Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          HaFWldWMbTQdCwkBOoGzgEIJ1UAmHKve0i+I2vb7oVE=
Subject key identifier:   7A:B3:1C:6C:DC:20:58:80:5D:1B:5E:AF:8F:B3:A5:7A:17:08:53:18
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       6AA33733011D1C089E149DA8C5307A6B177CFD5C
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:18 +0000
ROA not before:           Thu 04 Apr 2024 09:13:18 +0000
ROA not after:            Thu 03 Apr 2025 09:18:18 +0000
asID:                     52613
IP address blocks:        177.125.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a3:37:33:01:1d:1c:08:9e:14:9d:a8:c5:30:7a:6b:17:7c:fd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:18 2024 GMT
            Not After : Apr  3 09:18:18 2025 GMT
        Subject: CN=7AB31C6CDC2058805D1B5EAF8FB3A57A17085318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:65:e6:fe:1b:20:0e:99:c4:32:7a:7b:5a:
                    b1:e2:1b:86:f8:ef:da:36:1d:6d:63:d5:31:88:6f:
                    65:ce:c5:91:50:1d:48:e4:86:64:17:1e:e3:31:59:
                    ba:e8:5f:2c:59:61:ab:6d:ab:3b:85:4d:8a:66:a9:
                    af:64:4e:d5:08:a8:aa:96:c8:29:2e:28:11:58:45:
                    96:2b:da:a3:a5:42:7f:e6:60:b7:af:26:0c:55:08:
                    62:11:86:c6:6a:28:ba:24:63:a2:8e:6d:04:67:b8:
                    d8:36:75:80:4e:74:2a:2e:2c:89:18:2e:74:08:46:
                    2e:06:3a:cb:44:23:6d:76:08:55:8d:e8:a3:c1:f5:
                    e9:f3:ca:a9:e6:75:ba:7d:32:6a:55:21:2a:05:35:
                    fc:19:d3:08:27:27:fe:fc:c5:35:64:e3:fb:7a:a8:
                    0d:63:4f:87:5a:59:ff:ad:18:18:eb:9f:be:28:3d:
                    f4:c1:8c:2f:7b:b8:b8:c5:05:4d:dd:91:68:be:c4:
                    f6:6e:26:eb:6f:6c:8c:74:ad:f4:84:7a:b0:66:26:
                    a0:6c:93:07:cb:7a:aa:d9:87:9c:d5:d0:e2:91:f0:
                    97:2e:f3:34:b1:53:7d:52:d6:b2:be:6e:ce:89:0b:
                    e1:cd:dd:2a:3c:d4:f6:b4:15:c6:a4:da:2f:f9:08:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:1C:6C:DC:20:58:80:5D:1B:5E:AF:8F:B3:A5:7A:17:08:53:18
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:60:04:d6:58:93:a8:96:d0:ea:25:d7:0e:3a:b9:b3:c0:b1:
         53:1a:3e:57:e8:ca:7e:91:5e:59:9f:d2:b8:47:ec:90:8a:60:
         5b:4a:53:5e:88:08:06:b4:4b:25:42:78:dc:a5:e9:34:8e:15:
         7c:87:af:43:d4:2e:c5:7b:6e:a7:9d:8c:8a:96:68:93:1f:4f:
         f6:6d:4f:ee:48:42:2d:c5:aa:6d:67:45:d2:2f:30:73:21:68:
         82:6c:5b:5c:2d:d5:e2:ac:24:9e:11:ea:64:fc:45:e4:75:ec:
         f0:2f:44:c2:db:32:4a:b5:90:c4:68:ac:85:83:28:8c:65:4a:
         db:2c:3a:d0:8f:36:f2:e8:64:93:4c:8c:0d:5a:91:d9:df:dc:
         d6:45:de:07:0a:6a:67:f5:bf:90:90:84:bb:2a:00:b1:9c:d6:
         03:94:ac:b5:65:74:8c:77:f7:b2:70:42:cb:a8:8b:83:fc:b6:
         49:32:f4:48:f4:2f:89:01:d3:01:ca:2f:e2:1d:3b:a0:36:0e:
         1f:8f:4c:74:70:f8:38:46:c9:ac:c2:69:72:ab:11:c8:ab:55:
         3d:bd:5c:de:e6:04:12:18:71:3e:4d:29:e0:e3:1d:89:a8:6b:
         17:6f:22:e9:e8:12:7d:2e:05:c7:be:9e:d2:55:ca:d8:d9:fb:
         01:13:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:53 2024 by rpki-client on console-fra.rpki-client.org