Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          PZCZyBWYYGTEI9PvjsxjDwf4DXODlQJkzhYVaRWEIK4=
Subject key identifier:   43:3E:53:D7:93:7F:0C:41:97:22:55:DA:0D:0A:6C:2B:CF:DE:CA:84
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       23A3BC8F19EF26B63425C85D7E409693F74A1186
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     52977
IP address blocks:        177.39.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a3:bc:8f:19:ef:26:b6:34:25:c8:5d:7e:40:96:93:f7:4a:11:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=433E53D7937F0C41972255DA0D0A6C2BCFDECA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:0e:13:5c:15:78:0b:9d:50:68:a7:8f:ee:
                    d8:09:07:9d:e2:1b:51:8e:75:1f:39:c6:2c:da:a9:
                    ab:71:a7:97:92:7a:a6:1f:d5:e8:50:64:ad:37:7f:
                    f8:c7:b2:cd:85:14:00:63:04:bc:20:ed:35:53:c4:
                    97:ba:f8:95:87:95:9f:39:10:29:eb:12:a7:fe:34:
                    1b:12:a2:46:47:c1:a5:be:f7:14:24:bd:63:10:1f:
                    25:34:bd:9a:92:44:b3:32:dc:3e:eb:ee:e1:24:76:
                    3f:a9:48:6c:00:ae:eb:fc:5c:dc:7c:79:f9:8a:0f:
                    6d:a3:0a:91:08:33:d7:0a:de:ba:f9:29:45:2c:40:
                    7b:e5:3b:3c:2e:e0:f2:08:f2:66:f3:04:a9:7b:32:
                    2a:ab:b8:b9:51:c3:aa:09:3e:99:d5:7c:5a:df:b0:
                    50:63:d4:ff:9f:7e:ed:c8:a2:02:ad:c1:cd:d5:7f:
                    be:e3:9b:85:3e:60:ee:d4:eb:9c:67:58:e4:55:b0:
                    f7:1c:28:60:00:ea:5f:c9:1f:71:00:12:fe:77:ee:
                    a1:57:15:f8:5d:2a:6f:47:9d:4d:ed:66:2a:66:3e:
                    75:8b:4c:7d:3f:97:08:5d:f1:b2:bd:96:d8:59:c5:
                    4e:b2:60:c4:11:30:1b:0d:23:eb:ae:b3:ba:f9:d0:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:53:D7:93:7F:0C:41:97:22:55:DA:0D:0A:6C:2B:CF:DE:CA:84
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:59:59:39:c0:b7:4d:44:6e:4c:93:54:de:8c:51:77:fd:e0:
         3c:0e:bc:46:64:c0:96:6b:bc:56:c5:b5:e1:3d:ba:6a:2d:74:
         83:0a:e3:54:00:fe:18:d6:a1:be:80:0d:41:07:52:83:9f:9f:
         93:ec:63:a3:a1:66:e5:6d:29:11:f9:cd:e5:8b:7d:61:ad:25:
         69:74:7d:98:27:a7:60:5d:d4:ef:5d:f7:14:32:a5:cc:86:3a:
         73:7e:87:15:d3:71:d9:2c:ed:f2:bd:62:dc:90:bd:c9:a9:1c:
         6d:55:1b:6c:8d:78:2f:24:f5:96:cf:29:3e:91:f2:bf:56:1a:
         aa:f2:df:40:b1:48:d7:fb:f3:7b:35:9c:38:3c:02:1e:d3:8a:
         89:49:a5:50:48:90:31:4c:1e:16:cf:3c:16:e5:30:34:a3:e5:
         19:78:73:ea:2a:f8:1a:6e:7d:b9:56:0f:f1:6a:4b:48:ff:0e:
         19:dc:d0:60:2b:e1:2f:be:91:96:09:5f:e0:9f:cd:c3:98:58:
         e0:b6:a4:5f:8a:1c:4a:61:fb:cc:df:be:25:ae:1c:c8:99:22:
         02:b7:db:07:44:07:85:90:5c:a0:3d:55:a3:ba:0c:8f:a0:9f:
         15:50:aa:62:34:66:e7:c5:2c:c9:b5:f6:41:54:18:ed:03:bf:
         89:d6:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org