Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa
File:                     3137372e33362e32352e302f32342d3234203d3e20323731303532.roa (raw, json)
Hash identifier:          T+Z9STYlpD75GMEVCG6EWr8bUnsRKtXkeKF0c8eUqdY=
Subject key identifier:   50:46:00:C5:F6:26:02:C2:BF:96:5E:52:50:F9:2D:B5:37:4A:90:D8
Certificate issuer:       /CN=066DBB582BB21BC0F1C511FEEA1ECC231456F390
Certificate serial:       5CAFE1B2725C310C5E38ACA4EDBE5F1CAD14831B
Authority key identifier: 06:6D:BB:58:2B:B2:1B:C0:F1:C5:11:FE:EA:1E:CC:23:14:56:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa
Signing time:             Mon 04 Nov 2024 22:50:39 +0000
ROA not before:           Mon 04 Nov 2024 22:45:39 +0000
ROA not after:            Mon 03 Nov 2025 22:50:39 +0000
asID:                     271052
IP address blocks:        177.36.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.crl
                          rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:af:e1:b2:72:5c:31:0c:5e:38:ac:a4:ed:be:5f:1c:ad:14:83:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066DBB582BB21BC0F1C511FEEA1ECC231456F390
        Validity
            Not Before: Nov  4 22:45:39 2024 GMT
            Not After : Nov  3 22:50:39 2025 GMT
        Subject: CN=504600C5F62602C2BF965E5250F92DB5374A90D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:a9:08:d0:b9:e4:ca:bb:b0:44:cc:0b:a4:
                    6e:c6:ee:e8:39:3c:b8:63:2b:fd:d1:b9:43:1b:94:
                    41:20:f9:55:1f:1d:65:f8:4c:6d:8e:22:02:d9:22:
                    e1:fb:09:c3:6b:7d:e8:e7:63:bf:98:80:73:b5:87:
                    ef:8b:18:1a:9d:be:3b:b1:59:80:1d:df:0f:e3:43:
                    31:27:40:58:7b:40:64:08:70:11:bc:66:0a:9d:b5:
                    d8:bc:12:16:21:36:8b:39:5c:6c:e3:36:2c:19:ad:
                    7f:58:08:94:95:c7:57:08:3a:8d:6f:3f:47:51:b1:
                    85:94:80:24:3b:5d:3d:f2:07:d4:36:19:b8:e1:0a:
                    f2:5a:54:2a:da:cc:f9:89:63:ac:28:5c:77:aa:b2:
                    4c:06:92:5c:35:3b:77:f6:f5:bb:15:78:42:41:7a:
                    c1:a0:8d:d4:dc:55:ec:a8:8f:4e:27:72:93:48:68:
                    21:ef:92:d5:3e:1b:37:24:a0:3c:9c:50:dd:f6:a1:
                    cf:a6:73:af:eb:e9:78:94:20:9e:2e:41:1e:d2:b0:
                    54:0f:1a:47:6e:04:97:d9:62:d8:ae:43:25:64:be:
                    f4:e9:3b:45:fc:9d:90:14:60:34:3f:15:2e:2d:af:
                    c7:be:f6:b1:f9:0a:43:1b:ae:d5:54:b8:3c:03:6f:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:00:C5:F6:26:02:C2:BF:96:5E:52:50:F9:2D:B5:37:4A:90:D8
            X509v3 Authority Key Identifier:
                keyid:06:6D:BB:58:2B:B2:1B:C0:F1:C5:11:FE:EA:1E:CC:23:14:56:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:62:78:73:2e:cd:f1:89:4a:3c:8d:41:10:22:27:58:a8:
         7d:75:d5:6e:9d:c5:af:e5:5d:ef:cc:95:01:26:86:75:e1:ed:
         c6:90:21:d8:51:3d:a6:a5:2a:fa:c9:92:54:8d:6e:cc:15:83:
         31:0d:13:f6:45:9e:9d:fb:09:2f:df:53:0b:91:b5:50:52:0b:
         9c:9a:15:41:61:e9:43:77:ed:09:6c:cb:a6:f1:bd:c6:e8:55:
         c4:79:62:a8:0f:5c:df:34:15:ed:b6:6b:9c:e4:54:7c:9b:fc:
         da:72:46:9f:70:a2:31:56:0e:53:0a:94:d2:ac:42:d5:9e:c0:
         25:c5:cf:73:1c:7a:8b:9a:af:4d:47:5c:28:15:6b:16:c6:ee:
         09:31:9b:26:7e:d9:20:d6:ff:4d:be:36:9b:2e:85:48:b6:a6:
         bc:79:e6:45:5e:22:dd:5b:be:88:29:9d:5c:63:1a:9e:e4:49:
         90:89:c1:ba:fc:09:ec:20:01:1a:ba:b6:fb:3b:0e:0e:4b:6b:
         f5:03:d4:ea:48:1a:f1:5c:5a:55:32:57:8b:ba:19:6f:1e:a5:
         3a:fa:7c:42:da:a7:ce:70:cc:93:7b:13:32:3e:9e:db:30:f6:
         62:9a:d1:ea:9a:6a:26:ec:d4:b1:e1:91:fa:59:84:bd:af:65:
         c6:97:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:07 2024 by rpki-client on console-ams.rpki-client.org