Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33342e302f32332d3233203d3e20323632383839.roa
File:                     3137372e35342e33342e302f32332d3233203d3e20323632383839.roa (raw, json)
Hash identifier:          FxW7GtqWE3jEdgMtUK1xLffaNgAmyvlmLHFEymd/rTU=
Subject key identifier:   4C:A1:B5:38:DB:34:43:57:EC:93:77:34:55:D0:EB:AB:A2:50:41:52
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       52F8DB800E7C41D9EBEB9FBE0EDB3478082E9F5B
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33342e302f32332d3233203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f8:db:80:0e:7c:41:d9:eb:eb:9f:be:0e:db:34:78:08:2e:9f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=4CA1B538DB344357EC93773455D0EBABA2504152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:27:0a:6f:d8:5e:c0:dd:75:69:a3:ae:ef:
                    1b:b2:11:c8:b6:2f:f0:eb:8e:8d:d9:98:e2:dc:45:
                    e3:64:27:13:3d:4a:a0:bd:0f:c2:2b:90:f4:e3:82:
                    fe:5d:c3:a1:60:87:b7:fe:b9:8c:f1:02:4c:14:c5:
                    2b:84:83:28:f5:fb:c0:72:2c:05:8b:84:45:8c:6c:
                    52:60:91:9e:9d:8a:08:3d:29:ca:eb:ac:53:06:e1:
                    17:98:d1:16:48:a0:2d:4e:d8:27:f8:3f:b2:ed:9f:
                    21:17:72:81:cc:75:92:c5:e7:0c:45:a2:b9:d6:ef:
                    37:d3:12:6d:cc:dc:e8:3a:fb:48:e4:b1:bc:40:2e:
                    e6:a0:43:b9:db:64:34:43:b9:d3:e0:21:f6:f2:90:
                    fa:21:f7:83:d4:e2:02:ad:d9:52:c9:6e:a9:d2:a3:
                    8b:c3:fc:42:3c:f3:86:9c:08:ef:e3:1d:d2:20:27:
                    d5:c7:00:08:6b:df:6c:f7:35:35:ee:fa:57:36:2d:
                    1b:1a:e5:f7:75:2c:56:b1:18:b3:a1:08:5d:3f:84:
                    a8:23:8c:79:30:f6:9d:38:af:2c:ce:90:77:1d:64:
                    bc:94:5f:da:cb:1c:79:b3:fb:cb:41:03:07:5f:39:
                    36:57:f8:c4:03:c8:0e:d0:0b:00:d2:6f:b9:87:d7:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:B5:38:DB:34:43:57:EC:93:77:34:55:D0:EB:AB:A2:50:41:52
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33342e302f32332d3233203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:09:72:90:20:23:6d:5f:aa:18:81:08:88:2d:95:01:07:a3:
         41:fb:bd:5e:6b:23:5c:ac:c5:88:98:b0:f2:9a:39:79:c1:fd:
         ee:29:8c:2d:4e:b8:26:54:f0:ca:9b:8d:ca:3f:d8:40:4b:45:
         48:52:d6:d3:c5:a6:5b:23:9b:1a:78:78:88:90:96:b1:2d:e5:
         4f:ca:a5:d0:f1:b2:1c:cb:f6:75:18:b6:4c:9c:ee:b9:a8:f9:
         e6:10:21:ac:08:87:e2:33:e1:a2:b9:ac:72:39:e3:f5:5b:26:
         55:a4:ea:93:2c:03:c7:4d:0d:44:50:7c:dc:87:1a:21:76:47:
         de:56:6c:47:38:3f:2e:d7:5a:99:16:4b:37:f5:6b:0c:a1:d3:
         31:f3:16:f5:53:93:49:31:87:65:8a:74:cb:33:c9:54:6b:5e:
         df:8e:bb:3e:02:4b:ff:ff:70:1d:00:85:9f:30:01:16:24:4c:
         79:97:6a:ac:ab:f3:2b:1f:88:bf:84:93:fa:3b:56:ad:ee:9b:
         ab:5b:74:2b:14:d1:77:49:c8:d5:16:82:d0:7f:db:bc:9b:a8:
         46:b9:2f:a4:3a:b8:28:40:ce:10:a5:f6:01:4d:7a:ef:c2:d0:
         21:75:82:1f:fb:b3:b9:19:64:00:64:ff:9b:cf:d8:24:e5:1f:
         12:0e:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org