Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa
File:                     3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          kXAq1haz4/iQmUmTSZeo6TMhTFJaSTuWI3EQkjj/VU0=
Subject key identifier:   E9:EC:1D:16:9B:2B:47:AD:FD:97:A8:11:B3:DD:18:79:BE:46:D3:79
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       29F91BAC9AD3A5882F1BA4C493A65A6748F73424
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:15 +0000
ROA not before:           Thu 04 Apr 2024 09:13:15 +0000
ROA not after:            Thu 03 Apr 2025 09:18:15 +0000
asID:                     52613
IP address blocks:        177.125.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:1b:ac:9a:d3:a5:88:2f:1b:a4:c4:93:a6:5a:67:48:f7:34:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:15 2024 GMT
            Not After : Apr  3 09:18:15 2025 GMT
        Subject: CN=E9EC1D169B2B47ADFD97A811B3DD1879BE46D379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:6e:d8:de:e3:f5:eb:de:14:6c:3b:7d:d9:
                    a2:77:6f:39:f4:b5:08:05:8f:54:88:f0:05:ac:6e:
                    67:28:d6:71:da:89:92:fe:57:f4:e6:c1:51:6f:84:
                    bf:eb:9e:00:89:b0:83:c6:4a:28:7a:13:02:5a:f9:
                    e0:aa:9d:16:57:85:a9:ae:a8:ed:6f:f9:7a:7f:9e:
                    b1:3f:2f:d0:b1:8a:14:56:be:9b:20:a1:02:60:70:
                    7d:18:16:06:1a:1e:e4:d5:7c:26:18:b6:8e:1d:77:
                    48:73:c9:86:19:73:05:a9:db:37:b7:30:1c:01:9c:
                    77:e6:e7:36:09:75:2c:61:7b:bd:73:28:a7:b2:9a:
                    37:31:50:1c:0f:4d:d4:d3:74:85:31:25:b8:91:fe:
                    1e:15:16:da:24:1d:86:35:34:76:54:8d:5f:73:de:
                    37:bc:39:e9:e9:7d:23:e0:ad:25:58:71:ec:43:e5:
                    02:9a:9b:5c:9b:9d:4b:c2:85:8c:8d:3c:a5:d2:89:
                    50:bd:0a:cd:d5:92:71:cf:f1:ed:45:8c:aa:f7:b4:
                    4a:b8:f9:d0:1b:0b:5c:6d:f7:4c:22:59:bf:42:55:
                    e8:c0:3b:89:6e:6f:92:8b:c2:0a:21:4b:b7:94:10:
                    ec:59:92:6f:c8:55:64:8b:72:21:a1:cc:3d:a3:56:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:1D:16:9B:2B:47:AD:FD:97:A8:11:B3:DD:18:79:BE:46:D3:79
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:6d:96:cc:4d:18:72:4b:13:d5:b0:22:ff:32:9c:01:7a:
         72:b2:f2:f2:b9:4f:61:d1:11:30:e1:9b:7b:c0:b0:bf:88:27:
         aa:03:ad:20:16:1a:ce:3c:e6:77:fe:4e:d5:cd:c8:aa:b2:7f:
         fb:fe:1b:8c:24:e4:c3:4c:c7:85:46:53:c1:a4:0a:a6:a2:c8:
         8f:80:26:82:f2:1a:95:99:7a:9b:cf:3b:66:a2:f7:df:93:ee:
         cc:70:0b:36:97:1e:c2:fd:80:f8:3d:a0:09:b5:f6:2b:91:88:
         b6:bd:63:f2:b6:70:90:0a:3f:bf:0e:6f:12:b7:eb:78:91:10:
         c5:43:3d:ac:bc:25:b7:cd:1e:b2:3f:b2:4f:7f:b9:51:47:4a:
         6b:7f:66:29:68:8e:f2:5e:d2:75:3b:61:d9:d2:5e:32:f5:f5:
         b6:fd:a4:25:a1:2f:4b:7f:39:93:8b:e6:cf:ff:f9:2b:0c:3a:
         8a:ee:29:e3:7a:d9:7a:ee:64:cb:e2:b1:0c:ce:d1:5a:fe:54:
         42:45:bf:48:bc:43:f1:56:d4:ea:0b:23:61:ca:60:f1:13:9a:
         1c:71:45:07:26:1d:93:d5:3c:66:0d:7c:e4:92:fc:fe:8b:ab:
         09:4c:eb:a1:39:e8:87:09:23:f8:0b:14:24:d6:2c:59:ee:a6:
         71:7b:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org