Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa
File:                     3137372e35342e34342e302f32332d3233203d3e20323632383839.roa (raw, json)
Hash identifier:          KEs4cDjUs6fBbOXCUasEIAZhyFxyLEPl4dOLl0SKF4Q=
Subject key identifier:   DA:37:A5:F6:4C:0C:B9:EF:B4:30:58:B2:6E:52:93:F1:81:D5:52:F6
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       31495706D41B5C581036485DB348B316EFA63AA3
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:49:57:06:d4:1b:5c:58:10:36:48:5d:b3:48:b3:16:ef:a6:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=DA37A5F64C0CB9EFB43058B26E5293F181D552F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:59:72:0b:df:52:b0:5b:4a:8f:18:36:8b:
                    87:db:9b:05:fa:d7:f9:51:bf:92:54:3f:9b:ad:b9:
                    42:41:2c:36:ff:db:d1:b7:e0:7c:dc:dc:bd:7f:c6:
                    e6:47:ba:2f:9e:93:96:1b:b2:ea:40:52:44:05:b6:
                    44:b2:45:f4:58:dc:0f:7f:e9:13:79:ee:ce:8c:33:
                    cc:50:a5:99:83:2a:0c:86:d8:9c:3b:fe:06:af:2b:
                    54:34:f0:3c:fb:2c:aa:45:00:80:eb:94:db:bb:ba:
                    9a:20:bd:88:49:0a:74:92:73:e2:6d:09:f4:82:a7:
                    8d:14:67:1f:1b:df:f1:a5:d2:70:0d:c2:33:17:de:
                    52:93:e1:52:90:34:c0:c2:97:d3:53:ec:42:97:12:
                    9a:27:a7:6a:5a:c7:7c:f6:09:a0:33:2f:f2:f9:43:
                    97:dc:37:cc:62:01:de:a3:ee:f3:79:5a:7b:fa:a7:
                    4a:26:66:22:59:bc:ca:69:1d:54:df:f8:44:0e:a3:
                    3f:74:4d:31:cd:79:22:48:a4:ee:17:09:e8:29:36:
                    9f:66:f9:b1:36:68:f0:79:fc:a9:f6:da:42:0c:89:
                    31:fb:1e:f2:6c:81:ad:b7:b1:59:56:77:55:24:a6:
                    60:44:a1:cd:20:fa:a9:e8:ae:b9:2b:37:17:de:5b:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:A5:F6:4C:0C:B9:EF:B4:30:58:B2:6E:52:93:F1:81:D5:52:F6
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:83:bb:99:03:0e:61:c6:8e:cb:b1:ae:36:e5:f9:0a:14:
         16:ae:03:28:b3:e4:7c:10:e3:3c:d8:68:1d:cb:cd:81:8b:03:
         de:29:24:fe:96:f5:6e:9d:f3:04:35:5a:24:b2:55:f2:3d:ee:
         2f:b6:dc:ac:c7:c5:5d:77:0a:b5:45:c9:59:2c:2f:6c:04:93:
         2b:84:60:8d:2a:d8:e5:99:c8:a3:02:a1:6b:7a:5c:74:2c:cc:
         e1:65:db:46:a1:8f:52:ca:f2:a7:0c:4c:67:cc:a1:6f:68:4d:
         53:28:27:8a:40:15:b8:0f:77:fc:e4:73:b0:76:b4:a7:3c:d1:
         d4:e4:e5:c1:a6:d4:21:ed:95:ab:6d:06:cc:d5:de:42:f5:b9:
         d0:89:fd:0e:21:e5:53:8e:c8:c9:fc:7a:bc:fc:1d:c8:7a:6b:
         16:e7:09:06:f6:53:d1:46:a1:42:3b:5d:ed:af:28:a4:96:56:
         93:b3:ad:87:fd:8a:ad:94:b3:de:52:f8:49:c9:9f:3f:a1:3e:
         a4:a4:6d:23:09:0d:f6:c1:4a:b2:1b:80:b9:66:e5:6d:d4:8f:
         45:01:5b:55:07:1a:ab:ca:60:92:3b:66:51:21:d1:14:66:64:
         57:d3:b8:84:34:e4:91:b9:4f:86:b6:20:fb:a6:01:32:6a:14:
         94:e6:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org