Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3135302e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          xW27GJaP+FrF6eyKo6PrvDyJ39rOwgFVJvC3DtulA5I=
Subject key identifier:   9C:C1:C7:07:2C:94:D5:DA:95:3C:03:A7:82:F5:9E:03:3F:62:B1:89
Certificate issuer:       /CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
Certificate serial:       36E3D49D67E99C7D2FF0E56C224444C692369713
Authority key identifier: DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 02 Jul 2024 13:37:14 +0000
ROA not before:           Tue 02 Jul 2024 13:32:14 +0000
ROA not after:            Tue 01 Jul 2025 13:37:14 +0000
asID:                     52861
IP address blocks:        177.93.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e3:d4:9d:67:e9:9c:7d:2f:f0:e5:6c:22:44:44:c6:92:36:97:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA65448BB30C1A04AEA80824691E878B7E06BD76
        Validity
            Not Before: Jul  2 13:32:14 2024 GMT
            Not After : Jul  1 13:37:14 2025 GMT
        Subject: CN=9CC1C7072C94D5DA953C03A782F59E033F62B189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:50:66:f4:48:b8:2f:b6:e3:14:c6:7c:bd:
                    1d:dc:eb:86:73:88:bb:43:68:7f:c3:f9:10:75:89:
                    ef:dd:e3:1a:38:07:a5:95:93:54:e4:1f:9f:e9:51:
                    bd:65:09:b2:9a:b9:1d:fe:06:5e:91:f0:ad:e1:ce:
                    1a:2e:37:29:39:91:30:80:4b:8e:ab:4c:a4:c3:29:
                    83:f3:43:cc:3d:31:71:a9:6e:85:00:3b:85:bf:e4:
                    d6:5c:62:82:e2:2b:70:b7:1a:57:49:41:54:eb:50:
                    26:3d:8f:9c:5a:c4:2b:a8:72:f6:1d:22:9d:10:d8:
                    59:27:22:54:ff:e0:fe:ba:ac:75:2d:22:a7:73:39:
                    6c:c1:1a:f5:08:b3:a0:4f:34:d0:d7:f7:90:25:a7:
                    1f:17:dd:e7:a0:82:05:03:81:ef:c3:e9:07:7a:2f:
                    75:1e:e0:e9:dd:40:26:50:da:f0:33:67:8f:be:83:
                    5c:b4:2e:5c:ef:be:86:0e:48:f3:ba:15:79:23:bc:
                    21:94:73:be:46:e8:4d:10:df:8b:23:74:a2:5c:bd:
                    f0:ed:9d:71:34:90:52:75:b5:aa:41:b7:27:bc:60:
                    a4:e3:13:49:8c:e1:d9:f6:8a:11:9e:a2:7c:e1:51:
                    49:9f:a8:83:b9:6e:1a:51:54:04:a0:83:00:df:3d:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:C7:07:2C:94:D5:DA:95:3C:03:A7:82:F5:9E:03:3F:62:B1:89
            X509v3 Authority Key Identifier:
                keyid:DA:65:44:8B:B3:0C:1A:04:AE:A8:08:24:69:1E:87:8B:7E:06:BD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/DA65448BB30C1A04AEA80824691E878B7E06BD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA65448BB30C1A04AEA80824691E878B7E06BD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:43:40:b7:46:b3:8d:91:46:87:7b:a5:47:36:c3:dc:d8:
         b0:25:ea:35:a5:ca:9c:c9:f8:e6:25:bd:d6:90:ba:7e:18:31:
         d3:a7:61:71:10:4a:9f:6b:70:2e:4f:ea:65:e2:ca:ca:c6:af:
         b5:65:26:91:72:a1:f3:b9:e0:8a:5e:43:4b:ed:f0:4d:75:e4:
         ab:4a:6f:03:c8:db:a9:2b:fe:e3:66:f4:cc:fe:a2:50:82:57:
         09:93:d4:ff:89:02:12:ba:e2:8b:98:5d:b4:b6:3e:6d:a4:a2:
         5c:3d:9c:1c:31:94:83:8a:d2:0c:2d:d5:4d:6d:ad:d5:07:76:
         fe:e8:e5:65:9d:a5:49:2d:84:26:a8:6a:38:e3:99:41:41:35:
         b9:6b:3d:75:8b:cf:74:bd:d6:6c:19:df:45:b5:56:12:da:5b:
         9d:de:5a:af:1a:a6:4d:5c:21:ed:54:d3:ef:6d:cd:a8:27:0c:
         fd:77:c1:73:a3:fe:93:e0:86:10:bd:5b:ad:82:4c:07:d4:7d:
         30:ef:5b:fb:80:b0:0a:01:af:8c:eb:39:d7:86:0d:c9:cc:0a:
         10:b4:9c:da:6b:71:17:82:00:d4:55:42:3b:31:2d:4a:bf:9b:
         7a:2f:cc:ae:23:0a:0c:a7:dd:f6:62:2b:d3:12:e0:24:87:a9:
         85:9c:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org