Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32332d3233203d3e20323632383839.roa
File:                     3137372e35342e34302e302f32332d3233203d3e20323632383839.roa (raw, json)
Hash identifier:          +rjs2nKUFzyZ5IQ7hm3DgmRqh/bGaVQ0gzso7SkWT7Y=
Subject key identifier:   53:CB:93:DF:7B:63:31:B3:2B:42:F0:9E:6D:06:5B:2E:52:86:1D:24
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       23192AF86133039A33D449CA0E909ABE13C868A6
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32332d3233203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:2a:f8:61:33:03:9a:33:d4:49:ca:0e:90:9a:be:13:c8:68:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=53CB93DF7B6331B32B42F09E6D065B2E52861D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:bc:fd:d9:88:84:c8:73:2f:2b:1e:28:20:
                    88:d2:60:5d:74:a2:0b:6e:93:26:8f:2d:32:81:cc:
                    a3:39:56:cf:b0:f1:89:c7:c2:05:eb:b4:bb:9a:33:
                    a3:e7:b3:b2:e2:77:b6:97:98:57:c8:6a:07:40:da:
                    61:67:30:23:70:57:ee:c8:46:d5:56:89:d0:41:a0:
                    54:2b:a6:c0:ce:05:f1:f2:63:f5:c8:10:ad:1f:ca:
                    fa:2a:13:1c:a5:a1:8f:b1:df:ab:83:12:9a:a1:0e:
                    4a:5f:7e:66:df:84:2f:6b:fd:79:8a:f2:e0:7e:c8:
                    4b:c0:98:38:b8:b3:ae:51:bf:f5:b5:eb:fd:ea:80:
                    22:63:1e:5a:5d:0d:21:b7:fc:52:40:c8:e3:30:91:
                    08:eb:06:12:89:1a:3d:19:fc:fc:f3:36:7c:12:c0:
                    c7:9e:d4:d9:02:b5:4e:d8:aa:9f:19:d8:4a:a6:0c:
                    45:97:8f:d9:13:13:63:b5:be:1f:51:17:e9:68:f9:
                    e7:aa:c0:78:17:59:54:a0:1d:dc:50:c1:2e:fa:2c:
                    e0:b5:dc:55:39:ae:19:51:47:99:fa:19:bb:d1:7f:
                    a6:4a:26:b4:cf:22:8f:06:60:62:4a:68:62:5a:d8:
                    e0:5c:c8:0b:25:59:66:94:2d:50:bf:48:90:a4:c1:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:93:DF:7B:63:31:B3:2B:42:F0:9E:6D:06:5B:2E:52:86:1D:24
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32332d3233203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:a0:0c:bf:b4:e7:73:79:89:0e:2c:98:7b:c6:aa:ca:36:7b:
         15:d0:82:df:9a:9a:3d:38:56:0c:23:e4:e6:db:ed:a0:ef:b8:
         de:ff:2a:2d:f9:d2:be:50:47:77:78:72:29:9d:d0:62:b4:30:
         81:47:6c:9c:74:6a:9f:d8:7b:ca:40:d1:2b:eb:83:f3:50:c8:
         d7:79:a8:4a:60:83:a7:00:a8:ff:3f:5b:29:6c:3d:01:b9:96:
         be:5a:84:a3:fb:e0:27:e0:c4:19:15:58:14:cf:9d:3e:b9:9c:
         1c:f6:6d:c3:2c:31:e9:e0:08:a7:ef:68:9f:83:82:dc:1f:d1:
         1d:d0:38:73:de:2d:d6:62:76:62:8f:01:3f:ee:3d:30:48:48:
         4d:3e:78:f2:8d:35:55:33:59:81:19:97:8e:f6:56:8b:69:2b:
         5c:40:c0:99:0c:ac:43:51:f7:92:f4:ba:b0:7f:f6:d2:0a:27:
         64:06:87:e6:e3:a8:b9:03:55:b3:ef:ae:66:11:7a:db:80:0e:
         91:1c:6f:6b:61:2a:b2:48:e5:e1:58:73:08:fd:27:83:18:b1:
         c9:5a:9f:d5:6d:86:59:a5:4a:df:13:fa:e8:f2:2b:64:c9:ef:
         ec:44:12:b0:55:04:45:bc:df:42:18:68:45:04:12:5b:c3:70:
         f9:4a:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:39 2024 by rpki-client on console-ams.rpki-client.org