Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3137372e35332e36382e302f32322d3234203d3e20323633393138.roa
File:                     3137372e35332e36382e302f32322d3234203d3e20323633393138.roa (raw, json)
Hash identifier:          4hUsFhNeaFVZUGVmtMr1E4PUqq2FLYG/98RlYvGjwSY=
Subject key identifier:   27:38:FA:40:1A:F0:5C:97:7D:91:C9:EC:68:8B:F0:A8:51:57:D7:C2
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       6D5427EFD5FC14B932D4EB3FF86CFE979135D9E7
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3137372e35332e36382e302f32322d3234203d3e20323633393138.roa
Signing time:             Fri 19 Apr 2024 04:46:48 +0000
ROA not before:           Fri 19 Apr 2024 04:41:48 +0000
ROA not after:            Fri 18 Apr 2025 04:46:48 +0000
asID:                     263918
IP address blocks:        177.53.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:27:ef:d5:fc:14:b9:32:d4:eb:3f:f8:6c:fe:97:91:35:d9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Apr 19 04:41:48 2024 GMT
            Not After : Apr 18 04:46:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:ea:98:4f:fb:56:ac:a7:21:7f:74:ec:28:
                    72:10:f8:52:8a:e8:e5:97:31:b1:f3:ed:33:ef:b6:
                    70:ec:d9:56:eb:fb:72:67:33:25:b0:ff:74:21:77:
                    c7:08:41:c2:6e:33:29:a4:2a:5e:62:27:64:0f:2c:
                    12:8a:e7:51:13:e8:78:e4:ae:0a:b6:8f:fb:a5:58:
                    56:92:7d:7b:47:f4:51:11:cf:f7:a0:7f:78:c4:2d:
                    3d:38:16:ca:45:6d:1a:51:55:a7:37:60:8c:3c:08:
                    2d:36:ab:db:da:d4:43:a4:05:d3:42:3b:99:97:f8:
                    54:34:21:14:74:96:6e:17:8c:08:48:a0:76:62:87:
                    5e:0d:df:5d:c2:2a:f2:64:ee:9f:f2:d6:3f:f6:70:
                    f8:56:69:6b:4c:aa:0f:b9:1f:17:0d:88:88:8f:30:
                    23:1b:50:29:5c:b8:77:59:55:98:a8:23:e9:6b:b1:
                    56:d6:9a:82:f3:dc:10:6f:f5:49:e3:ef:04:3d:2b:
                    1a:d9:0b:f3:57:9b:bf:66:b5:0e:be:1e:59:3b:11:
                    c1:da:db:41:bb:b7:ca:57:71:ba:a7:34:57:1f:83:
                    0e:2d:f1:f4:02:4f:ba:a2:17:3e:8f:9b:36:4f:9d:
                    1e:e0:0b:2c:21:2d:62:3b:ca:4d:72:4b:4b:5a:ab:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:38:FA:40:1A:F0:5C:97:7D:91:C9:EC:68:8B:F0:A8:51:57:D7:C2
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3137372e35332e36382e302f32322d3234203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:01:d7:cb:ec:f4:3e:ca:46:b4:b0:a1:21:5d:19:8d:ae:99:
         e4:7d:25:69:54:cb:1f:d8:e1:5c:3e:a5:73:cf:96:ed:c5:d8:
         63:b5:96:86:b5:75:95:38:df:d0:f1:48:0d:4d:c9:d6:d1:a4:
         bf:b2:f3:a4:60:26:15:16:f9:e4:be:20:f7:05:a8:3a:b0:2b:
         aa:2f:47:45:12:bc:78:f7:9d:d2:48:78:c2:49:fd:0f:21:41:
         0b:66:76:7d:fa:28:43:88:f1:d0:ee:44:5e:78:d3:3d:6c:9a:
         ce:06:25:05:b8:f6:ad:49:4a:bb:db:63:02:d8:da:0c:1c:e1:
         03:5c:7c:76:07:b3:f0:f0:c1:49:d5:5f:6c:e7:71:a8:c7:a1:
         7b:a2:d0:8d:3c:00:71:98:80:f5:b1:9a:22:3f:a3:8a:eb:1c:
         1e:c3:a6:4b:6f:70:d3:aa:10:81:44:2c:14:5c:54:34:d8:b9:
         b0:bc:72:bc:57:c9:d1:e2:4e:3e:49:b4:6b:fe:dd:b2:3c:4d:
         b9:1a:84:a6:a5:df:5c:ef:83:6d:ab:7f:64:d5:f6:92:b5:e2:
         a7:a4:62:fc:1b:74:a6:40:16:85:2c:46:57:6f:c0:53:03:a0:
         d9:68:7e:72:3e:d1:cd:87:af:07:47:7b:40:d8:6b:2c:5b:ad:
         ee:bc:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org