Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33372e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33372e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          MQeux3zH3Ju7c3S1lI/TJjD2fZSykXoiezwWqXQJzKY=
Subject key identifier:   26:77:E0:AC:9A:D9:1F:A6:CE:E7:59:9D:C5:77:D4:38:A6:0E:D5:83
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       7BCF2CD70679CEED6E5B3B7A0FCC594DE51D6A43
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33372e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:2c:d7:06:79:ce:ed:6e:5b:3b:7a:0f:cc:59:4d:e5:1d:6a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=2677E0AC9AD91FA6CEE7599DC577D438A60ED583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:63:16:9f:46:c0:19:f2:7c:4d:68:d4:3e:
                    99:11:f6:d2:32:3c:e8:68:30:40:81:e2:26:64:f7:
                    d8:49:31:c4:9b:c0:08:a7:08:76:f0:b5:32:13:fd:
                    c6:a9:c3:e7:77:02:33:f7:01:f7:72:76:b1:e0:84:
                    2e:c3:f0:24:64:36:a0:33:0a:01:98:6d:70:ae:a6:
                    a0:56:c2:40:19:f6:8c:64:32:74:44:97:c7:c8:6f:
                    2b:a3:d1:ba:0b:d4:ce:09:61:5b:fa:ac:e6:01:72:
                    87:0f:3f:96:4e:24:3d:ca:58:94:e2:ac:aa:73:18:
                    3f:57:d1:a7:41:2c:c6:ed:b1:fc:20:ad:a6:b4:92:
                    b3:93:56:91:36:60:cf:15:1a:8c:23:77:c0:36:e9:
                    3f:bb:34:59:19:4a:e2:ca:82:da:61:ba:a1:ec:db:
                    41:d5:84:b3:61:4c:89:a5:a3:0c:2f:92:5c:c5:4a:
                    55:1d:06:51:29:f3:1c:90:99:9c:eb:b1:97:eb:c2:
                    b4:87:01:40:59:13:83:1d:98:89:c3:ce:b6:e7:19:
                    da:20:99:86:47:a8:75:fa:cb:08:a8:b4:8a:85:3e:
                    3c:fd:3b:7c:95:e4:26:9a:82:a6:26:8c:7d:d4:59:
                    b1:28:7a:57:03:e4:c7:bd:ba:28:70:dc:af:6b:f4:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:77:E0:AC:9A:D9:1F:A6:CE:E7:59:9D:C5:77:D4:38:A6:0E:D5:83
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33372e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:ff:9c:9c:a7:e1:ea:43:32:83:87:01:ed:6e:7d:ff:d4:c4:
         df:4c:f5:e9:4f:90:a1:78:28:b2:36:f3:90:77:fe:46:42:c0:
         d8:a3:2c:35:a6:57:e6:03:63:d2:90:03:e3:b6:6b:35:e4:34:
         db:be:dc:81:19:73:0d:17:0c:7e:30:8f:cd:f6:8f:e9:bb:73:
         42:18:f9:35:90:e1:30:e8:30:82:f4:39:1c:76:a7:ec:99:0a:
         98:b0:ac:3e:c6:cb:3b:83:a5:1f:09:05:63:5b:28:ad:b2:36:
         6c:c3:57:1b:e5:d9:1d:00:cb:5a:36:9f:ba:bc:e1:d5:09:69:
         55:76:be:c7:99:28:cc:17:25:e8:28:47:04:a1:40:f5:ca:00:
         78:e4:a2:a9:ad:49:f1:c4:81:d3:82:cf:6e:5c:cf:98:a6:36:
         54:6e:2a:17:db:04:fd:cc:99:e8:6b:89:9e:06:21:0b:2b:a7:
         0a:19:03:41:72:15:74:d7:2f:79:7a:d5:16:97:58:1c:55:b9:
         df:cb:f0:63:09:49:d7:76:17:46:6a:96:fd:4c:aa:51:84:42:
         50:f1:81:6d:99:4d:54:47:2c:4b:df:b3:4b:01:12:b6:95:f7:
         fb:ae:7c:3f:db:17:d4:49:3d:b2:4d:4a:26:28:0d:ec:31:e7:
         34:bb:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:55 2024 by rpki-client on console-ams.rpki-client.org