Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa
File:                     3137372e39332e3133382e302f32332d3234203d3e203238333636.roa (raw, json)
Hash identifier:          I+TlMx9EFDVY3d0080UpZDJxnIMd13WkV4bQY+4rMuA=
Subject key identifier:   89:43:29:8E:99:92:83:3D:52:37:FE:CF:CA:74:75:4F:B1:F7:EA:08
Certificate issuer:       /CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Certificate serial:       7E1BB910476DC21AF145B62A73D374C16B8460DD
Authority key identifier: 10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa
Signing time:             Tue 23 Jul 2024 19:31:52 +0000
ROA not before:           Tue 23 Jul 2024 19:26:52 +0000
ROA not after:            Tue 22 Jul 2025 19:31:52 +0000
asID:                     28366
IP address blocks:        177.93.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1b:b9:10:47:6d:c2:1a:f1:45:b6:2a:73:d3:74:c1:6b:84:60:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
        Validity
            Not Before: Jul 23 19:26:52 2024 GMT
            Not After : Jul 22 19:31:52 2025 GMT
        Subject: CN=8943298E9992833D5237FECFCA74754FB1F7EA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:02:4c:9c:2f:d2:c2:e5:a5:2d:22:70:02:
                    06:07:b2:b5:2a:7d:2b:3e:24:0e:e1:7b:d4:43:8b:
                    f1:70:8f:03:fc:56:c3:1c:ac:38:1a:b4:9c:ed:72:
                    b0:81:ad:66:2d:c8:9f:91:6d:f8:b3:b9:99:42:ce:
                    dc:d5:9b:54:74:8b:36:e4:4d:9d:cf:1f:a5:bb:1b:
                    6f:c4:bb:63:f6:42:84:2a:55:a0:f0:6f:6d:d2:43:
                    f3:8e:99:cc:b6:40:3e:52:1b:3f:37:48:27:0e:26:
                    ba:f1:a9:39:a9:6a:92:b1:3b:bf:ec:9d:5f:4b:7c:
                    ec:c3:d6:ca:3d:61:83:d3:85:ba:c9:e3:fe:8a:aa:
                    96:9f:cf:7c:bf:d0:a4:4e:38:c3:60:37:fd:e8:27:
                    80:c4:f2:f9:b6:f1:5e:ba:05:8d:bf:03:36:b3:84:
                    e0:8b:6c:c0:99:7d:fe:ce:c9:cb:87:4a:8e:2b:cd:
                    f6:33:c3:e3:65:b2:05:85:66:89:6d:c8:fd:3a:4e:
                    d3:f2:b0:d2:e0:ed:29:27:7a:5e:57:47:fa:10:65:
                    16:21:84:33:c8:6a:73:b1:b3:4c:64:84:48:e0:e9:
                    41:e5:6b:06:27:4f:c6:a4:8d:0d:2c:b5:34:8d:75:
                    f2:fc:5c:83:bf:77:a6:46:60:2e:df:18:e4:a7:f9:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:29:8E:99:92:83:3D:52:37:FE:CF:CA:74:75:4F:B1:F7:EA:08
            X509v3 Authority Key Identifier:
                keyid:10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:36:ca:3c:11:91:99:1e:5e:09:ad:37:c6:ed:49:c3:b5:
         63:62:a7:24:81:69:1f:99:c2:b9:d2:60:22:52:9f:ab:d3:34:
         6a:2f:1d:5c:cb:42:6d:51:14:24:73:25:39:2e:91:c4:da:6f:
         1f:28:b8:fb:09:bd:17:7c:e2:88:52:c2:02:73:2d:e0:71:95:
         53:4d:98:e1:44:7d:76:e1:0c:be:80:ae:da:12:f1:27:5e:62:
         a3:ba:98:e7:68:e8:2a:f4:a0:66:6f:79:33:c2:1b:b5:f4:f7:
         f5:3c:3f:ba:39:2d:76:f2:c5:2c:07:49:b4:21:5e:41:c4:65:
         6d:7d:d2:65:13:3b:5b:e5:ba:e8:75:5d:5c:5f:5b:15:80:06:
         44:38:e7:8e:5e:9e:64:b5:b1:6d:bf:11:b6:1e:42:40:6a:37:
         91:59:ac:08:22:86:75:cc:ac:85:b8:8c:2a:73:88:8c:ef:a6:
         6d:f5:35:12:26:8a:c3:d3:3a:85:7a:c3:6f:0f:41:68:80:84:
         0a:e5:2e:1f:19:56:ad:d0:e1:c1:67:66:de:90:7b:e2:ad:43:
         02:c0:7c:39:c8:dd:65:9c:6b:02:c6:80:4e:0c:d2:e2:a5:63:
         c7:5b:ac:b7:1f:eb:fe:a3:81:8a:63:79:84:07:e6:e8:6c:4f:
         60:aa:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:49 2024 by rpki-client on console-ams.rpki-client.org