Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa
File:                     3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (raw, json)
Hash identifier:          83bVdkGcwD9JnMCwOb1ynsl6A12KofNoUptWS/Trj7s=
Subject key identifier:   FA:22:14:49:93:1D:55:A9:96:BE:A4:2F:8B:4A:93:71:CA:11:12:FE
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       2AEBBE26B14BE5EF68325B642BFF6FCB30414014
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa
Signing time:             Thu 04 Apr 2024 02:47:53 +0000
ROA not before:           Thu 04 Apr 2024 02:42:53 +0000
ROA not after:            Thu 03 Apr 2025 02:47:53 +0000
asID:                     262496
IP address blocks:        177.66.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:be:26:b1:4b:e5:ef:68:32:5b:64:2b:ff:6f:cb:30:41:40:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Apr  4 02:42:53 2024 GMT
            Not After : Apr  3 02:47:53 2025 GMT
        Subject: CN=FA221449931D55A996BEA42F8B4A9371CA1112FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:3f:69:95:ab:64:09:57:ac:ec:7e:e1:89:
                    d5:e6:e4:bd:89:21:45:5e:4b:92:a8:22:bf:6f:35:
                    40:0a:31:1e:9c:92:e9:63:20:3e:f0:92:fe:09:65:
                    b0:f0:a4:2f:27:f2:73:b7:f2:63:67:90:46:e6:b0:
                    01:b0:1d:19:c7:88:07:0c:c1:63:27:d0:40:d1:db:
                    98:2a:5f:51:6b:97:a3:32:30:48:ce:65:a7:8b:d8:
                    60:b4:23:a2:80:2a:aa:6c:6b:b4:2a:d6:f8:91:cf:
                    32:fb:6b:8a:64:0e:50:9f:95:13:fc:07:bd:cd:64:
                    5d:d4:d0:e2:fa:02:7d:74:e0:35:3a:b2:86:73:8a:
                    b2:19:8d:88:8f:a3:e3:13:fa:1a:66:e8:70:25:40:
                    bb:cf:b3:f3:cf:6e:0b:17:a3:c8:08:94:7b:04:15:
                    ed:c4:3e:21:e9:c0:c5:be:06:f2:b3:57:a6:2f:15:
                    6c:bb:14:55:85:6e:39:89:41:c5:22:76:a4:c4:58:
                    76:65:6b:5c:a6:20:c0:af:5f:da:80:d8:d2:14:17:
                    b1:e2:47:91:20:86:54:59:0f:f0:1f:0f:c8:05:f2:
                    e4:62:92:d0:af:36:8f:03:7e:2d:81:1e:c9:45:8f:
                    dc:17:8e:b5:ef:e9:e9:68:49:ce:b5:7e:e1:14:26:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:14:49:93:1D:55:A9:96:BE:A4:2F:8B:4A:93:71:CA:11:12:FE
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:07:0f:6d:4a:3e:8a:78:bd:7c:78:14:50:33:b0:9c:08:d2:
         a0:96:39:67:b1:a8:1a:b2:ed:8d:d2:58:49:79:07:a6:2b:7b:
         24:7d:db:f5:5e:13:85:35:07:ec:0b:d2:ae:5a:10:06:7b:fc:
         85:d6:24:68:b6:56:9f:58:d0:dd:60:fa:26:21:dd:25:d7:fc:
         15:e3:f9:39:53:bd:36:d8:5e:dd:d6:35:04:b8:de:14:54:c2:
         de:8e:27:88:5e:b4:dc:b5:23:5c:4d:23:d8:0a:57:a2:d0:d3:
         20:dc:7a:89:82:44:e4:a9:59:39:99:50:1e:44:8a:b1:f9:d9:
         06:a1:5b:be:83:d8:5c:86:92:8f:f0:5f:51:53:c4:8b:cd:0b:
         93:c4:47:51:c3:30:f4:78:d6:2a:cc:29:72:95:6a:36:e8:2e:
         a0:e1:b2:e4:a9:7e:ab:27:52:55:23:9a:e7:40:72:39:77:a2:
         e4:14:c4:8a:73:6e:78:67:52:32:e8:ba:cf:1a:e3:4d:9c:e1:
         dd:df:9d:55:39:63:4c:52:d3:d1:56:8c:c7:bc:fa:bc:6e:63:
         9a:95:64:40:2f:f7:d3:38:29:12:0c:fb:1b:16:64:d3:ce:6f:
         e5:89:8c:fa:26:49:96:01:62:8d:ac:ae:5f:f7:c5:35:5d:ab:
         6a:d7:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org