1:46:65:9b:f4:a8:69:4f:25:04:8e:
         d2:9d:23:70:28:13:7e:2b:c7:b9:39:c4:7b:12:33:e8:39:92:
         50:d2:fe:5f:52:b3:ab:cf:03:98:ad:90:f5:5d:d7:81:33:48:
         73:1f:08:ca:2f:c4:42:03:33:02:8c:51:1a:57:0f:7c:8d:6e:
         ac:31:e7:e0:43:46:8d:f1:d3:1e:4a:91:bb:0f:e3:c1:eb:4e:
         68:e9:73:15:7f:bb:42:73:63:a8:10:30:55:b3:ca:9e:56:3a:
         2a:38:12:a1:73:5e:60:93:a6:0b:a6:3d:28:26:fd:0a:3c:b8:
         16:c3:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 10:18:04 2024 by rpki-client on console-fra.rpki-client.org