Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e37342e3138342e302f32312d3332203d3e203532373833.roa
File:                     3137372e37342e3138342e302f32312d3332203d3e203532373833.roa (raw, json)
Hash identifier:          7ZXfXg9BEzpilkUN4bswO04wMmcrWqagFVYcPkJnUHk=
Subject key identifier:   3F:14:9C:CF:5A:96:06:ED:90:97:B0:D5:AF:B6:91:A9:1C:E6:66:9B
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       37248D8A4F6D2E18D75D09102D154656A67534A4
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e37342e3138342e302f32312d3332203d3e203532373833.roa
Signing time:             Thu 04 Apr 2024 22:41:16 +0000
ROA not before:           Thu 04 Apr 2024 22:36:16 +0000
ROA not after:            Thu 03 Apr 2025 22:41:16 +0000
asID:                     52783
IP address blocks:        177.74.184.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:24:8d:8a:4f:6d:2e:18:d7:5d:09:10:2d:15:46:56:a6:75:34:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  4 22:36:16 2024 GMT
            Not After : Apr  3 22:41:16 2025 GMT
        Subject: CN=3F149CCF5A9606ED9097B0D5AFB691A91CE6669B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:28:1b:c2:29:7b:ed:b4:f3:d3:35:36:be:
                    a9:7a:0e:ce:ff:98:53:88:0b:e6:ee:ca:4e:81:23:
                    46:fb:20:8d:3a:89:40:ba:4c:e6:2f:a2:96:66:08:
                    f4:98:f4:54:c4:04:57:88:6c:56:59:59:62:ad:50:
                    ce:63:66:ca:29:5b:bc:a1:aa:f6:ad:8d:d3:b6:b6:
                    79:04:10:36:8d:f5:81:b9:ad:91:9e:bf:92:7d:4c:
                    69:8b:cf:91:a5:e7:81:42:bd:c7:a6:51:d3:59:35:
                    e7:7c:e1:55:73:27:53:1a:55:80:5e:16:7d:95:4a:
                    f9:ed:b7:d4:fc:b1:67:db:d9:5c:fa:8f:fe:8b:c7:
                    58:79:73:f0:1f:59:1c:d0:02:60:ae:8a:4e:bc:b9:
                    a1:b6:11:18:0a:76:90:83:fd:e3:d5:5c:58:3f:26:
                    da:95:11:8f:66:09:ff:46:dc:08:19:e8:e1:6c:b1:
                    f9:5d:65:26:d8:fd:b3:d0:90:5f:c9:e0:4d:9f:f0:
                    ab:b0:ed:40:69:4e:50:55:3b:fa:35:9a:6c:d0:22:
                    43:8f:32:bf:6f:69:df:c9:1c:98:1f:56:bb:aa:81:
                    48:08:63:72:92:44:3c:c5:02:4a:aa:f2:9e:97:d6:
                    47:f8:03:22:64:67:c3:98:84:00:df:28:a3:be:12:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:9C:CF:5A:96:06:ED:90:97:B0:D5:AF:B6:91:A9:1C:E6:66:9B
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e37342e3138342e302f32312d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:23:ca:29:15:f3:1f:b9:9d:d3:99:88:d4:fd:86:6c:7e:
         a0:b6:69:57:46:f0:73:58:d4:9d:66:86:cd:ce:56:dc:03:02:
         ad:01:85:29:43:63:3c:52:b5:c8:c1:a0:67:59:0f:55:c7:f8:
         e8:46:e9:70:60:b6:3c:8a:88:27:56:53:5a:5e:46:62:2d:17:
         69:5b:7c:53:5d:75:e7:df:e4:7f:c6:2c:ca:6a:df:a7:ef:ba:
         11:e8:3c:16:0f:10:cf:bf:2a:50:98:13:be:af:d4:24:f4:6e:
         83:48:ac:32:42:da:c5:a7:46:4c:b3:2e:e8:71:e6:fe:a8:8c:
         45:07:20:c2:d4:4c:9f:76:7c:6c:5b:d7:a9:35:4d:6e:0c:f8:
         bf:db:f9:9a:26:45:97:eb:61:2d:ce:27:96:47:d5:d3:38:0d:
         01:4c:71:a1:46:91:1a:3b:01:89:02:ad:e6:e8:cc:b0:3c:00:
         a8:90:55:80:de:45:60:99:52:59:32:83:0a:52:18:7d:1e:48:
         25:27:c3:b9:94:25:61:cc:28:f2:96:38:fa:57:19:34:64:6b:
         98:71:de:72:60:f2:1a:db:4c:72:fa:fa:59:0d:10:d0:b9:ae:
         87:a4:42:fe:87:56:39:59:8d:5d:e9:da:dc:1b:71:71:7c:9c:
         2b:28:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org