Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          9kS1Qlpd9A7aYkcpG9doQBd3xTW4eLMK9rFySEedbAM=
Subject key identifier:   C1:42:C3:D7:C1:83:DD:24:91:36:52:D4:1F:7A:A3:45:79:56:5D:E5
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       199648DCD43AF37B7A817A2767C5BBFF6B44CC5E
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     52977
IP address blocks:        177.39.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:96:48:dc:d4:3a:f3:7b:7a:81:7a:27:67:c5:bb:ff:6b:44:cc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject: CN=C142C3D7C183DD24913652D41F7AA34579565DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6b:8c:2c:04:ae:5f:03:e8:85:12:28:ba:b0:
                    e7:86:b3:41:9b:79:e1:a6:72:13:a0:a3:64:56:67:
                    54:92:09:b4:2a:27:ea:5e:d6:46:2d:77:94:bc:29:
                    e8:83:65:0e:8b:71:e7:4b:d6:2d:97:bc:9f:ba:51:
                    ed:59:bb:86:6e:9d:ad:f1:61:50:42:92:60:d0:d2:
                    58:ae:70:1c:a5:08:f7:44:c2:e5:8e:18:be:2e:8b:
                    d1:26:79:c6:75:ca:e4:d2:9a:2f:1e:e4:79:53:74:
                    c3:16:d3:7e:64:e8:39:bb:65:19:b8:83:78:cd:a6:
                    08:ae:3d:c2:5a:0e:fa:cc:be:d9:5b:5b:00:56:ea:
                    f4:12:39:63:a4:70:4e:0e:4a:b2:7c:c8:9a:dc:04:
                    f1:c0:5b:a7:f9:8e:ba:13:31:b0:cc:09:c0:72:e9:
                    8b:64:b3:f3:5c:b9:44:c6:63:90:96:1a:d0:11:11:
                    b4:c5:85:7f:78:a8:dc:73:e9:03:71:af:64:d8:67:
                    c8:4f:75:24:2e:31:62:a1:d2:d0:06:4a:45:5c:b0:
                    8b:1a:11:eb:9c:28:06:fc:9a:1c:18:d1:64:75:6e:
                    86:76:37:28:6f:f5:be:42:4e:f0:1a:a2:57:c4:ef:
                    7d:0c:83:c7:4e:32:1d:62:2c:0a:b7:2b:6d:49:32:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:C3:D7:C1:83:DD:24:91:36:52:D4:1F:7A:A3:45:79:56:5D:E5
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:19:09:cc:b0:72:03:37:00:b3:ed:9b:2e:2c:aa:b4:68:
         e7:05:00:da:c8:58:7f:12:2b:16:46:b3:e5:67:4e:ee:42:ec:
         07:d7:a6:bd:de:a5:8c:df:b7:4e:bb:03:46:cc:25:0d:75:2b:
         5e:de:d4:ca:a3:1e:4d:8a:a6:9a:35:71:9e:e0:9b:1c:41:e3:
         59:a4:34:42:d0:f3:26:c0:27:60:50:2b:e7:55:17:c8:61:08:
         69:80:6b:1e:ad:18:bf:29:8f:31:90:93:41:64:04:9d:c0:df:
         92:6f:d0:3a:e5:c9:29:cd:00:84:f3:2a:04:9c:3f:58:36:84:
         55:bf:ab:02:dd:90:b7:05:7f:e2:20:86:7c:34:4e:21:9d:7a:
         75:46:cb:8b:aa:43:41:da:55:f1:be:52:d7:cc:8a:22:db:02:
         fd:91:99:ca:dd:a9:10:49:63:03:77:e9:b8:10:47:4f:2c:d9:
         89:6e:44:ad:6f:2f:76:72:54:dc:de:a4:b6:99:35:66:1c:ec:
         73:37:51:8b:70:47:c9:93:ae:bf:35:48:37:1c:2b:d3:53:f6:
         e1:03:62:d5:ca:18:64:3b:c9:3d:4b:a5:5a:73:88:9f:05:8a:
         46:7a:00:dd:05:d9:78:4b:e5:0b:92:f4:59:ee:f8:e7:8a:05:
         33:48:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:50 2024 by rpki-client on console-fra.rpki-client.org