Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa
File:                     3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa (raw, json)
Hash identifier:          3YY5QwS184Mt0JvNpgexZoZ+6HzTu/0l+qQuReNff6c=
Subject key identifier:   F8:0C:A8:53:F6:22:3E:8F:09:03:E0:45:FE:48:B0:57:09:21:34:64
Certificate issuer:       /CN=59F73133C9108C206FE9409E22591FE97847518A
Certificate serial:       26A1EC231796F16D9501AEE904F284643A233A8D
Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa
Signing time:             Thu 04 Apr 2024 18:36:42 +0000
ROA not before:           Thu 04 Apr 2024 18:31:42 +0000
ROA not after:            Thu 03 Apr 2025 18:36:42 +0000
asID:                     52600
IP address blocks:        177.137.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:ec:23:17:96:f1:6d:95:01:ae:e9:04:f2:84:64:3a:23:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A
        Validity
            Not Before: Apr  4 18:31:42 2024 GMT
            Not After : Apr  3 18:36:42 2025 GMT
        Subject: CN=F80CA853F6223E8F0903E045FE48B05709213464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:08:a4:e6:3c:20:59:b5:09:84:68:a3:aa:
                    05:00:8a:8a:25:90:34:4c:88:b9:e1:64:15:92:32:
                    33:22:38:f5:62:0c:fb:0a:c4:f8:6b:b2:79:83:de:
                    d9:a4:d5:ae:74:d8:c5:2d:78:4d:bc:8d:9c:8d:8b:
                    a6:6d:83:6f:ce:3a:83:7f:70:1c:7b:53:e3:38:70:
                    41:91:e1:49:c2:ac:c1:52:b2:cd:16:63:7e:7e:5c:
                    69:d5:73:98:92:d0:25:af:c7:f9:60:76:c5:99:29:
                    be:e2:eb:5f:3b:30:b9:cb:61:34:3d:ea:72:c9:91:
                    73:82:66:c7:18:17:34:73:74:93:b0:19:3a:a6:fc:
                    55:e0:87:3b:0c:2a:24:d4:83:ba:86:44:9a:0e:92:
                    69:09:66:3f:f8:1e:98:7a:74:54:de:32:0a:f2:14:
                    75:fe:cf:28:48:a8:11:90:35:34:bb:9c:82:6b:fa:
                    5b:3a:a4:ef:ce:54:70:ef:db:f2:8a:8b:b8:4f:b3:
                    4f:8b:1e:e2:11:2c:57:de:b8:5a:06:34:e6:a7:d1:
                    0d:c3:63:82:a5:a7:9e:1e:ed:4f:c1:8f:78:1d:12:
                    5d:9e:92:a0:8b:af:06:ef:b1:30:46:5a:be:10:f7:
                    9d:3a:06:85:c0:08:9d:f2:85:15:ab:b7:92:c7:72:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:A8:53:F6:22:3E:8F:09:03:E0:45:FE:48:B0:57:09:21:34:64
            X509v3 Authority Key Identifier:
                keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:cf:46:83:a0:c5:a2:2d:1f:08:10:a5:7c:0e:c3:a4:e6:
         ca:40:4c:f2:12:90:19:7d:14:1f:18:f7:c7:6e:04:2f:0b:1f:
         86:56:be:f3:88:32:bd:be:d3:ea:b0:cf:ad:83:35:d9:78:52:
         e6:eb:34:4e:a8:fe:29:b7:7d:4e:72:1e:78:da:6a:09:5c:85:
         2b:76:cf:a5:01:ee:41:98:19:14:be:bf:36:92:10:a8:9b:c8:
         47:39:79:1f:b0:82:3a:47:df:59:64:f4:42:d1:33:79:02:1a:
         2b:f5:44:d7:4a:e8:84:35:b5:32:f2:36:1f:e8:c8:76:77:ab:
         6c:3f:07:64:75:02:7e:39:d6:23:28:f2:32:64:e6:3a:96:d6:
         48:13:1d:43:e6:41:69:dc:dd:31:73:2a:53:a2:f4:73:3b:ac:
         a7:57:53:34:d0:8c:83:fe:c2:31:e8:e9:d6:53:1c:d2:81:c9:
         dd:81:94:55:10:c8:2a:b5:67:7c:e3:6f:07:83:0d:ca:cd:06:
         fe:25:a4:d0:ee:70:6c:01:d3:4f:3b:57:5a:77:98:e5:7b:05:
         80:61:ff:b6:96:4a:71:58:6a:09:9a:69:67:dd:43:4c:bb:b8:
         cc:bd:65:d7:a4:4a:bd:13:fe:f7:af:e8:b9:8a:af:2a:4c:48:
         a6:eb:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org