Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          pfdDtwqo50ARzT2EKAw1m/IH1ooFDaFdhtQ41uRJb48=
Subject key identifier:   D6:BA:29:76:42:30:B1:FB:F2:34:02:59:05:A6:4D:50:71:FF:FC:4D
Certificate issuer:       /CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
Certificate serial:       2FEBE8728E0824C1FD83F6FF1F946788835B9FDB
Authority key identifier: DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 02 Jul 2024 13:37:15 +0000
ROA not before:           Tue 02 Jul 2024 13:32:15 +0000
ROA not after:            Tue 01 Jul 2025 13:37:15 +0000
asID:                     52861
IP address blocks:        177.93.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:e8:72:8e:08:24:c1:fd:83:f6:ff:1f:94:67:88:83:5b:9f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
        Validity
            Not Before: Jul  2 13:32:15 2024 GMT
            Not After : Jul  1 13:37:15 2025 GMT
        Subject: CN=D6BA29764230B1FBF234025905A64D5071FFFC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:74:16:c2:04:4f:b4:09:b1:ac:5f:e8:5f:
                    42:7c:bd:83:e6:c7:f7:ea:df:b5:e3:23:7c:92:29:
                    7b:6b:3a:97:3b:a0:78:14:22:53:1a:f3:67:3b:7b:
                    fc:3c:6a:87:ac:f2:ed:bd:28:59:9d:ee:f2:1f:e7:
                    e0:df:f0:89:35:07:c6:a9:12:72:e8:d9:8e:b7:fa:
                    db:46:29:b6:8b:7a:75:31:8d:5d:a6:71:29:25:84:
                    5a:33:ac:7d:07:5b:f7:6a:f6:4e:65:16:5d:a7:61:
                    7d:c7:7e:78:a1:53:8f:28:21:0a:5b:90:ea:6b:33:
                    42:f3:e1:9f:cd:18:64:6c:fa:c7:88:56:db:ea:e6:
                    21:6c:2d:81:a9:98:1c:bb:a2:7e:78:18:60:fe:34:
                    e1:a8:11:00:b1:08:66:76:1a:c8:56:66:34:2a:c2:
                    7c:5b:7a:1b:0a:99:a5:00:69:7f:0d:40:6b:19:68:
                    27:13:a2:1e:ff:09:ce:68:5c:d3:3c:04:38:af:36:
                    50:1b:19:71:2a:cb:13:39:cd:3f:ee:b4:56:a3:f5:
                    6e:28:3c:c3:cf:30:8d:ef:42:2d:e6:47:d7:ff:ed:
                    be:57:25:4a:6b:89:0c:63:8a:2f:e9:c2:94:49:d5:
                    77:e2:be:90:3f:08:92:00:6b:c0:43:1d:45:88:00:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:29:76:42:30:B1:FB:F2:34:02:59:05:A6:4D:50:71:FF:FC:4D
            X509v3 Authority Key Identifier:
                keyid:DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:86:23:16:63:fa:e7:a0:0a:1c:d9:95:6e:15:1f:db:c3:0d:
         86:18:83:fc:b3:2c:da:19:cc:b5:dd:d8:67:ac:0f:85:23:65:
         36:73:b7:19:cc:f4:bc:08:70:78:2a:6c:54:22:f0:bf:1b:30:
         ef:11:ce:bd:c9:19:e8:8e:ef:cd:1f:4d:ff:20:0e:52:44:a8:
         38:23:95:d1:7e:e1:c3:cd:48:fe:61:4d:03:bc:d2:40:89:b4:
         71:54:8b:17:b1:5e:af:49:c5:3c:5a:9d:66:b2:e9:5f:1b:50:
         19:52:03:c7:ee:9a:35:ac:7c:d2:00:99:ab:42:0b:0a:00:f1:
         53:ff:a0:39:9b:21:5e:2e:f4:83:c3:77:a6:cd:32:e2:f7:c7:
         17:de:29:e3:ec:a9:c3:59:7d:97:03:7d:6c:3d:36:61:f8:73:
         3a:82:e3:9d:60:43:6a:d9:6f:d0:33:2d:40:96:47:1b:24:c9:
         9f:76:98:ac:f0:44:ca:19:ce:0e:bb:43:8d:92:f0:1c:71:14:
         f6:4c:06:44:52:11:9b:08:5d:b9:68:42:11:26:06:6d:af:3b:
         2e:95:3e:a2:ca:3c:73:e1:14:b5:75:52:1a:1f:25:24:39:4f:
         2e:ee:5f:85:dc:1f:fc:12:bc:05:b5:b8:15:63:f2:b7:7e:cb:
         f3:86:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:10 2024 by rpki-client on console-fra.rpki-client.org