Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33362e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33362e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          E2RJDDa0CBIVgDs1Oi2dIkW/0G88mzeKC5jlPmOd5gE=
Subject key identifier:   69:5D:92:23:DD:88:54:47:A1:28:94:E7:48:50:F1:F2:9F:6E:75:BE
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       4DECAD95C93D50907335289459297C4F16CF7D90
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33362e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:ad:95:c9:3d:50:90:73:35:28:94:59:29:7c:4f:16:cf:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=695D9223DD885447A12894E74850F1F29F6E75BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:83:ef:6d:55:bb:fa:d8:7d:c6:b8:df:3e:
                    ae:c7:1e:0c:17:6b:69:37:2d:89:09:47:57:14:31:
                    19:89:12:3c:1f:06:cc:dd:95:08:5d:08:dc:0c:ee:
                    d2:26:22:ac:ab:50:d5:3a:91:c1:4b:c1:46:a2:36:
                    c1:55:a6:51:f0:15:c2:9f:94:ae:df:cc:0c:f8:e9:
                    72:d3:1a:f2:00:5f:34:2b:cb:94:d4:33:71:66:71:
                    a6:12:7e:e5:ed:f8:ba:ed:74:ac:e2:31:6d:3d:8d:
                    d3:81:6e:f0:13:3c:db:d3:15:55:b3:b6:17:84:e0:
                    15:87:95:7d:0d:eb:a0:64:7f:74:a0:8b:7c:d8:b9:
                    d4:86:b1:a5:a6:3d:b7:8b:7e:22:31:0d:64:35:3a:
                    f0:c2:77:35:9d:be:a7:12:b0:fa:e5:96:fa:51:2f:
                    f0:2b:7d:da:10:ee:c5:11:34:97:38:81:35:09:b0:
                    f6:08:f5:06:58:89:71:f4:4b:7b:e8:11:ff:c9:06:
                    9e:f8:00:42:70:7d:5e:05:af:ab:31:c8:31:88:55:
                    30:70:a6:ec:e9:42:f4:ac:73:e6:14:63:c8:28:fc:
                    b6:b5:12:38:cd:37:be:cc:2d:ed:93:39:7e:f9:e2:
                    f6:ba:8c:4e:51:fe:70:d0:20:c5:bb:30:1d:3e:c1:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:92:23:DD:88:54:47:A1:28:94:E7:48:50:F1:F2:9F:6E:75:BE
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33362e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:57:dd:db:e5:b0:e5:88:7e:9e:f1:b7:f4:a8:b7:9d:54:
         22:21:fd:58:80:42:88:ac:20:79:42:1d:86:5c:6d:f7:5a:31:
         b0:23:dd:07:c0:3d:c7:73:05:1d:64:54:c6:40:2e:fa:e7:9d:
         20:c8:c6:91:a2:21:12:75:50:3c:d7:51:f1:4b:c9:d0:c6:0f:
         70:38:ec:c1:05:19:1f:8b:a8:d8:fc:90:70:60:ce:b1:4d:f5:
         6a:c6:5b:c9:8e:5b:06:18:4e:cc:38:c0:74:70:99:80:52:be:
         dc:45:a6:d7:a0:b5:3f:b8:43:f5:17:5a:08:b9:6b:b8:a9:5d:
         1a:aa:fc:5b:87:96:20:41:4c:41:94:80:15:a5:29:9f:5e:0e:
         98:e6:97:ba:07:8f:5c:54:bc:cd:20:bb:01:97:75:20:d3:6b:
         a4:0c:2d:a0:fd:ef:d5:32:14:a1:82:71:5d:91:c2:3a:18:4c:
         f4:0a:63:9f:b5:e4:df:23:06:93:61:93:4e:19:a2:c1:a6:63:
         ff:c2:e1:31:01:36:84:ee:9a:59:f9:d1:a2:41:f3:65:5f:10:
         7a:0a:af:a1:22:08:0e:50:17:dd:34:52:4d:37:0f:91:5f:25:
         ec:a3:d2:b6:59:8f:bf:bd:f9:45:c4:56:68:8b:26:c2:7a:1d:
         b3:a5:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org