Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3234203d3e20323632343037.roa
File:                     3137372e33382e3134342e302f32312d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          m6DSXk77Fu3jV3fW7DBvtsK7xYqTceodAehHvume134=
Subject key identifier:   CC:F2:DE:49:98:B2:2F:B6:4E:86:45:D6:06:8D:5A:5E:90:16:BD:1E
Certificate issuer:       /CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
Certificate serial:       39EAE4C70A444A51619AEF20FC62CF000A7A3884
Authority key identifier: E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3234203d3e20323632343037.roa
Signing time:             Fri 09 Aug 2024 19:33:47 +0000
ROA not before:           Fri 09 Aug 2024 19:28:47 +0000
ROA not after:            Fri 08 Aug 2025 19:33:47 +0000
asID:                     262407
IP address blocks:        177.38.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ea:e4:c7:0a:44:4a:51:61:9a:ef:20:fc:62:cf:00:0a:7a:38:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
        Validity
            Not Before: Aug  9 19:28:47 2024 GMT
            Not After : Aug  8 19:33:47 2025 GMT
        Subject: CN=CCF2DE4998B22FB64E8645D6068D5A5E9016BD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:4a:a8:3b:78:8d:27:f8:06:1b:48:9a:ce:
                    9a:dc:5b:02:1e:31:71:7e:32:6a:c6:27:63:5b:b3:
                    cf:c7:54:13:4d:a4:4b:cc:18:f7:19:d9:62:01:e6:
                    c9:b4:e3:80:21:d0:ff:05:22:8b:25:a3:d4:72:62:
                    8e:a8:12:67:a6:b0:70:cc:3f:d1:b1:64:6f:6c:fa:
                    3b:c8:3b:74:af:df:23:27:e4:41:3c:12:1c:4b:57:
                    66:7e:33:cd:16:f5:d6:b3:63:3b:2a:51:ea:cd:8d:
                    6d:dd:ea:09:f0:b5:9b:5b:d1:f7:b0:24:01:8e:fe:
                    5c:d4:88:bb:9a:f4:6b:26:34:8d:a5:94:8a:fa:c0:
                    6c:12:de:31:3f:24:e6:a3:68:ad:23:cf:64:44:f7:
                    2e:ad:b8:1f:1d:c7:e3:c6:4c:71:81:ba:f4:27:e4:
                    ff:6f:02:55:98:b9:f2:ea:8c:06:e3:80:e9:f6:0e:
                    11:4f:a0:33:2e:da:fc:03:dc:61:63:38:2e:3e:03:
                    dd:ed:74:0f:7f:d3:f7:d7:14:8d:04:86:54:4e:04:
                    43:76:5d:6d:ca:96:ba:fd:55:a7:f3:e1:20:cc:be:
                    6d:58:9f:d6:a2:1c:31:75:5a:f4:97:01:20:56:95:
                    1d:a3:52:ed:ca:bd:37:4f:13:33:86:71:b5:a1:ed:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:DE:49:98:B2:2F:B6:4E:86:45:D6:06:8D:5A:5E:90:16:BD:1E
            X509v3 Authority Key Identifier:
                keyid:E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:21:c4:09:f5:87:30:bf:ad:8a:01:27:15:47:97:88:ff:
         77:36:a9:1a:a3:a9:95:3d:b4:22:d4:f1:7c:83:a3:fe:42:2d:
         db:68:12:07:21:8a:6b:e6:ca:84:92:6f:38:50:11:84:e6:a6:
         3c:6e:25:d2:22:1d:3a:d7:86:a4:4c:a0:6f:6d:e5:3e:ec:ea:
         ab:2f:fa:4d:a4:b5:b0:75:22:2a:de:95:eb:45:28:e4:aa:31:
         4b:e4:4a:cd:f3:e2:e8:82:d7:e1:54:9e:17:72:21:d7:e1:8a:
         bf:76:41:63:25:70:76:5c:ea:30:04:27:d9:ee:fd:d6:ee:ec:
         45:58:f5:90:ce:3c:c4:92:6f:27:bf:97:27:4e:8f:f2:e8:0a:
         76:26:3d:ec:fe:46:13:e0:77:86:52:9d:41:95:be:3d:dc:95:
         7a:cd:85:9a:3c:38:64:1e:47:02:21:85:f9:28:53:79:19:67:
         e8:3b:84:75:5e:91:1f:3a:60:dd:63:ea:00:d2:44:52:d1:ba:
         21:e4:dd:f0:9f:e4:be:b8:92:e2:e7:eb:c3:75:89:a7:0b:73:
         72:1a:0f:84:3e:3a:32:ad:6a:b9:f2:12:82:33:6c:39:f9:bc:
         1b:55:b5:5c:69:3a:c3:99:17:21:95:13:4f:a4:32:3e:27:9c:
         b9:ad:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:09 2024 by rpki-client on console-fra.rpki-client.org