Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa
File:                     3137372e3133372e34372e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          o7JQn6LYYuH5nmtCLlK+g1+z7E4xiYs+yL3PIWpZ1rQ=
Subject key identifier:   0A:12:69:04:1C:EB:F0:9D:78:6D:EE:5F:58:08:0D:43:89:E5:44:76
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       3B30D493269217E35F8F8946488F571D49668C3C
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:47 +0000
ROA not before:           Thu 04 Apr 2024 04:32:47 +0000
ROA not after:            Thu 03 Apr 2025 04:37:47 +0000
asID:                     28210
IP address blocks:        177.137.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:30:d4:93:26:92:17:e3:5f:8f:89:46:48:8f:57:1d:49:66:8c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:47 2024 GMT
            Not After : Apr  3 04:37:47 2025 GMT
        Subject: CN=0A1269041CEBF09D786DEE5F58080D4389E54476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:a9:e2:eb:a7:88:8d:e4:98:1a:36:52:af:
                    a1:6d:ab:b0:f9:41:f8:15:74:05:15:ac:fe:b3:17:
                    b2:09:ae:3e:6d:f4:77:b3:7e:f8:7a:7b:d5:2b:d8:
                    bf:d0:22:67:99:97:3a:14:5d:11:f5:2a:40:98:71:
                    22:34:ee:be:89:d3:a7:35:3a:43:c2:5b:c7:60:c3:
                    b1:12:cd:02:7b:4b:b9:42:c1:ad:91:ea:90:b8:3e:
                    ea:5e:98:a9:d8:ec:79:55:fc:63:2d:f9:5f:0f:2f:
                    4e:71:cb:51:ce:c8:e4:07:fe:60:fa:eb:b2:e7:00:
                    cf:a4:83:23:33:61:19:3b:a8:73:e1:71:05:a1:7e:
                    c0:53:ea:dd:c4:12:f4:54:c5:50:1a:ee:3b:0e:98:
                    28:10:cc:25:2e:e4:d4:00:dc:80:c9:3f:f8:de:06:
                    50:60:bf:3a:7b:56:13:50:34:9e:34:6a:97:ec:6c:
                    ea:8e:e1:f2:f2:76:9a:28:cc:48:51:ca:b2:e1:83:
                    c4:95:57:62:de:89:8f:33:b7:0f:68:a1:fd:60:68:
                    a7:6d:46:ae:32:81:9a:0b:09:3a:d6:82:3d:58:0d:
                    53:b7:9e:bf:97:61:06:00:ab:10:69:23:6d:fc:33:
                    aa:75:0d:f9:63:b1:e9:ff:28:a1:c5:a6:6d:36:a4:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:69:04:1C:EB:F0:9D:78:6D:EE:5F:58:08:0D:43:89:E5:44:76
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e34372e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:4b:65:23:41:4c:c7:14:72:c1:28:60:a4:1b:49:f1:05:
         d6:f2:87:70:df:cd:6e:20:ef:9c:e8:d7:79:12:f7:e0:2c:2a:
         8b:78:1b:b3:53:92:c2:75:14:da:8b:5b:77:b5:0e:7c:f4:77:
         fb:59:f5:fa:25:8d:47:cc:2c:d0:d9:4f:7a:15:56:b4:78:18:
         ad:33:3c:23:7c:d0:3a:b5:28:c5:fe:44:3a:b2:04:21:f1:09:
         30:ee:55:e4:ea:f9:ef:79:90:dd:a0:c7:59:2a:f2:b4:dc:3c:
         fa:9c:0f:1a:01:9c:a4:e2:87:64:2d:28:61:81:8e:c4:1e:11:
         3d:02:77:33:90:0d:fa:2e:25:45:94:9c:ff:85:26:4e:81:d3:
         75:12:ba:c7:eb:e9:d9:9c:f7:c9:74:ec:3e:9b:6b:52:55:15:
         f0:d1:a2:05:a4:cf:69:af:03:c1:24:11:6d:13:67:33:d8:ff:
         13:e7:24:59:1c:ef:91:73:14:b7:ab:33:fa:89:af:10:7f:de:
         b4:51:56:47:0b:71:8e:c6:c5:b1:c8:66:c8:05:08:de:17:05:
         06:61:36:a0:75:a9:b9:b8:ee:29:04:89:7c:14:2a:3c:0e:a4:
         48:e2:52:c9:2e:53:3b:44:e7:79:b8:c0:9f:52:76:77:95:46:
         a1:64:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org