Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/3137372e3138342e3136302e302f32302d3332203d3e203532393230.roa
File:                     3137372e3138342e3136302e302f32302d3332203d3e203532393230.roa (raw, json)
Hash identifier:          dQaUHHHVW3+KOETXqWHlBvseU9E2o1DanlBn4a8N2Jo=
Subject key identifier:   46:1D:F6:6B:17:04:3C:04:DE:C2:39:91:D0:97:39:CE:01:E5:22:B3
Certificate issuer:       /CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
Certificate serial:       79BE7EEE81198B3099750C97F5AE59893ADA2348
Authority key identifier: D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/3137372e3138342e3136302e302f32302d3332203d3e203532393230.roa
Signing time:             Fri 02 Aug 2024 18:30:03 +0000
ROA not before:           Fri 02 Aug 2024 18:25:03 +0000
ROA not after:            Fri 01 Aug 2025 18:30:03 +0000
asID:                     52920
IP address blocks:        177.184.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl
                          rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:be:7e:ee:81:19:8b:30:99:75:0c:97:f5:ae:59:89:3a:da:23:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
        Validity
            Not Before: Aug  2 18:25:03 2024 GMT
            Not After : Aug  1 18:30:03 2025 GMT
        Subject: CN=461DF66B17043C04DEC23991D09739CE01E522B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:fe:5e:9c:b8:ab:18:26:81:11:a6:8f:d4:
                    8e:18:98:91:d8:ad:94:c4:17:d3:dd:57:20:4d:d8:
                    89:bd:67:5d:9c:2c:5f:ed:a8:76:04:a4:52:cd:92:
                    81:a0:d5:e4:6a:64:41:dd:f1:34:d9:9a:d1:90:01:
                    88:20:0d:dd:56:51:8b:5a:3c:aa:de:aa:74:9f:5d:
                    55:2b:80:aa:a9:25:fd:84:e6:86:2c:31:85:8d:dd:
                    00:af:17:0e:10:38:d5:c8:40:f3:cf:62:f7:ae:01:
                    20:1e:4e:c2:2d:a0:9d:49:b2:02:f2:29:eb:ea:50:
                    04:a2:ce:dd:0b:f4:47:95:26:64:33:48:9b:d1:fb:
                    f9:6e:f6:0c:66:f3:4c:99:6f:83:a1:9b:41:df:12:
                    ab:94:ab:d3:b2:a3:53:26:65:bc:52:be:66:fe:a5:
                    66:43:e6:58:ea:9a:33:00:da:28:cb:2f:7d:b7:37:
                    c2:65:45:88:69:1b:57:a5:e1:2c:04:fc:1f:61:b7:
                    fd:5f:6e:74:77:58:72:13:e9:b4:f1:0e:14:6c:ca:
                    34:e5:f1:7e:95:1d:68:a9:03:5c:8c:f5:d9:02:e9:
                    d3:90:4a:7b:7a:18:66:0e:40:b1:ec:64:bd:81:44:
                    19:bb:2d:26:11:8b:fe:b0:b1:2f:ec:87:c0:69:2d:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:F6:6B:17:04:3C:04:DE:C2:39:91:D0:97:39:CE:01:E5:22:B3
            X509v3 Authority Key Identifier:
                keyid:D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/3137372e3138342e3136302e302f32302d3332203d3e203532393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:3d:37:84:14:49:4c:b2:16:f7:a4:0c:1f:6a:6f:8d:66:
         75:59:ca:0d:c5:a0:b3:0c:47:d1:ce:15:2e:17:46:d2:4c:37:
         fa:3c:a6:dd:9e:bb:f3:78:01:8c:14:d8:ae:7b:43:5c:7f:00:
         12:23:7e:b3:41:44:b3:0f:cb:49:35:a2:1a:06:d1:7b:1a:ce:
         cb:72:45:e5:72:cf:c4:7d:50:43:ac:36:da:9e:c8:e4:e8:d5:
         7d:00:44:1c:29:d0:4d:93:89:c4:c1:dd:0d:75:a5:cd:a8:3b:
         a0:0b:3e:e9:e2:66:5d:93:b5:36:6b:f7:f9:d5:d1:06:4d:eb:
         cd:99:8a:02:1c:ba:df:0b:75:6f:04:14:6a:2b:5a:6f:76:68:
         9b:2b:9b:36:64:a2:af:b2:a1:6a:98:bc:6f:68:4d:89:40:ae:
         20:76:ca:81:b4:bc:3d:ea:1e:01:ad:c9:9d:2a:d3:c2:78:54:
         84:5a:af:88:c6:97:d7:3f:ff:95:e1:18:62:d2:4a:41:e6:72:
         2c:21:58:b2:67:2c:76:5f:bb:b1:66:3e:c4:7e:6a:4d:aa:d4:
         aa:ef:f1:34:66:91:b7:09:f4:03:27:97:f0:0e:20:78:22:bb:
         f2:7d:d8:ee:15:b1:42:9c:d6:ee:40:0f:b0:ee:93:76:98:e6:
         4e:35:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:10 2024 by rpki-client on console-ams.rpki-client.org