Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33392e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33392e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          VkKKywDyqIwP6blUo73uNBUmOa2snxTnnWTGCt03K08=
Subject key identifier:   39:F8:8A:CA:DD:2C:45:8F:A8:B9:F7:D1:1B:95:5F:F8:28:AE:B7:D7
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       1065A3FDB8A70CAA55FF2FBCA5358130F9EDA8CE
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33392e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:65:a3:fd:b8:a7:0c:aa:55:ff:2f:bc:a5:35:81:30:f9:ed:a8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=39F88ACADD2C458FA8B9F7D11B955FF828AEB7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:4b:c9:ca:57:1e:2b:d7:2e:60:90:3f:22:
                    70:9d:22:9d:9c:3e:32:51:c3:0f:78:8f:4d:c4:c9:
                    31:1e:f3:b1:56:71:71:84:86:b0:0d:21:16:71:f7:
                    d0:12:12:a5:c9:30:c7:90:33:be:2a:ea:50:85:51:
                    a7:a9:7b:ef:30:42:52:37:04:49:b5:60:91:1b:9c:
                    6e:a3:31:34:7c:5f:ba:92:ba:2e:48:43:4a:8c:a3:
                    fc:f0:ca:f4:d4:34:b2:4a:9d:0c:c3:6d:d2:a9:d2:
                    70:68:90:ea:e6:57:ed:8e:93:88:ce:1c:8b:b9:cf:
                    f0:0d:ce:de:1f:9c:8c:93:a3:ad:fd:40:a9:9e:01:
                    a2:1c:b1:82:72:ad:81:ae:c3:09:6f:34:f0:51:4f:
                    28:33:a2:92:ca:e3:c1:7c:48:d9:29:dd:35:5a:37:
                    7b:fd:28:ab:c7:55:dd:01:1b:0b:4c:e5:3d:59:4f:
                    d2:ef:96:a8:93:88:68:2c:ce:50:90:e0:32:41:64:
                    fe:50:89:e1:cc:a6:21:72:bf:d1:9c:4a:77:6b:bd:
                    5e:11:d2:b9:03:41:8c:2e:86:c9:b1:71:7e:62:12:
                    73:40:be:9e:32:93:3d:8c:18:81:24:c5:eb:a1:fc:
                    8b:fb:74:07:ae:a1:57:6f:b1:96:c0:6d:0f:8b:c1:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F8:8A:CA:DD:2C:45:8F:A8:B9:F7:D1:1B:95:5F:F8:28:AE:B7:D7
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33392e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:22:4e:8b:63:81:30:34:d1:9b:76:2a:bf:9f:48:4a:bf:2b:
         c1:96:e0:01:f0:64:8e:a9:7a:cc:1e:66:e9:8d:5c:d5:a8:30:
         5a:82:45:76:d3:3a:91:6a:42:78:62:cb:23:51:e4:34:f9:55:
         63:0c:99:cc:db:7b:50:4e:ec:fe:90:3b:3d:5c:7b:a4:9a:d7:
         b9:65:04:2b:e6:cf:09:61:7a:2f:d3:5a:a7:5c:4a:b9:ff:77:
         9a:9b:53:01:1d:e2:c7:83:10:80:87:35:e6:ee:67:fc:b1:2f:
         0c:fe:8b:64:15:0a:e4:7a:b0:27:cd:6c:dd:44:4f:cf:a1:db:
         08:d0:5e:3c:3a:72:4d:a0:27:94:e6:7b:52:ef:54:7a:8a:d8:
         9f:85:61:c1:3b:8a:02:c8:e5:8c:ea:29:6c:13:09:28:46:31:
         f4:d5:fe:ef:77:13:1d:a8:72:20:7c:de:89:c5:88:0b:f6:2d:
         10:8f:5b:19:3b:c2:c9:3a:f7:f9:16:ad:b3:39:6c:92:d0:3b:
         f5:03:4a:82:21:a4:a5:97:8c:85:31:68:87:ce:d6:29:5a:50:
         39:05:ba:1a:2f:7a:c1:b2:8f:8f:d0:38:aa:ba:16:92:f5:d0:
         37:6f:4c:4d:34:f9:96:a2:e4:bd:a8:f2:be:b5:2d:26:9c:1a:
         46:88:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:55 2024 by rpki-client on console-ams.rpki-client.org