Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          DTf8Mwz8Fb/ltuPCAXg/LjMBD9uxG1fGF4JvNUgPUaM=
Subject key identifier:   42:69:2F:DD:3A:BC:78:12:84:39:39:69:96:73:7E:12:75:95:F5:4D
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       72C1DF67D61DDA86D9B7AF661A071ACF22E9A7A5
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:08 +0000
ROA not before:           Sat 31 Aug 2024 14:08:08 +0000
ROA not after:            Sat 30 Aug 2025 14:13:08 +0000
asID:                     52772
IP address blocks:        177.39.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:df:67:d6:1d:da:86:d9:b7:af:66:1a:07:1a:cf:22:e9:a7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:08 2024 GMT
            Not After : Aug 30 14:13:08 2025 GMT
        Subject: CN=42692FDD3ABC78128439396996737E127595F54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:1c:78:51:cc:e9:a4:78:76:5a:64:f8:6b:
                    7c:93:0d:19:f1:53:4b:ff:3f:a3:9b:fd:63:82:3a:
                    bc:9c:d3:19:0c:e3:f1:36:c3:63:90:53:28:17:81:
                    41:76:86:22:43:2f:80:62:e2:fe:99:e3:ed:14:33:
                    17:63:59:53:ae:fc:5c:3f:e5:47:69:26:d2:62:ca:
                    bd:93:79:9e:93:52:8c:c1:53:59:cf:7a:e8:14:28:
                    2f:30:35:c2:bc:7a:7e:04:65:ba:f4:8c:94:13:fd:
                    9a:f7:00:1e:1d:17:51:a6:90:95:05:e9:39:7d:73:
                    88:d2:93:be:06:ba:a9:9f:48:3e:94:2e:f7:e2:c1:
                    4e:03:29:3f:07:4d:b4:88:b7:41:d1:1d:4a:a5:c7:
                    77:fb:c2:54:88:fc:63:2f:3d:09:51:9e:f3:4d:12:
                    7d:cd:6f:35:11:49:b5:37:f8:fd:59:c6:74:6d:bf:
                    38:15:4e:a4:5c:17:41:1f:39:3b:cf:da:a4:62:b4:
                    d3:a8:35:c9:29:b8:5e:03:1c:72:7d:51:e2:45:3a:
                    e6:33:bd:46:eb:d4:32:01:47:b2:ab:78:cd:17:7c:
                    c7:4c:6f:22:db:00:54:2a:b3:da:56:00:4a:3d:83:
                    63:f0:98:8a:10:a8:de:d5:2e:1c:02:3f:67:37:95:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:69:2F:DD:3A:BC:78:12:84:39:39:69:96:73:7E:12:75:95:F5:4D
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:be:b3:5b:44:37:04:3a:c4:b8:38:c5:74:0c:d4:34:79:02:
         f9:ce:ad:51:cc:4d:b5:51:e3:5d:31:9c:25:4e:d2:3d:96:bb:
         04:c7:07:35:78:1d:37:e4:09:c1:1b:28:50:99:20:fb:f0:03:
         cf:c7:1b:56:b0:86:c8:94:1e:0a:fe:56:b9:a2:6f:39:fe:da:
         ad:e7:b7:da:72:49:c6:08:ba:31:a0:21:39:6f:54:85:6c:d4:
         68:93:42:b3:1c:1d:5e:9e:ba:2c:5e:2c:db:2e:42:88:cd:37:
         ff:ed:aa:25:53:6e:8e:36:c1:07:27:c9:7a:dc:bd:0d:20:2e:
         d2:82:a8:1e:65:64:04:f7:07:e9:cf:2e:05:d9:5e:00:59:e4:
         b8:3e:99:97:8b:94:aa:3a:36:f9:1d:c7:92:d4:11:5f:76:27:
         34:91:55:e8:4f:da:47:39:d5:01:e8:75:de:5d:42:35:33:ac:
         59:1b:17:cc:23:48:e5:b6:c0:43:c4:95:52:af:23:21:5c:1d:
         54:fd:00:39:5d:42:eb:86:86:a9:f6:11:33:5a:48:33:16:9c:
         f2:22:6a:61:d7:2a:71:d5:c4:3b:00:e4:81:c6:c5:67:75:ca:
         8e:59:26:e2:03:87:15:7f:d1:88:6f:da:22:ae:ef:2b:ea:5c:
         4d:66:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org