Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33382e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          16KeKiGMsg74Cqm9/UcwMqcq/NTnTgnCPCTAmWOGm3w=
Subject key identifier:   EF:56:6B:FE:E7:EA:82:B1:51:3D:ED:8E:BB:63:3D:9D:66:D3:BC:CE
Certificate issuer:       /CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
Certificate serial:       3445B0D97E6767F324E4C19ECAD1F946773326FE
Authority key identifier: DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 02 Jul 2024 13:37:15 +0000
ROA not before:           Tue 02 Jul 2024 13:32:15 +0000
ROA not after:            Tue 01 Jul 2025 13:37:15 +0000
asID:                     52861
IP address blocks:        177.124.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:45:b0:d9:7e:67:67:f3:24:e4:c1:9e:ca:d1:f9:46:77:33:26:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
        Validity
            Not Before: Jul  2 13:32:15 2024 GMT
            Not After : Jul  1 13:37:15 2025 GMT
        Subject: CN=EF566BFEE7EA82B1513DED8EBB633D9D66D3BCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:67:aa:0c:95:69:88:b8:94:bd:a5:ce:0a:
                    8b:04:88:a7:97:83:d0:38:dc:d2:83:ac:b4:06:de:
                    40:3f:09:9a:d7:73:97:f3:d7:d7:a4:72:39:1e:d8:
                    36:da:54:de:29:69:18:d7:93:7c:c1:ca:cb:e0:6f:
                    50:4e:3b:bd:5d:26:8b:4a:1e:f4:50:7b:b9:d3:31:
                    75:57:63:24:76:79:72:70:c3:ec:d7:e9:61:6d:c7:
                    52:45:0a:86:39:0f:6c:b1:94:a4:9c:a3:39:9f:af:
                    46:e3:99:e4:84:2c:ab:8c:f0:42:c8:5d:0d:ea:d5:
                    99:dc:5b:13:66:ad:cb:44:b3:32:8a:4a:bc:e2:60:
                    76:d9:5d:ec:26:5d:e5:c5:32:34:af:f5:c1:c1:76:
                    55:61:b5:42:d7:3e:71:fb:9d:18:9e:9d:c4:7e:10:
                    c6:82:0b:de:ef:e1:1e:8e:87:aa:60:a9:a6:00:29:
                    a3:7a:e6:3b:24:df:79:b5:43:fa:d4:88:56:c8:01:
                    28:fc:3c:50:ab:b2:da:51:8d:f6:f9:65:33:a9:f4:
                    a1:f4:62:91:b2:6e:37:de:4c:29:37:b5:55:f4:d7:
                    c0:b0:bd:fb:9a:40:56:33:0f:53:f8:9a:53:a5:e9:
                    47:d7:17:7c:f1:fb:36:9b:de:d8:94:42:eb:d9:b7:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:6B:FE:E7:EA:82:B1:51:3D:ED:8E:BB:63:3D:9D:66:D3:BC:CE
            X509v3 Authority Key Identifier:
                keyid:DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:ed:bf:5e:05:8e:e7:18:b6:3e:86:7f:7f:70:ff:b8:94:
         76:b5:57:a3:8e:64:5f:49:72:38:66:92:f7:ce:f9:e2:e3:f9:
         3f:a9:4d:4c:76:03:ea:3c:d9:af:90:85:2f:e7:3c:bc:36:45:
         fd:5e:f6:5e:56:ff:19:52:2d:62:e6:d5:dd:7b:84:aa:4f:e5:
         ba:99:4e:2a:c5:d8:98:08:d3:5a:ee:f8:76:69:7c:19:90:f0:
         87:5d:ea:79:ce:d8:b3:45:65:07:f9:e6:fa:17:b6:43:9c:d2:
         13:9e:32:69:e4:50:8c:86:5e:1f:96:1a:97:df:72:e8:1a:06:
         23:46:b6:d1:d8:ea:9f:af:ea:dd:af:a3:7a:86:9c:e6:a1:15:
         05:81:bf:ce:ce:27:bc:1e:97:d7:64:4b:eb:53:c9:19:de:76:
         ed:1e:72:e8:07:c5:86:3b:57:26:7e:a7:de:d7:31:c6:25:a9:
         45:46:b5:5f:8e:1d:02:99:1b:78:65:75:e7:4e:ed:dd:73:58:
         1b:46:63:4a:1e:6c:3f:e3:fb:be:55:75:b5:cd:a9:5b:ae:9f:
         1a:2f:e2:68:6a:5b:a3:1f:fc:42:b3:39:81:5e:92:cd:5a:37:
         76:dd:08:1e:7a:0f:85:c0:51:25:bf:e6:7b:29:58:92:e6:9a:
         00:a5:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org