Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33382e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33382e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          QzuEDmAasQY4BhArHr0Ft0xafTzVCC7BHGaYb+kDrMM=
Subject key identifier:   A8:87:27:4C:E9:79:11:8B:1B:93:F9:35:BB:87:1F:FF:A2:2C:FE:D1
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       0F8D9F9198D880A2F03940A8D30A61B91F8747B1
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33382e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8d:9f:91:98:d8:80:a2:f0:39:40:a8:d3:0a:61:b9:1f:87:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=A887274CE979118B1B93F935BB871FFFA22CFED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:5c:da:df:b6:fc:b5:49:06:51:31:c5:8a:
                    b9:77:92:0b:eb:1e:2a:f6:eb:55:f6:03:0b:78:c4:
                    d5:00:93:cb:80:44:cc:d5:3e:4b:44:46:a9:fe:44:
                    7c:21:03:7b:c5:8e:ca:35:61:68:a7:60:5e:1e:b5:
                    fb:dd:39:05:bf:93:0c:b8:20:9e:63:a1:f4:fe:31:
                    b8:16:db:45:b5:33:a1:8c:b4:02:af:b1:20:52:d1:
                    83:4a:55:9f:7c:71:f2:b4:37:dc:13:f0:3a:6a:2d:
                    b4:4f:3c:a2:ac:97:3c:5b:a2:d2:ee:6d:45:60:18:
                    aa:98:61:bd:7d:4f:26:47:b3:dc:03:bd:cb:ec:b3:
                    61:72:1b:d9:91:39:fb:6c:69:b6:16:77:5b:bc:50:
                    16:d7:08:91:5b:73:dd:ca:27:e2:a3:0d:0d:b3:b3:
                    a8:89:d1:29:e6:3c:74:5b:1d:59:31:d3:8f:aa:a7:
                    9c:86:b9:3b:51:61:d3:6d:79:84:ee:73:fb:15:7a:
                    c1:fd:28:dc:b3:e1:92:ff:da:8c:7a:05:5d:8e:77:
                    15:2d:68:23:81:4c:c3:83:bf:21:91:c3:0e:c8:b9:
                    46:f1:af:f6:62:76:82:5d:56:4a:19:bd:66:65:2e:
                    c7:e1:16:d0:70:91:af:81:bc:4b:cf:26:c2:5e:88:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:27:4C:E9:79:11:8B:1B:93:F9:35:BB:87:1F:FF:A2:2C:FE:D1
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33382e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:48:32:61:d7:d0:49:f8:76:5c:9f:5a:4c:df:c7:20:c4:
         5d:0d:d1:d0:59:a0:cf:84:a6:28:b6:5c:83:34:24:06:0e:24:
         43:6a:3a:8a:3d:78:85:ea:b7:63:7d:ea:3c:6c:19:92:69:be:
         13:d5:65:29:c7:df:f4:c7:82:1c:f0:8d:3b:8a:e5:51:d5:32:
         15:50:04:8c:4e:7e:c0:82:65:5a:c6:f4:4a:2f:ef:b5:07:e0:
         a8:54:14:1c:cf:ac:f3:89:6e:c4:d5:ab:e0:d9:9b:32:69:8d:
         a9:e4:a3:b8:7d:6e:d3:2d:ae:30:0a:cb:5d:fe:1a:c3:10:6a:
         35:23:d8:99:0e:03:04:6b:f2:37:0e:8e:b1:04:c8:cd:2d:3f:
         9f:51:61:d1:8f:5d:3d:92:ec:66:03:c6:8d:a0:5c:a6:9c:c9:
         d1:f2:32:57:29:43:21:6b:43:f1:80:04:1e:f4:f6:b9:d8:6c:
         83:89:f8:f9:4c:fe:c9:3c:f4:77:c2:da:42:b6:0c:d2:87:85:
         71:90:3e:34:69:3e:de:f3:ee:a8:0d:9d:6f:c1:1e:7a:e4:0d:
         67:c5:52:dd:43:c9:7d:9a:17:19:4c:23:ad:fd:18:13:5a:19:
         2f:61:3f:78:5c:eb:c2:1f:03:2a:71:0d:51:59:fe:38:e0:24:
         3c:49:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:55 2024 by rpki-client on console-ams.rpki-client.org