Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          vwrKw32cU5+rJqMWzBjQz0d2jF3ByEEPrezOBIliBCE=
Subject key identifier:   AA:B6:BA:FB:CC:26:CF:E8:75:EF:C6:92:E9:6D:B0:83:E7:DE:35:05
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       6EF852EC9FA42A1C8513B4942241B1F5855EA0EF
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:14 +0000
ROA not before:           Thu 04 Apr 2024 09:13:14 +0000
ROA not after:            Thu 03 Apr 2025 09:18:14 +0000
asID:                     52613
IP address blocks:        177.125.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f8:52:ec:9f:a4:2a:1c:85:13:b4:94:22:41:b1:f5:85:5e:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:14 2024 GMT
            Not After : Apr  3 09:18:14 2025 GMT
        Subject: CN=AAB6BAFBCC26CFE875EFC692E96DB083E7DE3505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:53:bf:68:49:94:fa:71:a1:af:79:a9:78:
                    74:24:dc:3c:df:ee:1f:8a:4d:12:e7:b2:8a:05:89:
                    74:6d:70:9e:1d:0c:de:01:1c:78:29:bf:86:6b:90:
                    a8:05:37:6f:a8:2e:d2:8d:29:fb:14:d5:43:4c:19:
                    34:91:43:dc:c4:ee:12:c7:aa:ec:9c:31:bf:ca:b0:
                    ee:83:8d:da:85:9a:99:5a:3b:ca:b3:d1:f5:73:6e:
                    8a:2c:4e:77:38:ee:6a:2f:b8:92:0c:98:7f:1d:35:
                    84:fd:1e:a6:b5:2e:37:e7:e1:1d:9d:23:fd:de:f7:
                    27:e8:1e:81:c9:19:cb:33:65:20:8a:7f:4c:34:00:
                    12:2b:cd:1f:7b:43:55:63:31:26:33:c1:8d:6e:d1:
                    b7:e3:7f:02:4f:2c:b6:4d:9e:d3:f1:a8:5e:71:48:
                    3a:9d:59:2e:16:92:ef:69:70:38:31:7c:b5:e6:2d:
                    70:59:8a:f5:6e:1b:f4:8a:8b:80:5b:14:47:10:1d:
                    cd:2a:3c:f1:90:c3:36:2b:89:79:68:d3:8e:77:74:
                    4b:1c:16:90:e5:28:d3:3f:85:f4:a6:69:24:ad:a7:
                    25:b6:c5:f2:a3:ed:0f:c3:61:f4:5a:c1:cd:fc:42:
                    da:3a:04:b4:15:51:f2:47:5d:07:c7:32:bc:f0:c7:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B6:BA:FB:CC:26:CF:E8:75:EF:C6:92:E9:6D:B0:83:E7:DE:35:05
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:f8:7f:94:e1:1e:b9:f9:15:6b:81:c8:1d:42:74:59:b1:
         49:21:b0:b5:dc:eb:6a:37:0b:47:10:7e:40:05:8f:d7:a4:d9:
         c6:fd:40:cb:1e:b5:32:4b:cc:26:c4:d0:d0:8c:60:3e:dd:aa:
         45:65:a6:b7:a0:8c:09:35:79:2e:8c:85:4f:64:83:d1:93:0a:
         28:e6:5f:66:1a:bb:5a:6a:b9:39:6d:28:44:25:46:49:9d:fc:
         48:8e:1f:bf:58:cc:a6:a1:2a:11:90:79:81:b6:bd:8f:7a:46:
         94:b4:b2:dd:08:a6:66:7b:2b:ef:64:aa:4e:e6:b0:f6:12:96:
         ef:38:82:56:3f:aa:88:26:11:fd:53:6b:f6:85:c3:bf:c2:df:
         75:dc:c7:f2:81:ff:96:ed:58:59:7f:8f:de:fe:42:98:57:61:
         02:ec:cf:10:fc:21:d8:c3:19:a5:bf:5e:60:98:38:ff:74:84:
         7f:99:dd:84:47:ff:20:43:9d:2f:1f:ce:25:d6:62:7e:f2:9b:
         9e:49:6f:7b:64:22:9f:85:a7:40:b6:cc:ae:ad:39:af:d6:03:
         f8:91:6e:4d:a1:49:ca:a4:17:4b:7e:68:12:ae:59:55:a8:25:
         d6:22:39:0e:4b:53:04:b3:c1:31:9e:1a:cc:24:53:df:08:78:
         5e:7c:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org