Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          9a26ZecNwSj75GK9Zvwo8Ra2R+AVggb2tCxCnLUhUMg=
Subject key identifier:   19:A2:D4:35:BA:D0:24:BE:6A:C2:E7:3A:BE:CB:F7:58:F0:B4:92:68
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       483050E270324550463D23A2CE96002E06D779D5
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     53236
IP address blocks:        177.10.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:30:50:e2:70:32:45:50:46:3d:23:a2:ce:96:00:2e:06:d7:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject: CN=3082010A0282010100BDDB3A51F1951A898429C4CA73898703CF433C0F02AC69A89B75E8C8CAC3A884775ADE71B971076E4349A2EEE76FCD030B12F46BE10CC28B245B4863DC4761E884D4DC8423229B4EAC27631CF10245E2D21947E48B1A54877E0B5F28A2C101348BFDC996D9F490004ABF1D9BF021F027C7AC46E3FF9C27EC5E7FB667B55CAA784CBB0D8D132DB701CBFF71DE5BDF99E66C606500C329542FE7AA76CFA0C57DC66B46F41E4DB26A08E223712408E10A0C1C06971414A88F186091E1DF5A485A930916FBD9243E8C13C2327AA5E9B6427E54857C9E0183CCECA0486D3C28D2467B7F3D5C5D15866F12F2EF8EAAE4192DE4359939C5B0994E3979F826802A682AA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:3a:51:f1:95:1a:89:84:29:c4:ca:73:89:
                    87:03:cf:43:3c:0f:02:ac:69:a8:9b:75:e8:c8:ca:
                    c3:a8:84:77:5a:de:71:b9:71:07:6e:43:49:a2:ee:
                    e7:6f:cd:03:0b:12:f4:6b:e1:0c:c2:8b:24:5b:48:
                    63:dc:47:61:e8:84:d4:dc:84:23:22:9b:4e:ac:27:
                    63:1c:f1:02:45:e2:d2:19:47:e4:8b:1a:54:87:7e:
                    0b:5f:28:a2:c1:01:34:8b:fd:c9:96:d9:f4:90:00:
                    4a:bf:1d:9b:f0:21:f0:27:c7:ac:46:e3:ff:9c:27:
                    ec:5e:7f:b6:67:b5:5c:aa:78:4c:bb:0d:8d:13:2d:
                    b7:01:cb:ff:71:de:5b:df:99:e6:6c:60:65:00:c3:
                    29:54:2f:e7:aa:76:cf:a0:c5:7d:c6:6b:46:f4:1e:
                    4d:b2:6a:08:e2:23:71:24:08:e1:0a:0c:1c:06:97:
                    14:14:a8:8f:18:60:91:e1:df:5a:48:5a:93:09:16:
                    fb:d9:24:3e:8c:13:c2:32:7a:a5:e9:b6:42:7e:54:
                    85:7c:9e:01:83:cc:ec:a0:48:6d:3c:28:d2:46:7b:
                    7f:3d:5c:5d:15:86:6f:12:f2:ef:8e:aa:e4:19:2d:
                    e4:35:99:39:c5:b0:99:4e:39:79:f8:26:80:2a:68:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:D4:35:BA:D0:24:BE:6A:C2:E7:3A:BE:CB:F7:58:F0:B4:92:68
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:87:17:f3:17:e7:47:d4:12:0f:4c:88:52:a6:93:27:de:
         12:6d:67:63:fe:91:34:83:3c:20:62:4e:f2:73:06:13:dd:c9:
         e0:a1:b8:ee:7b:d6:a8:3c:c9:d6:72:b5:94:c4:34:1f:7f:78:
         10:43:b3:91:10:8b:84:14:87:3e:cd:48:af:4a:21:02:94:c0:
         69:21:a0:31:d0:83:2b:ff:1e:99:58:7c:f6:86:8b:d3:66:25:
         eb:f0:18:c4:77:84:b7:b7:cb:3a:60:a0:1e:e3:05:29:e5:76:
         af:33:7f:88:99:fb:12:81:20:a6:e2:c3:41:18:35:80:02:20:
         75:ad:69:b0:d3:f8:54:a2:f6:d2:44:e1:c9:b9:0e:4f:be:a4:
         8b:ee:58:bf:11:7b:67:2e:53:b7:04:8a:e3:d1:cf:07:5e:7a:
         ac:c4:7b:2a:32:5d:2b:fd:88:50:f3:f9:44:f4:14:64:f8:1d:
         16:25:a5:21:a2:9c:7c:05:e3:70:aa:f2:49:cf:4b:50:5b:9f:
         f4:fc:e8:7d:35:e7:95:62:25:06:21:6a:43:7b:62:bd:0b:f0:
         d0:da:fb:49:59:cf:6d:71:28:83:59:a1:f0:7e:b3:3b:ed:d9:
         a7:a3:5c:24:fe:d3:e0:c5:37:f3:b4:3a:3f:d5:36:25:89:42:
         c8:5c:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org