Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231342e302f32332d3233203d3e20323733333039.roa
File:                     3137372e3232322e3231342e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          IwhPXOXM8sYbncM4ABtHOUPx8KpYu0Zn+EJrdyAWZJE=
Subject key identifier:   79:C6:13:FA:DB:06:3F:90:F5:D4:7B:75:39:29:92:F2:D1:8D:7C:1D
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       2DEA949E793364D66389156A8A41DF44D91FF425
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231342e302f32332d3233203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:33:29 +0000
ROA not before:           Thu 09 May 2024 13:28:29 +0000
ROA not after:            Thu 08 May 2025 13:33:29 +0000
asID:                     273309
IP address blocks:        177.222.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ea:94:9e:79:33:64:d6:63:89:15:6a:8a:41:df:44:d9:1f:f4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:28:29 2024 GMT
            Not After : May  8 13:33:29 2025 GMT
        Subject: CN=79C613FADB063F90F5D47B75392992F2D18D7C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:ac:aa:d6:ad:7f:6e:d9:78:cc:db:76:3d:
                    23:bb:10:37:6c:53:67:a3:47:a8:fb:0b:51:7d:79:
                    c3:60:e7:1d:37:a4:9a:51:9c:ac:58:76:4b:22:00:
                    1b:d4:d6:04:5a:19:18:fe:77:45:0c:c6:02:de:0e:
                    55:77:34:ea:74:f7:b5:b0:a9:ff:0c:01:3f:37:b1:
                    5f:cd:15:14:7d:f4:f0:8c:7f:f0:08:6a:d2:5a:77:
                    3d:25:06:08:3a:e2:bd:0f:f6:ab:22:00:0c:06:cd:
                    df:43:36:0c:3b:f2:25:fa:85:44:ad:97:7f:37:0d:
                    78:e5:57:82:51:fc:7f:ba:3d:6c:45:62:8f:b7:79:
                    04:92:d5:b7:b3:f3:58:8f:e5:79:59:79:7e:ab:d2:
                    e7:33:d7:e9:c4:d6:46:c6:bd:03:b3:06:7e:c0:95:
                    48:35:d7:b7:64:ff:65:42:93:ad:18:01:d9:07:92:
                    52:5d:a8:0f:44:f6:9a:2e:fd:4e:53:cb:3b:e2:81:
                    df:20:78:d4:0a:bc:8a:2d:81:f6:71:7b:0e:50:55:
                    27:b8:7f:82:da:ff:fa:9a:82:93:3d:88:17:58:74:
                    ed:c5:82:42:6d:e8:9f:e5:11:ee:13:e3:f0:fa:83:
                    4f:04:92:bc:5a:e7:8d:f5:51:88:62:50:70:59:6f:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:13:FA:DB:06:3F:90:F5:D4:7B:75:39:29:92:F2:D1:8D:7C:1D
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231342e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:7d:6e:46:5a:46:40:63:43:3d:92:d3:51:c0:b2:74:8f:
         ab:7f:1b:f3:00:4f:ca:dc:bc:50:97:7a:ab:5d:42:8e:63:91:
         4a:bd:dd:3c:b7:2b:b5:24:7f:33:72:21:ae:c7:55:3f:62:7e:
         7a:3b:d0:b8:18:9a:cd:f2:4d:b9:f9:3d:ec:68:5d:db:b1:3b:
         01:df:e3:89:24:29:f2:21:72:5f:4b:90:10:8c:f9:b1:40:f0:
         81:9e:e8:79:cf:03:03:bd:7c:7b:8e:95:0c:af:6e:40:fd:0e:
         26:8d:bc:b3:4c:5e:44:36:7a:3a:cd:e8:46:08:fc:6e:96:97:
         9b:99:1c:40:33:29:7d:11:fa:9f:a9:2f:99:70:57:c3:ed:1f:
         28:8e:4b:cc:9a:30:61:f7:e4:0f:54:e0:c7:41:8c:a4:1e:0b:
         77:c6:e9:ce:df:cb:85:27:50:78:1c:9d:65:53:ae:df:ad:f4:
         ea:4d:70:90:dc:bc:09:35:86:53:6e:a7:35:f6:78:d4:13:83:
         ca:81:d5:e0:7c:a7:68:81:db:8a:34:6e:67:ca:81:fa:5c:e8:
         9f:fe:81:07:60:e2:f8:db:ae:52:6f:fe:4a:cc:65:36:e7:6a:
         a3:b6:c6:07:2c:df:35:04:60:bc:d6:00:c6:71:90:d9:44:46:
         50:41:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org