Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
File:                     3137372e35352e3139322e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          QdObrOI+A4qylChvuH9NxTq6wK0E9VMjnFXW9xR7mdg=
Subject key identifier:   E0:5A:1A:A8:46:1D:34:CE:35:6E:2C:93:A0:3A:A3:25:BF:48:12:73
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       53E3E0EB885AB2336C95F2E13AF5106C55176B23
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
Signing time:             Thu 27 Jun 2024 20:29:54 +0000
ROA not before:           Thu 27 Jun 2024 20:24:54 +0000
ROA not after:            Thu 26 Jun 2025 20:29:54 +0000
asID:                     28210
IP address blocks:        177.55.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:e0:eb:88:5a:b2:33:6c:95:f2:e1:3a:f5:10:6c:55:17:6b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Jun 27 20:24:54 2024 GMT
            Not After : Jun 26 20:29:54 2025 GMT
        Subject: CN=E05A1AA8461D34CE356E2C93A03AA325BF481273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:65:8a:76:98:84:f2:50:45:65:5b:fd:68:
                    ca:05:7c:8c:4f:5a:d8:23:21:2e:4a:44:ff:96:33:
                    6a:df:eb:f8:f4:99:93:d9:97:0a:5b:79:be:bd:91:
                    9d:50:34:dd:c2:98:3d:a4:37:4d:a5:0f:f2:ce:02:
                    91:58:30:b2:03:71:88:d0:bb:a4:aa:b8:21:b7:d5:
                    14:53:af:86:bf:28:04:e6:35:dd:c8:67:04:4f:ed:
                    f9:40:41:0b:1f:ae:0a:84:9c:6f:e0:e0:60:7b:bc:
                    2a:7d:86:6c:40:5f:96:d3:dd:4f:48:ef:ca:31:02:
                    82:f2:35:20:a0:03:22:56:31:0d:70:4d:da:cc:81:
                    ea:11:d7:3b:48:79:86:b8:58:d0:fd:91:0b:1a:bb:
                    02:f6:9b:4f:04:32:84:2e:67:69:73:5a:91:85:1e:
                    55:7a:6b:a2:f1:e7:f0:64:1e:b5:d6:11:81:f0:03:
                    64:b4:67:e4:67:6a:d8:07:90:bb:84:7d:b5:54:99:
                    cf:f0:38:97:25:33:4c:77:b9:68:d7:e8:07:c3:04:
                    71:77:d8:d9:0f:65:e9:a2:56:d7:ca:14:90:0c:bc:
                    82:c3:26:69:6f:37:5b:c2:b3:2c:c7:96:40:24:c0:
                    69:4a:89:38:e1:a0:83:ae:d9:a7:2c:eb:8e:0d:db:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5A:1A:A8:46:1D:34:CE:35:6E:2C:93:A0:3A:A3:25:BF:48:12:73
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:86:26:f3:93:6b:b3:2a:aa:a4:8c:3d:96:38:e0:3f:4e:f4:
         a4:1c:09:61:76:85:ff:78:af:db:e9:83:45:ab:61:d6:24:47:
         f7:7c:85:69:07:34:de:33:f2:c8:05:f5:37:8b:18:3d:f5:73:
         a1:f5:ba:cd:9a:74:7e:6e:77:46:36:19:55:6a:77:9c:44:3b:
         5c:b6:38:ed:08:62:36:93:67:7d:bb:a9:7a:80:c7:e3:a8:be:
         ed:e3:f5:57:a2:aa:4f:5d:fd:17:12:7f:ee:87:c6:df:ef:ea:
         5d:fc:75:ce:ac:b9:10:b4:a1:8e:2f:27:74:ee:d5:00:4f:85:
         7b:61:1b:f5:a1:ec:8b:6d:14:ec:6b:9a:62:2c:9c:d5:30:f7:
         bb:08:1c:7c:96:1e:23:f2:2e:f5:be:3c:28:36:ed:cd:fb:3c:
         fa:73:8a:b9:35:30:0f:99:04:89:22:46:14:cc:95:7a:49:4b:
         fd:5b:57:b9:77:74:c3:c7:b0:03:d9:b7:e6:20:e0:c8:47:de:
         b2:a4:1f:01:5d:ad:cc:81:b6:a0:8e:27:89:48:9b:08:16:2a:
         44:43:2f:f2:5f:a6:a0:1a:f0:e6:74:01:ba:d7:b6:18:34:a4:
         25:ff:cb:80:8a:8f:77:84:71:96:94:40:f4:fd:e0:81:6a:3e:
         bc:51:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org