Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          4B9baWc2MUdEEfz7ZCz3Vi+BqujKYV8KGcxiK5I20xs=
Subject key identifier:   F0:DC:C0:98:BF:27:0E:A4:1E:BC:79:DA:B9:C9:78:28:40:4C:CF:C8
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       3C18B02366B223304FAD007AEE39381C90CDB4E1
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     52977
IP address blocks:        177.39.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:b0:23:66:b2:23:30:4f:ad:00:7a:ee:39:38:1c:90:cd:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=F0DCC098BF270EA41EBC79DAB9C97828404CCFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:63:ff:a7:fd:0d:8e:ed:d7:be:44:0e:9b:
                    07:0b:1c:10:9a:80:98:13:5c:b5:88:1d:58:29:c8:
                    48:52:57:94:50:57:9d:12:9c:de:e6:91:27:f0:07:
                    45:3a:da:ad:04:2b:e5:b7:f7:0b:a8:2f:12:55:a5:
                    13:1f:fc:a9:a9:b8:1d:51:0a:47:7a:39:58:63:d9:
                    b3:4d:c6:08:b2:69:cb:e0:76:43:25:38:36:54:ad:
                    e6:7f:2e:f0:25:94:ac:9d:d5:11:ee:8e:4e:2b:ed:
                    3a:74:ec:ca:8c:ca:25:43:5f:9f:5a:9f:e4:c4:08:
                    55:15:37:aa:3e:11:37:52:6e:0d:69:1a:19:43:14:
                    65:2a:7b:50:43:f3:7c:ea:e3:23:55:00:cf:02:61:
                    73:6f:d5:23:f6:1d:ee:b9:a0:4a:07:10:a2:c4:cc:
                    45:76:f6:e0:48:45:18:25:53:2a:18:30:ad:38:20:
                    57:3e:63:73:8f:6a:f1:13:97:83:1a:cd:8a:cf:52:
                    59:0f:8e:3d:84:1d:f4:43:56:f8:d4:0c:b7:53:79:
                    61:8a:94:2b:84:49:1f:ba:9c:9d:b6:0c:9c:97:37:
                    9b:f3:af:a5:93:fd:ad:a9:ce:af:f9:d5:30:e3:20:
                    63:e0:33:eb:6d:7c:92:76:b2:b5:50:b5:ed:1e:1d:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:C0:98:BF:27:0E:A4:1E:BC:79:DA:B9:C9:78:28:40:4C:CF:C8
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:85:d5:e8:f0:d4:ba:c7:8e:35:dc:f7:9e:bd:65:89:ab:
         e6:a0:df:63:aa:8d:41:59:ba:b1:4d:9a:bb:83:90:a9:1e:2d:
         b1:5a:b2:ad:a6:99:0d:a3:bc:fd:f7:ef:fc:60:a6:9c:e7:60:
         92:8c:86:6b:45:43:47:aa:39:e4:15:30:d2:a3:2d:d9:1c:03:
         5e:c1:b1:aa:63:7b:3a:03:08:f2:e2:d2:cf:33:57:3a:03:68:
         c1:4f:ae:5e:f3:35:1e:f3:a5:04:37:83:f0:bc:39:4d:62:84:
         ae:71:05:37:79:34:cc:0f:02:5d:fd:d6:69:c1:b3:17:44:2c:
         76:ae:64:c8:d4:35:e7:1d:f0:10:6e:7c:be:c2:a5:db:c2:d6:
         2d:c1:c1:9e:e5:c4:15:09:17:55:42:09:d6:8a:ca:fb:13:53:
         21:86:0e:34:e5:b3:4e:32:c1:25:88:93:c2:1e:13:4b:e7:d4:
         f0:7d:3e:21:2a:18:11:c7:29:dd:8b:a9:2f:95:40:3b:88:aa:
         dd:f5:96:2c:13:a7:da:9d:4a:5e:f2:16:7c:67:ed:87:25:1f:
         32:db:89:e1:a6:0c:40:13:a0:30:cd:bf:40:02:99:31:a6:7d:
         88:58:f8:fb:8b:f5:17:b5:c2:78:43:29:7d:a9:7f:e8:76:1a:
         e2:45:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:50 2024 by rpki-client on console-fra.rpki-client.org