Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
File:                     3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa (raw, json)
Hash identifier:          l62KGZd5FHJcfH7fBLYDZ+tET4w/mS8GDiP2HMCmCBw=
Subject key identifier:   6E:BC:26:7F:28:A5:5C:9B:F4:5B:D1:17:A8:EE:02:8E:A6:43:9C:5D
Certificate issuer:       /CN=3544A3DD4CAB11F48428C7B89644B9D5B502409E
Certificate serial:       6855FD04AD81847304EDA076E0F27BACE7770B4C
Authority key identifier: 35:44:A3:DD:4C:AB:11:F4:84:28:C7:B8:96:44:B9:D5:B5:02:40:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3544A3DD4CAB11F48428C7B89644B9D5B502409E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
Signing time:             Wed 03 Apr 2024 22:54:09 +0000
ROA not before:           Wed 03 Apr 2024 22:49:09 +0000
ROA not after:            Wed 02 Apr 2025 22:54:09 +0000
asID:                     262606
IP address blocks:        177.101.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3544A3DD4CAB11F48428C7B89644B9D5B502409E.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3544A3DD4CAB11F48428C7B89644B9D5B502409E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3544A3DD4CAB11F48428C7B89644B9D5B502409E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:55:fd:04:ad:81:84:73:04:ed:a0:76:e0:f2:7b:ac:e7:77:0b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3544A3DD4CAB11F48428C7B89644B9D5B502409E
        Validity
            Not Before: Apr  3 22:49:09 2024 GMT
            Not After : Apr  2 22:54:09 2025 GMT
        Subject: CN=6EBC267F28A55C9BF45BD117A8EE028EA6439C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:99:41:3b:15:29:67:fc:27:0f:77:27:c9:
                    db:11:be:a8:5c:06:a4:99:77:c9:84:f4:88:5a:21:
                    00:2d:0c:e5:a4:66:4d:1e:f1:61:5c:1c:5f:35:20:
                    a1:12:e1:9c:00:da:75:51:36:47:74:0b:16:cb:49:
                    57:64:c8:4a:21:9f:fd:0f:52:34:55:e6:fc:b4:2d:
                    99:7e:e8:34:1d:83:d2:a5:fd:7a:83:70:91:d0:6d:
                    76:c5:24:68:f7:12:29:53:9b:81:74:f5:01:ad:0f:
                    b5:55:23:98:90:c1:a9:bd:41:7b:17:f8:59:3d:3c:
                    ff:65:c2:4b:ee:0c:b9:87:ce:21:9b:31:d7:45:bc:
                    dc:d6:73:62:07:d8:38:4d:fe:4b:6c:2b:c8:9c:61:
                    eb:9d:0d:2d:19:51:e4:48:84:d3:9f:9a:0f:a4:b3:
                    b0:5c:a6:90:d7:9d:ad:a1:fe:2e:9d:f3:3b:06:82:
                    1e:f5:d8:fc:ac:08:41:d4:b4:ae:40:78:43:cc:ad:
                    f5:45:90:45:c0:fb:30:b9:c3:11:90:76:89:47:cc:
                    ff:dc:18:24:b7:61:2b:24:58:75:a9:70:0a:88:0f:
                    5c:70:0b:e8:a1:c7:0d:89:26:2f:5a:74:cf:86:9b:
                    7c:fb:d6:47:76:da:a8:15:94:b7:a3:40:a0:51:f1:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BC:26:7F:28:A5:5C:9B:F4:5B:D1:17:A8:EE:02:8E:A6:43:9C:5D
            X509v3 Authority Key Identifier:
                keyid:35:44:A3:DD:4C:AB:11:F4:84:28:C7:B8:96:44:B9:D5:B5:02:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3544A3DD4CAB11F48428C7B89644B9D5B502409E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3544A3DD4CAB11F48428C7B89644B9D5B502409E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:12:9e:e8:a2:93:09:7d:c1:b1:74:92:25:f6:16:46:a0:42:
         de:52:3e:5e:28:35:cc:0a:5a:4c:6a:c6:84:cf:46:74:93:67:
         8c:c1:1e:d3:4c:5d:6f:00:59:5e:75:2e:18:7b:1d:47:0b:e8:
         3b:25:13:5b:9a:99:e6:5b:6f:3a:2e:58:61:0e:e5:63:5c:43:
         68:d2:d4:b8:9c:4f:00:ef:a4:b4:24:9f:39:eb:90:be:8c:e4:
         b7:6e:df:1c:f8:0f:67:d4:36:9b:78:c4:cc:df:28:91:4b:97:
         92:a9:71:e4:2a:ae:d3:5a:fb:a4:50:80:c5:04:2c:fb:e0:3c:
         3c:4a:df:93:88:d9:a2:2a:78:14:21:2a:59:75:62:c0:71:20:
         32:07:60:09:82:af:f8:4e:98:37:ca:94:91:7d:ec:f3:57:87:
         bd:00:15:db:7b:fe:ea:a7:15:d1:39:63:aa:f4:21:45:71:ce:
         9d:3e:57:4b:94:39:13:1d:99:fe:27:60:5c:be:1e:4a:46:1e:
         0b:29:db:3c:ce:3b:85:5a:4c:80:03:03:e1:bd:60:d1:93:ba:
         e5:83:e3:16:b9:97:69:af:70:43:67:16:72:24:7c:d8:7a:7b:
         26:14:9b:99:d3:6f:4e:2a:70:69:ab:3d:74:f8:47:79:7a:a6:
         e0:54:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:15 2024 by rpki-client on console-ams.rpki-client.org