Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34352e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e34352e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          V5lNVhnPnMsHAxXjHSN4V59HCCuMulYBxJyHFyj/AXE=
Subject key identifier:   2D:81:5D:F1:17:68:20:A7:D3:6C:FF:67:F5:D5:C5:E5:09:FD:F8:BD
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       44849C2263A8C88484406D22944035A976A012B0
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34352e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:84:9c:22:63:a8:c8:84:84:40:6d:22:94:40:35:a9:76:a0:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=2D815DF1176820A7D36CFF67F5D5C5E509FDF8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:4d:e1:24:4c:f5:74:9e:13:b6:ac:7a:93:
                    a0:e2:f7:8c:86:e1:36:c9:ba:23:a8:f3:77:b6:96:
                    a3:fe:8b:a8:67:78:15:9f:c8:e4:48:86:76:32:df:
                    a1:bc:65:07:53:05:64:3c:0b:56:dc:2e:51:48:8e:
                    35:0d:3f:f4:f1:72:ae:fb:93:fa:93:d7:ca:d3:37:
                    84:50:30:24:e3:4e:29:6b:8a:04:03:d1:e3:5e:f6:
                    69:ff:c1:95:0d:3d:5b:c7:cb:ac:12:92:b4:69:42:
                    39:9a:28:1f:d2:ca:ae:ce:49:99:17:b5:bb:82:a0:
                    3c:1b:c2:eb:c4:28:67:a3:d8:81:d9:8f:6b:bc:e9:
                    28:21:a6:d1:2d:86:25:d6:d1:b2:1e:4e:06:9a:e5:
                    44:0f:7c:63:8a:93:8d:d4:90:ff:b5:3b:59:4e:89:
                    2f:fb:40:0f:73:f5:b9:7d:8c:eb:30:5a:df:86:c4:
                    12:b1:22:d1:db:c9:b9:c4:71:67:8b:80:55:51:3c:
                    76:b1:58:1a:ab:2f:d9:97:dc:77:89:8e:2d:9c:9a:
                    f7:92:6a:69:41:13:30:5f:9c:67:f0:d3:3f:4d:c6:
                    b5:25:fc:fb:ed:6b:c7:3b:6c:c1:b5:be:d4:51:7f:
                    ee:2b:40:18:5a:fe:b0:be:cd:5a:d5:de:69:81:f9:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:81:5D:F1:17:68:20:A7:D3:6C:FF:67:F5:D5:C5:E5:09:FD:F8:BD
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34352e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:7c:f2:ab:05:a5:40:57:d9:49:e8:62:37:e1:28:1d:e0:
         00:e9:3e:67:4d:99:34:47:53:2f:de:8f:e5:1b:fa:5d:50:29:
         ff:0f:20:d0:76:ea:6b:99:f0:15:f9:6c:1b:ef:ba:4d:0b:17:
         a3:2c:61:04:33:78:06:71:5d:03:32:25:d2:d6:f0:3f:f9:44:
         1e:4a:2e:c9:23:bd:fc:bb:b0:fd:47:40:3d:a4:36:93:1e:51:
         06:33:0d:27:26:98:c3:c6:db:50:4d:bc:11:f9:4a:54:f7:43:
         f0:e7:d3:c5:3e:6f:37:d6:15:2f:75:08:d0:81:85:6a:7c:de:
         8e:99:93:4b:2d:4e:17:f8:3d:cd:cd:01:88:a1:c4:89:ef:75:
         40:2d:28:86:55:96:cf:1e:60:88:70:75:df:de:d2:66:9e:3e:
         30:6c:42:ee:74:44:23:1d:35:eb:c1:ca:49:b9:f2:93:dd:39:
         ca:47:34:e2:47:86:64:ad:80:ab:3c:d1:dd:7e:ff:96:c6:3e:
         4c:8e:12:8c:bb:0e:f6:99:b1:1e:a3:70:54:c3:4b:94:b9:b4:
         e4:af:bc:e0:9d:4e:97:af:c7:97:b8:d3:6c:1d:38:7c:e5:ac:
         36:bc:ca:75:92:20:ee:46:8f:e2:0c:7a:e6:da:f8:62:b8:7e:
         bb:88:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org