Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/3137372e36362e38302e302f32312d3332203d3e20323632343930.roa
File:                     3137372e36362e38302e302f32312d3332203d3e20323632343930.roa (raw, json)
Hash identifier:          /jEq1QAmMdYHWl3bEo7jla8quEGobNq6HajWvNIaWf4=
Subject key identifier:   D3:10:7C:5F:65:7F:EB:9C:53:E9:19:C8:3F:13:B4:47:76:B2:3C:1E
Certificate issuer:       /CN=DF20AE706DD1469AE20D51958584C9CBB11476C4
Certificate serial:       01AC9F12F9189B8E65A09828B3E741AE96A09FD2
Authority key identifier: DF:20:AE:70:6D:D1:46:9A:E2:0D:51:95:85:84:C9:CB:B1:14:76:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF20AE706DD1469AE20D51958584C9CBB11476C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/3137372e36362e38302e302f32312d3332203d3e20323632343930.roa
Signing time:             Tue 30 Apr 2024 18:57:15 +0000
ROA not before:           Tue 30 Apr 2024 18:52:15 +0000
ROA not after:            Tue 29 Apr 2025 18:57:15 +0000
asID:                     262490
IP address blocks:        177.66.80.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.crl
                          rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF20AE706DD1469AE20D51958584C9CBB11476C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:9f:12:f9:18:9b:8e:65:a0:98:28:b3:e7:41:ae:96:a0:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF20AE706DD1469AE20D51958584C9CBB11476C4
        Validity
            Not Before: Apr 30 18:52:15 2024 GMT
            Not After : Apr 29 18:57:15 2025 GMT
        Subject: CN=D3107C5F657FEB9C53E919C83F13B44776B23C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:8b:ec:d5:db:35:da:ce:58:ed:d5:7d:0d:
                    fd:0f:61:60:2a:91:aa:f4:63:9d:ab:a2:88:9a:08:
                    d7:18:9d:03:86:d3:ed:9d:83:16:58:0d:48:57:d3:
                    ea:26:23:9e:a9:82:01:56:0d:86:db:68:77:4c:34:
                    bd:12:a8:43:0b:fe:85:2e:71:32:a0:02:84:79:61:
                    2e:6f:65:2e:e2:65:b4:f7:92:0b:38:65:6b:63:e0:
                    6f:e8:4e:c5:84:9f:08:94:2a:02:2b:3b:82:98:df:
                    8d:f5:07:6e:85:0b:16:15:78:19:78:66:f6:83:dc:
                    91:07:e7:1b:93:82:99:a2:ef:78:a7:de:95:c0:b5:
                    20:d6:a2:77:32:3a:6e:91:30:b6:d8:05:e0:b1:79:
                    27:d0:72:b1:31:9a:3c:b8:10:6e:28:a9:54:e0:e3:
                    8b:92:2c:a7:6f:dd:dc:19:e2:25:8f:46:57:00:08:
                    ea:34:6c:15:02:04:57:56:13:28:26:17:23:b8:28:
                    33:0e:57:2a:37:c9:1f:06:6a:2d:18:3b:81:3d:d0:
                    6a:f7:2f:ec:cc:07:b5:00:60:1b:71:3c:02:cf:f0:
                    49:c0:78:15:cf:42:94:42:ed:09:6e:0d:87:5b:09:
                    12:81:3c:14:2e:31:03:0f:1a:40:25:68:c3:d3:83:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:7C:5F:65:7F:EB:9C:53:E9:19:C8:3F:13:B4:47:76:B2:3C:1E
            X509v3 Authority Key Identifier:
                keyid:DF:20:AE:70:6D:D1:46:9A:E2:0D:51:95:85:84:C9:CB:B1:14:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF20AE706DD1469AE20D51958584C9CBB11476C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/3137372e36362e38302e302f32312d3332203d3e20323632343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:41:30:f2:80:08:d9:f4:e6:eb:f6:c2:80:67:9f:e4:a5:
         db:e6:ae:bc:ee:7e:7a:58:ea:3b:ca:d1:22:5a:2b:68:ca:b2:
         97:ac:ef:c9:d8:d3:a8:ca:52:8b:5e:9d:05:f7:eb:0f:9f:e8:
         dc:32:73:bc:47:fe:80:f5:98:2a:1a:f4:90:49:83:31:08:01:
         a1:54:d0:26:e5:88:1c:7e:56:3a:4e:45:73:ad:11:ad:74:b0:
         b6:b5:8c:7f:fe:8c:ce:0a:06:b8:93:29:98:70:84:de:9c:72:
         b1:0d:d2:71:90:98:32:81:24:e7:8d:12:73:ac:f6:99:1c:7f:
         32:56:ec:23:60:db:a5:0e:30:c4:e9:f2:1b:e7:43:49:04:e5:
         3a:ba:0e:53:f7:55:1b:f3:ee:dc:b9:25:a3:4c:29:3d:7b:97:
         ba:29:ef:40:ca:0a:c0:bb:6a:a6:9f:b5:bf:5a:20:c9:0a:ee:
         b7:0f:aa:2b:79:de:d1:22:a5:98:da:bd:c2:62:40:36:7b:13:
         b5:34:ea:bb:4c:05:5b:43:4d:33:fd:63:1e:b2:f3:f8:07:18:
         27:83:33:ab:d6:f7:56:85:f9:01:60:ac:ff:9a:4b:1e:60:80:
         cb:a2:7b:73:8c:79:df:0d:ed:18:4c:d1:82:fd:63:51:c2:db:
         01:c2:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:51 2024 by rpki-client on console-ams.rpki-client.org