Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (raw, json)
Hash identifier:          JijRPy8SmbfnFZXadwP7en6JPxdoQ821D8R+qekqhwQ=
Subject key identifier:   9E:93:0B:8D:9D:75:97:9B:E8:AE:85:67:46:C5:89:82:DB:24:EB:1E
Certificate issuer:       /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial:       0A16AD466C45597ADFD9F617D1896E31CBFF71A7
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa
Signing time:             Thu 26 Sep 2024 13:47:15 +0000
ROA not before:           Thu 26 Sep 2024 13:42:15 +0000
ROA not after:            Thu 25 Sep 2025 13:47:15 +0000
asID:                     52947
IP address blocks:        177.38.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:16:ad:46:6c:45:59:7a:df:d9:f6:17:d1:89:6e:31:cb:ff:71:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
        Validity
            Not Before: Sep 26 13:42:15 2024 GMT
            Not After : Sep 25 13:47:15 2025 GMT
        Subject: CN=9E930B8D9D75979BE8AE856746C58982DB24EB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:08:cd:26:e2:1e:65:bc:0b:ef:04:29:b8:
                    71:25:ac:37:12:47:a3:ec:ce:f8:51:af:fe:1f:16:
                    6d:f7:f9:33:12:5c:9c:93:c3:ba:89:0a:75:41:17:
                    4f:75:67:ad:b1:5d:f4:d1:1b:e1:3b:09:19:bb:cf:
                    c5:38:59:a4:99:c0:6d:39:99:85:76:9f:4c:70:09:
                    30:d9:1b:c7:63:ba:47:b6:f9:db:fb:a8:28:6a:d0:
                    72:01:14:6c:49:a7:0b:c9:33:65:f4:ef:f7:9b:fe:
                    f8:0d:18:0c:67:7b:e0:8f:9f:cf:55:4d:fd:ff:71:
                    1c:06:94:7c:d6:68:94:20:61:ba:f1:c2:30:76:7f:
                    e5:a6:ed:a7:af:c9:98:d0:47:79:63:d0:d2:31:4b:
                    ec:6f:31:a7:a4:4a:58:e8:88:b2:4c:86:ba:ee:85:
                    ca:55:79:94:44:43:a5:ba:0a:6e:7c:4f:99:fd:35:
                    f4:82:d1:e7:58:f0:bb:5a:96:6d:a2:6d:67:64:ec:
                    68:ab:a8:3f:04:43:e9:38:59:cb:5f:65:4f:4f:cd:
                    28:81:bf:2a:1f:d5:f4:a7:e5:b7:2a:0e:10:38:b7:
                    5f:a2:50:69:75:63:c8:39:fc:31:fe:ae:30:89:9c:
                    e8:b4:d2:74:63:db:57:ef:d0:01:56:94:4d:fa:ff:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:93:0B:8D:9D:75:97:9B:E8:AE:85:67:46:C5:89:82:DB:24:EB:1E
            X509v3 Authority Key Identifier:
                keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3137372e33382e3133362e302f32312d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:15:12:08:0f:c3:78:1f:cf:42:65:85:65:6d:75:5a:9b:
         1b:b4:d0:77:bb:35:50:67:07:ec:20:2e:e5:79:7f:d3:64:aa:
         82:7c:60:80:13:10:c7:6e:b0:a8:f5:da:cc:46:2a:67:22:79:
         05:6d:92:70:d5:1f:2c:f8:f5:40:14:c2:f7:ac:7a:3e:0b:0b:
         b6:c2:c8:59:62:2f:fe:1e:4a:aa:1a:ad:06:14:ab:eb:6c:d2:
         ac:c4:ea:8d:77:e6:96:5f:98:1f:1b:01:43:ed:76:82:16:92:
         ed:eb:0c:d1:40:fa:c0:26:21:5e:f6:f0:f6:9c:1f:99:a7:a7:
         e4:15:fe:80:5a:01:ad:8d:40:90:6e:53:67:f8:a8:2f:a9:5f:
         7b:8f:d8:74:a8:bd:42:1f:d1:5c:16:9d:1f:64:28:e3:7f:78:
         bf:a7:f8:2d:97:fa:40:16:f3:1e:95:0c:c0:34:bf:0b:08:1b:
         f2:27:7b:f8:28:29:62:ee:23:7a:76:f0:13:25:39:40:4d:79:
         81:8c:8f:b4:07:02:4b:9c:4b:52:65:da:6e:ea:3f:50:46:88:
         27:ec:b2:b4:eb:f5:4b:db:2e:dd:43:e1:a0:80:ea:ed:09:c7:
         c0:51:59:1b:11:60:84:ea:ab:1a:ec:2e:1d:46:f8:7a:86:ab:
         08:5a:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org