Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
File:                     3137372e35352e3132382e302f32302d3332203d3e203533303033.roa (raw, json)
Hash identifier:          9lFQer28PTRpo9F8q1rORmQYOuxLveF02azi6F1batI=
Subject key identifier:   37:6B:7B:E5:F7:8D:4A:36:32:A7:88:0A:69:91:E8:61:14:40:AF:D7
Certificate issuer:       /CN=E483282DA50873B6832166A0D902D6605AA93019
Certificate serial:       2BEB8013ED56092B10CF765C6C90577F92A3A444
Authority key identifier: E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
Signing time:             Wed 02 Oct 2024 19:29:15 +0000
ROA not before:           Wed 02 Oct 2024 19:24:15 +0000
ROA not after:            Wed 01 Oct 2025 19:29:15 +0000
asID:                     53003
IP address blocks:        177.55.128.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl
                          rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:eb:80:13:ed:56:09:2b:10:cf:76:5c:6c:90:57:7f:92:a3:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E483282DA50873B6832166A0D902D6605AA93019
        Validity
            Not Before: Oct  2 19:24:15 2024 GMT
            Not After : Oct  1 19:29:15 2025 GMT
        Subject: CN=376B7BE5F78D4A3632A7880A6991E8611440AFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:e3:a1:ac:c4:c0:b5:63:b4:f9:db:3e:a7:
                    ce:8b:19:cb:e1:ad:89:4c:62:57:73:74:3f:99:c8:
                    39:aa:b7:71:e9:ff:f9:f9:90:b9:cf:35:5a:67:d3:
                    bf:40:8d:3d:3c:60:c8:00:17:fe:03:16:5f:cc:b1:
                    45:e0:b8:f6:7e:47:b7:84:c7:22:17:64:68:36:23:
                    59:2e:bc:2b:a6:b0:d0:8a:c5:b3:27:e7:d2:8a:8e:
                    45:d9:c8:30:29:64:20:07:b2:65:15:d8:cb:81:cc:
                    ef:f0:ba:ae:10:e0:ec:71:bf:8e:38:6a:1c:99:59:
                    c1:dc:74:0c:90:e9:48:80:bf:81:d7:9f:76:b3:7c:
                    af:6d:41:d2:41:81:6d:1a:89:1d:b5:ff:ab:ce:30:
                    2a:5b:75:a2:74:d8:6e:48:86:8d:c4:37:ff:dc:1f:
                    c8:63:00:e7:33:4b:32:9a:bc:77:f1:e1:2e:95:8a:
                    e1:3e:c6:31:df:18:9e:c3:a6:36:6e:f9:fb:4b:ad:
                    9a:a2:76:32:b5:69:ac:72:60:31:5b:32:29:be:97:
                    8b:e8:19:35:c2:f0:e4:cf:b5:7d:8e:1a:92:a9:03:
                    ae:cf:76:c5:d5:3d:a2:f0:51:de:60:6f:d9:41:89:
                    a4:3c:ba:0e:7b:4d:dd:aa:4f:ab:2e:56:21:0c:4d:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:7B:E5:F7:8D:4A:36:32:A7:88:0A:69:91:E8:61:14:40:AF:D7
            X509v3 Authority Key Identifier:
                keyid:E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:09:f3:52:f0:90:0f:1e:f2:e4:7a:0c:57:84:b5:a2:0f:10:
         59:64:0d:55:22:7b:6e:23:3e:bb:ca:8a:a1:27:cb:80:2d:48:
         46:4d:05:fb:6f:9c:3a:dc:68:be:02:f1:b3:17:c1:f1:91:c0:
         d8:1d:af:05:7e:88:a8:dd:cb:9e:ca:92:0a:8b:52:03:a0:9a:
         e9:f5:4c:d7:d1:96:de:db:54:11:9f:fc:62:8e:95:3e:3a:af:
         a3:3e:1d:e9:57:79:47:18:a7:93:0d:44:5a:74:d6:0b:2b:02:
         3a:f9:47:eb:f3:f0:2e:96:09:c8:6f:fd:ab:38:11:f7:c6:82:
         f2:0f:dc:63:73:5a:92:de:32:5b:c6:90:18:3a:86:63:0a:32:
         05:b6:6e:e3:41:c2:01:31:1d:17:76:35:08:9c:e8:60:84:70:
         97:8e:a4:5b:6c:5f:d4:82:91:55:79:ef:58:5f:00:78:f6:6d:
         7a:c7:ba:71:a9:c3:8e:76:1e:18:ca:80:bd:e3:a2:2e:0c:7e:
         9e:91:72:81:62:ba:4e:e7:c9:d2:6f:b9:d9:23:e4:bc:27:2b:
         6c:2b:64:ab:2c:e2:64:d4:5a:a1:75:3a:fb:30:1b:39:42:8b:
         67:18:c4:ea:80:65:ac:81:5c:89:44:8a:12:44:ea:e2:bb:0c:
         d8:67:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org